197 matches found
Ocean12 Contact Manager Pro (SQL/XSS/DDV) Multiple Vulnerabilities
Exploit for unknown platform in category web applications ================================================================== Ocean12 Contact Manager Pro SQL/XSS/DDV Multiple Vulnerabilities ==================================================================...
WEBBDOMAIN WebShop 1.02 (SQL/XSS) Multiple Vulnerabilities
Exploit for unknown platform in category web applications ========================================================== WEBBDOMAIN WebShop 1.02 SQL/XSS Multiple Vulnerabilities ==========================================================...
WEBBDOMAIN Post Card <= 1.02 (catid) SQL Injection Vulnerability
No description provided by source. post Card catid Remote SQL Injection Vulnerability Author: Hussin X Home : www.IQ-TY.com & www.TrYaG.cc MaiL : [email protected] script : http://webbdomain.com/php/postcarden/index2.php script : http://webbdomain.com/php/postcardir/index2.php DorK :...
Domain Group Network GooCMS 1.02 - index.php Cross-Site Scripting
Domain Group Network GooCMS 1.02 - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/30635/info GooCMS is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input data. An attacker may leverage this issue to execute arbitra...
CVE-2008-3448
CVE-2008-3448 describes a cross-site scripting (XSS) vulnerability in the web application feature: index.php in the product “csphonebook 1.02” from common solutions . The issue arises when an attacker supplies a crafted value in the letter parameter, allowing injection of arbitrary web script or ...
common Solutions csphonebook 1.02 - 'index.php' Cross-Site Scripting
source: https://www.securityfocus.com/bid/30485/info The 'csphonebook' program from common solutions is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of a...
csphonebook-xss.txt
csphonebook 1.02 Remote XSS Vulnerabilitiy Ghost Hacker , R-h Team , Real Hack We Will Be Back Soon : Found by : Ghost Hacker |, .-. .-. ,| My Blog : http://gh0st10.wordpress.com | o/ \o | My Email : [email protected] |/ /\ | Name Script : csphonebook 1.02 Download :...
Dynamic photo Gallery 1.02 - 'albumID' SQL Injection
Aria-Security Team http://Aria-Security.Net ---------------------------- Shoutz: Aura, imm02rtal, NULL, Kinglet And all our staff Vendor: http://www.phpwebscript.net/dynamicphotogallery/foto-gallery.php Original Link: http://forum.aria-security.net/showthread.php?p=1521 PoC:...
CVE-2008-0446
SQL injection vulnerability in voircom.php in LulieBlog 1.02 allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2008-0446
CVE-2008-0446 affects LulieBlog 1.02: SQL injection in voircom.php via the id parameter allows remote attackers to execute arbitrary SQL commands. Affected component is voircom.php; root cause is improper handling of the id parameter leading to injection. Impact per CVSS: high (partial confidenti...
LulieBlog 1.02 - SQL Injection
LulieBlog 1.02 - SQL Injection LulieBlog Version 1.02 Remote Sql Injection BY IRCRASH AUTHOR : IRCRASH Dr.Crash Script Download : http://sourceforge.net/project/platformdownload.php?groupid=204083 Injection Adress : http://Sitename/voircom.php?id=SQL CODE SQL CODE :...
LulieBlog 1.02 (voircom.php id) Remote SQL Injection Vulnerability
Exploit for unknown platform in category web applications ================================================================== LulieBlog 1.02 voircom.php id Remote SQL Injection Vulnerability ================================================================== LulieBlog Version 1.02 Remote Sql...
LulieBlog 1.02 - SQL Injection
LulieBlog Version 1.02 Remote Sql Injection BY IRCRASH AUTHOR : IRCRASH Dr.Crash Script Download : http://sourceforge.net/project/platformdownload.php?groupid=204083 Injection Adress : http://Sitename/voircom.php?id=SQL CODE SQL CODE :...
Web Wiz (Multiple Products) - Remote Information Disclosure
source: https://www.securityfocus.com/bid/27419/info Web Wiz Forums, NewsPad, and Rich Text Editor are prone to a remote information-disclosure vulnerability because they fail to properly sanitize user-supplied input. An attacker can exploit this issue to retrieve arbitrary files in the context o...
CVE-2008-0254
CVE-2008-0254 is a SQL injection vulnerability in TutorialCMS (Photoshop Tutorials) 1.02, affecting activate.php. When magic_quotes_gpc is disabled, remote attackers can inject SQL via the userName parameter. Documented impact is partial confidentiality/integrity/availability with CVSS 2.0 base s...
BSM Store Dependent Forums 1.02 - Username SQL Injection
BSM Store Dependent Forums 1.02 - Username SQL Injection source: https://www.securityfocus.com/bid/25072/info BSM Store Dependent Forums is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue...
Sql injection
SQL injection vulnerability in print.php in the Articles 1.02 and earlier module for Xoops allows remote attackers to execute arbitrary SQL commands via the id parameter...
XOOPS Module WF-Snippets 1.02 (c) - Blind SQL Injection
XOOPS Module WF-Snippets 1.02 c - Blind SQL Injection XOOPS Module WF-Snippets //'=============================================================================================== //'Script Name: XOOPS Module WF-Snippets = 1.02 c BLIND SQL Injection Exploit //'Coded by : ajann //'Author : ajann...
CVE-2007-1620
Multiple PHP remote file inclusion vulnerabilities in PHP DB Designer 1.02 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the 1 SESSIONSITEPATH parameter to a wind/help.php or b wind/about.php, or the 2 SESSIONDRIVER parameter to c db/session.php...
PHP DB Designer <= 1.02 Remote File Include Vulnerabilities
No description provided by source. PHP DB Designer = 1.02 Remote File Include Exploit D.Script: http://sourceforge.net/projects/phpdbdesigner/ Discovered by: GloDM = Mahmoodali Homepage: http://www.Tryag.cc Greetz To: Tryag-Team & 4lKaSrGoLd3n-Team & AsbMay's Group...