Nephp Publisher v4.5.x SQL inj. vuln.

Nephp Publisher v4.5.x SQL inj. vuln. Vuln. dicovered by : r0t Date: 28 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/nephp-publisher-v45x-sql-inj-vuln.html Vendor:www.nelogic.com/cms/07-11-2005/19-nephp-publisher.html affected version:v4.5.2 and prior Product Description: a...

BedengPSP sql inj. vuln.

BedengPSP sql inj. vuln. Vuln. dicovered by : r0t Date: 28 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/bedengpsp-sql-inj-vuln.html Vendor:http://www.bedeng.com affected version:1.1 and prior Product Description: BedengPSP is a Web portal system based on PHP and MySQL. Features:...

AllWeb search SQL inj. vuln.

AllWeb search SQL inj. vuln. Vuln. dicovered by : r0t Date: 28 nov. 2005 orginal advisory:http://pridels.blogspot.com/2005/11/allweb-search-sql-inj-vuln.html Vendor:http://www.scripts-templates.com affected version: 3.0 and prior Product Description: Want to make money from your site traffic?...

Fantastic News "category" SQL inj.

Fantastic News "category" SQL inj. Vuln. dicovered by : r0t Date: 25 nov. 2005 orginal advisory:http://pridels.blogspot.com/2005/11/fantastic-news-category-sql-inj.html Vendor:www.fscripts.com Product link:http://fscripts.com/free.php?id=1 affected version: 2.1.1 and prior Product description:...

Kayako SupportSuite v3.00.x Full path Disclosure .

Kayako SupportSuite v3.00.x Full path Disclosure . Vuln. dicovered by : r0t Date: 25 nov. 2005 orginal advisory:http://pridels.blogspot.com/2005/11/kayako-supportsuite-v300x-full-path.html Vendor:kayako.com affected vesion:v3.00.12 and prior Vuln. Description: Due invalid input parameters or not...

Systems Panel v1.0.x Multiple SQL inj.

Systems Panel v1.0.x Multiple SQL inj. Vuln. dicovered by : r0t Date: 25 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/systems-panel-v10x-multiple-sql-inj.html Vendor:www.sysbotz.com Product link:http://www.sysbotz.com/products/systemspanel/index.htm affected vesion: 1.0.6 and...

SMBCMS v2.1 SQL injection.

SMBCMS v2.1 SQL injection. Vuln. dicovered by : r0t Date: 25 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/smbcms-v21-sql-injection.html Vendor:www.smbcms.com affected vesion: v2.1 Vuln. Description: SMBCMS search engine contains a flaw that may allow an attacker to carry out an...

sNews 1.3 SQL injection.

sNews 1.3 SQL injection. Vuln. dicovered by : r0t Date: 25 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/snews-13-sql-injection.html Vendor:http://www.solucija.com/ affected vesion:1.3 and prior Vuln. Description: Input passed to the "id" and "category" parameter in "index.php"...

cSupport "pg" SQL inj.

cSupport "pg" SQL inj. Vuln. dicovered by : r0t Date: 25 nov. 2005 orginal advisory:http://pridels.blogspot.com/2005/11/csupport-pg-sql-inj.html Vendor:www.forperfect.com Product link:http://www.forperfect.com/csupport/ affected vesion:1.0 and prior Vuln. Description: Input passed to the "pg"...

AgileBill 1.4.x "id" sql injection.

AgileBill 1.4.x "id" sql injection. Vuln. dicovered by : r0t Date: 25 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/agilebill-14x-id-sql-injection.html Vendor:http://agileco.com/ affected vesion: 1.4.92 and possible prior versions. Product Description: AgileBill features a powerf...

OWOS Lite 3.0 SQL inj.

Online Work Order Suite: Lite Edition for ASP 3.0 SQL inj. Vuln. dicovered by : r0t Date: 25 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/owos-lite-30-sql-inj.html Vendor:www.onlinetechtools.com Product link:http://www.onlinetechtools.com/products/owoslite/ affected vesion:3.0 a...

iSupport 1.x "include_file" SQL inj.

iSupport 1.x "includefile" SQL inj. Vuln. dicovered by : r0t Date: 25 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/isupport-1x-includefile-sql-inj.html Vendor:http://www.idevspot.com/ Product link:http://www.idevspot.com/index.php?page=pdetail7E1 affected vesion: tested on 1.06...

pdjk-support suite sql inj.

pdjk-support suite sql inj. Vuln. dicovered by : r0t Date: 25 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/pdjk-support-suite-sql-inj.html Vendor:http://support.pdjkeelan.com/ affected vesion: 1.1a retail edition and prior. Product Description: The pdjk-support suite is a full...

freeForum 1.x "cat" "thread" SQL inj.

freeForum 1.x "cat" "thread" SQL inj. Vuln. dicovered by : r0t Date: 23 nov. 2005 Orginal advsiory:http://pridels.blogspot.com/2005/11/freeforum-1x-cat-and-thread-sql-inj.html Vendor:http://soft.zoneo.net/freeForum/ affected version: 1.1 and prior Vuln. description: Input passed to the "cat" and...

Hung it to a trick-vulnerability warning-the black bar safety net

| --- | Hung it when using theiframe src=http://www.sohu.com/mm.htm width=0 height=0/iframesuch source code, but the browser is hung when the status bar will display hung it to the link in mm. htm or is hanging the page, add the phrasebody onload=window. status="is hanging stations of the URL"may...

DeskLance Vuln.

DeskLance Vuln. Vuln. dicovered by : r0t Date: 24 nov. 2005 Orginal advsiory:http://pridels.blogspot.com/2005/11/desklance-vuln.html Vendor:http://www.desklance.com/ affected version: 2.3 and prior Vuln. description: Input passed to the "main" parameter in "index.php" isn't properly verified,...

Softbiz Web Host Directory Script Multiple vuln.

Softbiz Web Host Directory Script Multiple vuln. Vuln. dicovered by : r0t Date: 23 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/web-host-directory-script-multiple.html Vendor:www.softbizscripts.com Product link:http://www.softbizscripts.com/web-hosting-directory-script.php...

digiSHOP 3.x SQL injection vuln.

Vuln. dicovered by : r0t Date 23 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/digishop-3x-sql-injection-vuln.html Vendor:http://digishop.sumeffect.com/ affected version:tested on digiSHOP 3.1.17 , vuln. also can be all 3.x and prior versions. Vuln. Description: 1. Input passed t...

Commodity Rentals 2.x "user_id" Sql inj.

Vuln. dicovered by : r0t Date: 23 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/commodity-rentals-2x-userid-sql-inj.html Vendor:http://www.commodityrentals.com/ affected version: 2.x and prior Product Description: CommodityRentals is the most comprehensive Online Rental Business...

Affcommerce Multiple Sql inj.

Affcommerce Multiple Sql inj. Vuln. dicovered by : r0t Date 23 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/affcommerce-multiple-sql-inj.html Vendor:http://www.affcommerce.com/ affected version:1.1.4 Product Description: Affcommerce is a unique, one of its kind affiliate based...