Sql injection

SQL injection vulnerability in writemessage.php in Yogurt 0.3, when registerglobals is enabled, allows remote authenticated users to execute arbitrary SQL commands via the original parameter...

CVE-2009-2034

SQL injection vulnerability in writemessage.php in Yogurt 0.3, when registerglobals is enabled, allows remote authenticated users to execute arbitrary SQL commands via the original parameter...

CVE-2009-2033

Cross-site scripting XSS vulnerability in index.php in Yogurt 0.3 allows remote attackers to inject arbitrary web script or HTML via the msg parameter...

CVE-2009-2034

The CVE-2009-2034 entry concerns Yogurt 0.3, with a vulnerability in writemessage.php that arises when register_globals is enabled. This allows remote authenticated users to execute arbitrary SQL commands via the original parameter, indicating an SQL injection in the affected component. The vulne...

CVE-2009-2033

CVE-2009-2033: XSS in Yogurt 0.3, via index.php msg parameter. Vulnerable component is index.php; root cause is input not sanitized, enabling remote injection of script/HTML. No remediation details provided in the supplied documents; exploitation status not specified.

Yogurt 0.3 SQL Injection / XSS

-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- Name : Yogurt Site : http://sourceforge.net/projects/yogurt/...

yogurt 0.3 - Cross-Site Scripting / SQL Injection

-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- Name : Yogurt Site : http://sourceforge.net/projects/yogurt/...

CVE-2009-1951

The CVE-2009-1951 entry concerns PropertyMax Pro FREE 0.3, where a Cross-site Scripting (XSS) vulnerability exists in index.php. The issue allows remote attackers to inject arbitrary web script or HTML via the pl parameter in a mi action. This is documented across multiple sources (NVD entry and ...

MiniTwitter 0.3-Beta (SQL/XSS) Multiple Remote Vulnerabilities

No description provided by source. || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH! ------------------...

Joomla Boy Scout Advancement 0.3 (id) SQL Injection Exploit

No description provided by source. || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH! ------------------...

minitwitter 0.3-beta - SQL Injection / Cross-Site Scripting

|| || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH! ---------------------------------------------------------------------------------------------- | MULTIPLE...

MULTIPLE SQL INJECTION VULNERABILITIES --Joomla Component 'Boy Scout Advancement' <= v-0.3 (com_bsadv)-->

------------------------------------------------------------------------------------------------------------ MULTIPLE SQL INJECTION VULNERABILITIES --Joomla Component 'Boy Scout Advancement' = v-0.3 combsadv--...

Zervit Webserver multiple vulnerabilities

According to its version number, the remote version of Zervit HTTP server is prone to a remote buffer-overflow vulnerability and to a directory-traversal vulnerability. An attacker can exploit the remote buffer-overflow issue to execute arbitrary code within the context of the affected applicatio...

CVE-2009-1461

CVE-2009-1461 describes a cross-site scripting (XSS) vulnerability in the Create New Page form of razorCMS 0.3 RC2 and earlier. The issue allows remote authenticated users to inject arbitrary script or HTML via the Page Title field. Affected component is the Create New Page workflow; vulnerabilit...

Zervit 0.3 Denial Of Service

import socket import sys print "------------------------------------------------------" print " Zervit Webserver 0.3 Remote Denial Of Service " print " url: http://zervit.sourceforge.net " print " " print " author: shinnai " print " mail: shinnaiatautisticidotorg " print " site:...

Zervit Webserver 0.3 Remote Denial Of Service Exploit

Exploit for unknown platform in category dos / poc ===================================================== Zervit Webserver 0.3 Remote Denial Of Service Exploit ===================================================== import socket import sys print...

Syzygy CMS 0.3 LFI/SQL Command Injection Exploit

No description provided by source. !/usr/bin/perl Web App : Syzygy CMS 0.3 Link : http://sourceforge.net/project/downloading.php?groupid=103298&usemirror=heanet&filename=syzygycms-0.3.tar.gz&a=89932245 Remote Command Execution Exploit : Case 1: If LFI works, exploitation via Shell Injection + LFI...

Syzygy CMS 0.3 LFI / SQL Injection

!/usr/bin/perl Web App : Syzygy CMS 0.3 Link : http://sourceforge.net/project/downloading.php?groupid=103298&usemirror=heanet&filename=syzygycms-0.3.tar.gz&a=89932245 Remote Command Execution Exploit : Case 1: If LFI works, exploitation via Shell Injection + LFI Case 2: Unless, exploitation via S...

Syzygy CMS 0.3 - Local File Inclusion SQL Injection

Syzygy CMS 0.3 - Local File Inclusion SQL Injection !/usr/bin/perl Web App : Syzygy CMS 0.3 Link : http://sourceforge.net/project/downloading.php?groupid=103298&usemirror=heanet&filename=syzygycms-0.3.tar.gz&a=89932245 Remote Command Execution Exploit : Case 1: If LFI works, exploitation via Shel...

Personal Site Manager <= 0.3 Remote Command Execution Exploit

Exploit for unknown platform in category web applications ============================================================= Personal Site Manager shell.php"; shell.php will be delete, it won't leave any trace about exploit's run print SHELL ""; close SHELL; my $url =...