1393 matches found
Comicsense 0.2 - index.php?epi SQL Injection (2)
Comicsense 0.2 - index.php?epi SQL Injection 2 !/usr/bin/perl -w ComicSense 0.2 SQL Injection Exploit Discovered by: s0cratex Payload: Admin Username & Hash Retrieval Website: http://www.w4ck1ng.com Original Advisory: http://seclists.org/bugtraq/2007/Jun/0063.html http://milw0rm.com/exploits/4035...
RevokeBB Blind SQL Injection / Hash Extractor
!/usr/bin/php -q -d shortopentag=on ? echo " ------------------------------------------------------------- RevokeBB = 1.0 RC4 Blind SQL Injection / Hash Retrieve Exploit Site: http://www.revokesoft.net by BlackHawk [email protected] http://itablackhawk.altervista.org Thanks to rgod for the php...
RevokeBB 1.0 RC4 - Blind SQL Injection Hash Retrieve
RevokeBB 1.0 RC4 - Blind SQL Injection Hash Retrieve !/usr/bin/php -q -d shortopentag=on Thanks to rgod for the php code and Marty for the Love ------------------------------------------------------------- "; if $argc 126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2...
mlf17-sql.txt
!/usr/bin/perl -w My Little Forum = 1.7 SQL Injection Exploit Discovered by: Silentz Payload: Admin Username & Hash Retrieval Website: http://www.w4ck1ng.com Vulnerable Code user.php: if isset$GET'id' $id = $GET'id'; switch $action case "get userdata": if empty$id $id = $userid; else $result =...
dokeos180-sql.txt
!/usr/bin/perl -w Dokeos alertdocument.cookie Also, the amount of XSS vulnerabilites in this application is truely unbelievable...
My Little Forum 1.7 - user.php?id SQL Injection
My Little Forum 1.7 - user.php?id SQL Injection !/usr/bin/perl -w My Little Forum = 1.7 SQL Injection Exploit Discovered by: Silentz Payload: Admin Username & Hash Retrieval Website: http://www.w4ck1ng.com Vulnerable Code user.php: if isset$GET'id' $id = $GET'id'; switch $action case "get...
Dokeos <= 1.6.5 (courseLog.php scormcontopen) SQL Injection Exploit
Exploit for unknown platform in category web applications =================================================================== Dokeos = 1.6.5 courseLog.php scormcontopen SQL Injection Exploit =================================================================== !/usr/bin/perl -w Dokeos = 1.6.5 SQL...
Dokeos <= 1.6.5 (courseLog.php scormcontopen) SQL Injection Exploit
No description provided by source. !/usr/bin/perl -w Dokeos = 1.6.5 SQL Injection Exploit Discovered by: Silentz Payload: Admin Username & Hash Retrieval Website: http://www.w4ck1ng.com Vulnerable Code courseLog.php: if $GET'scormcontopen' includeonceapigetlibrarypath.'/database.lib.php';...
Dokeos 1.8.0 - my_progress.php?course SQL Injection
Dokeos 1.8.0 - myprogress.php?course SQL Injection !/usr/bin/perl -w Dokeos = 1.8.0 SQL Injection Exploit Discovered by: Silentz Payload: Admin Username & Hash Retrieval Website: http://www.w4ck1ng.com Vulnerable Code myprogress.php: ifisset$GET'course' $sqlInfosCourse = "SELECT course.code,...
NavBoard 2.6.0 - Remote Code Execution
NavBoard 2.6.0 - Remote Code Execution "; print ""; print ""; print "Main forum settings"; print ""; print "Board Title"; print ""; print ""; print ""; print "Admin email address blank will not display"; print ""; print "input type=tex...
Dokeos 1.8.0 - 'my_progress.php?course' SQL Injection
!/usr/bin/perl -w Dokeos = 1.8.0 SQL Injection Exploit Discovered by: Silentz Payload: Admin Username & Hash Retrieval Website: http://www.w4ck1ng.com Vulnerable Code myprogress.php: ifisset$GET'course' $sqlInfosCourse = "SELECT course.code, course.title,course.dbname,CONCATuser.firstname,'...
Dokeos <= 1.8.0 (my_progress.php course) Remote SQL Injection Exploit
Exploit for unknown platform in category web applications ===================================================================== Dokeos = 1.8.0 myprogress.php course Remote SQL Injection Exploit ===================================================================== !/usr/bin/perl -w Dokeos = 1.8.0...
btitracker-sql.txt
BtiTracker =v1.4.1 Remote SQL Injection Exploit Discovered by: m@ge|ozz - [email protected] Vulnerabitity: Remote Sql Injection / Problem: Any user can be Administrator Website Vendor: http://www.btiteam.org Vulnerable Code accountchange.php: if isset$GET"style" @mysqlquery"UPDATE users SET...
BtiTracker <= 1.4.1 (become admin) Remote SQL Injection Vulnerability
No description provided by source. BtiTracker =v1.4.1 Remote SQL Injection Exploit Discovered by: m@ge|ozz - [email protected] Vulnerabitity: Remote Sql Injection / Problem: Any user can be Administrator Website Vendor: http://www.btiteam.org Vulnerable Code accountchange.php: if isset$GET"style"...
faqengine-sql.txt
!/usr/bin/perl -w FAQEngine = v4.16.03 SQL Injection Exploit Discovered by: Silentz Payload: Admin Username & Hash Retrieval Website: http://www.w4ck1ng.com Vulnerable Code question.php: $sql = "select from ".$tableprefix."questions where publish=1 and questionref=$questionref order by enterdate...
FAQEngine <= 4.16.03 (question.php questionref) SQL Injection Exploit
No description provided by source. !/usr/bin/perl -w FAQEngine = v4.16.03 SQL Injection Exploit Discovered by: Silentz Payload: Admin Username & Hash Retrieval Website: http://www.w4ck1ng.com Vulnerable Code question.php: $sql = "select from ".$tableprefix."questions where publish=1 and...
RedLevel Advisory #015 - Redoable 1.2 Cross-Site Scripting Vulnerability (patch included)
note to editors: this patch resolves this vulnerability: http://redlevel.org/wp-content/uploads/patch.zip !-- Redoable 1.2 - Cross-Site Scripting Vulnerability --------------- Vulnerable Code --------------- header.php line 6: ... elseif issearch ? Search for ?php echo $s ... searchloop.php line...
FAQEngine 4.16.03 - question.php?questionref SQL Injection
FAQEngine 4.16.03 - question.php?questionref SQL Injection !/usr/bin/perl -w FAQEngine = v4.16.03 SQL Injection Exploit Discovered by: Silentz Payload: Admin Username & Hash Retrieval Website: http://www.w4ck1ng.com Vulnerable Code question.php: $sql = "select from ".$tableprefix."questions where...
SimpNews 2.40.01 - newnr SQL Injection
SimpNews 2.40.01 - newnr SQL Injection !/usr/bin/perl -w SimpNews = 2.40.01 SQL Injection Exploit Discovered by: Silentz Payload: Admin Username & Hash Retrieval Website: http://www.w4ck1ng.com Vulnerable Code print.php: $sql = "select from ".$tableprefix."data where newsnr=$newsnr"; PoC:...
Monalbum 0.8.7 Remote Code Execution Exploit
Exploit for unknown platform in category web applications ============================================ Monalbum 0.8.7 Remote Code Execution Exploit ============================================ "; if isset$mod //submit $fichier = "../conf/config.inc.php"; $fd = fopen$fichier, "w"; $gcfgBase =...