Insecure Loading of Dynamic Link Libraries in Windows Applications

US-CERT is aware of a class of vulnerabilities related to how some Windows applications may load external dynamic link libraries DLLs. When an application loads a DLL without specifying a fully qualified path name, Windows will attempt to locate the DLL by searching a defined set of directories. ...

Cross-site Request Forgery (CSRF) Vulnerabilities in Kandidat CMS

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Kandidat CMS which could be exploited to perform cross-site request forgery attacks. 1 Cross-site request forgery CSRF in Kandidat CMS 1.1 The vulnerability exists due to insufficient validation of the request...

MyPhpAuction 2 0 1 0 SQL injection vulnerability-vulnerability warning-the black bar safety net

MyPhpAuction 2 0 1 0 productdesc. the php pageSQL injectionattacks can obtain user account passwords. http://www.myhack58.com/productdesc.php?id=-5+union+all+select+1,2,concatadminname,0x3a,pwd,4,5,6,7,8,9,1 0,1 1,1 2,1 3,1 4,1 5,1 6,1 7,1 8,1 9,2 0,2 1,2 2,2 3,2 4,2 5,2 6,2 7,2 8,2 9,3 0,3 1,3 2...

Softbiz Article Directory Blind SQL Injection

=========================================================== Title: Article Directory sbizid Blind SQL Injection Vuln Script: Article Directory Price: $65 Link: http://www.softbizscripts.com/article-management-script.php =========================================================== Author: BorN To...

Softbiz Article Directory Script (sbiz_id) Blind SQL Injection

Exploit for php platform in category web applications ============================================================== Softbiz Article Directory Script sbizid Blind SQL Injection ============================================================== =========================================================...

Softbiz Article Directory Script - sbiz_id Blind SQL Injection

Softbiz Article Directory Script - sbizid Blind SQL Injection =========================================================== Title: Article Directory sbizid Blind SQL Injection Vuln Script: Article Directory Price: $65 Link: http://www.softbizscripts.com/article-management-script.php...

ifnuke - Multiple Vulnerabilities

''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | img634150553723437500.aspx That 634150553723437500 value is DateTime.Now.Ticks.ToString and will be built in this file : http://Example.com/Modules/PreDefinition/PhotoUpload.ascx.cs...

Softbiz Article Directory Script - 'sbiz_id' Blind SQL Injection

=========================================================== Title: Article Directory sbizid Blind SQL Injection Vuln Script: Article Directory Price: $65 Link: http://www.softbizscripts.com/article-management-script.php =========================================================== Author: BorN To...

CVE-2010-2917

Multiple cross-site scripting XSS vulnerabilities in index.php in AJ Square AJ Article 3.0 allow remote attackers to inject arbitrary web script or HTML via the 1 emailid, 2 fname, 3 lname, 4 company, 5 address1, 6 address2, 7 city, 8 state, 9 zipcode, 10 phone, and 11 fax parameters in an update...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in index.php in AJ Square AJ Article 3.0 allow remote attackers to inject arbitrary web script or HTML via the 1 emailid, 2 fname, 3 lname, 4 company, 5 address1, 6 address2, 7 city, 8 state, 9 zipcode, 10 phone, and 11 fax parameters in an update...

CVE-2010-2917

Multiple cross-site scripting XSS vulnerabilities in index.php in AJ Square AJ Article 3.0 allow remote attackers to inject arbitrary web script or HTML via the 1 emailid, 2 fname, 3 lname, 4 company, 5 address1, 6 address2, 7 city, 8 state, 9 zipcode, 10 phone, and 11 fax parameters in an update...

CVE-2010-2917

AJ Square AJ Article 3.0 contains multiple XSS flaws in index.php exploitable via update action parameters (emailid, fname, lname, company, address1, address2, city, state, zipcode, phone, fax). Root cause is unsanitized input leading to script/HTML injection. CVE-2010-2917 has multiple reference...

Yahoo Messenger WScript.Shell ActiveX control command execution

Added: 07/29/2010 Background Yahoo! Messenger is an instant messaging application. It includes the WScript.Shell ActiveX control. Problem The Execute method of the WScript.Shell ActiveX control allows command execution when a malicious web page is loaded in Internet Explorer. Resolution Set the...

Yahoo Messenger WScript.Shell ActiveX control command execution

Added: 07/29/2010 Background Yahoo! Messenger is an instant messaging application. It includes the WScript.Shell ActiveX control. Problem The Execute method of the WScript.Shell ActiveX control allows command execution when a malicious web page is loaded in Internet Explorer. Resolution Set the...

BS Scripts Directory - 'articlesdetails.php' SQL Injection

Exploit Title: BS Script Directory articlesdetails remote SQL injection vulnerability Date: 16th july 2010 Author: k4k4shi Critical:high contact:lvyatlivedotde Price : 24.95 $ Software Link:http://www.brotherscripts.com/ Shoutz to : http://ahbab-dz.com/fun and all members Exploit :...

Campsite CMS - Remote Persistent Cross-Site Scripting

Campsite CMS - Remote Persistent Cross-Site Scripting Exploit Title: Campsite CMS remote Persistent XSS vulnerability Date: 15th july 2010 Author: D4rk357 Critical:Low Contact:bd4rk357atyahoodotin Software Link:bhttp://www.sourcefabric.org/en/home/web/78/Demo--Documentation.htm?tpl=18 Greetz...

AJ Article Cross Site Scripting

1 1 0 I'm Sid3^effects member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 vendor URL :http://www.ajsquare.com/ Google Dork :Powered By: AJ Square Inc Author : Sid3^effects aKa HaRi special thanks to : r0073r inj3ct0r.com,L0rd...

AJ Article 3.0 - Cross-Site Scripting

AJ Article 3.0 - Cross-Site Scripting 1 1 0 I'm Sid3^effects member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 vendor URL :http://www.ajsquare.com/ Google Dork :Powered By: AJ Square Inc Author : Sid3^effects aKa HaRi special thanks to : r007...

AJ Article 3.0 - Cross-Site Scripting

1 1 0 I'm Sid3^effects member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 vendor URL :http://www.ajsquare.com/ Google Dork :Powered By: AJ Square Inc Author : Sid3^effects aKa HaRi special thanks to : r0073r inj3ct0r.com,L0rd...

Minify4Joomla Cross Site Scripting

======================================================= Minify4Joomla Upload and Persistent XSS Vulnerability ======================================================= Name : Minify4Joomla Upload and Persistent XSS Vulnerability Date : july 9,2010 Critical Level : HIGH vendor URL...