mcshoutbox 1.1 - SQL Injection Cross-Site Scripting shell

mcshoutbox 1.1 - SQL Injection Cross-Site Scripting shell + MCshoutbox 1.1 SQL/XSS/Shell Multiple Remote Vulnerabilities + Discovered By SirGod + http://insecurity-ro.org + http://h4cky0u.org Homepage : http://www.maniacomputer.com/dload/MCshoutboxDownloadPage.html + SQL Injection Login Bypass -...

MCshoutbox 1.1 (SQL/XSS/Shell) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ============================================================== MCshoutbox 1.1 SQL/XSS/Shell Multiple Remote Vulnerabilities ============================================================== + MCshoutbox 1.1 SQL/XSS/Shell Multiple Remote...

mcshoutbox 1.1 - SQL Injection / Cross-Site Scripting / shell

MCshoutbox 1.1 SQL/XSS/Shell Multiple Remote Vulnerabilities + Discovered By SirGod + http://insecurity-ro.org + http://h4cky0u.org Homepage : http://www.maniacomputer.com/dload/MCshoutboxDownloadPage.html + SQL Injection Login Bypass - Note : magicquotesgpc = off - Vulnerable code in...

Skybluecanvas 1.1 r237 - 'admin.php' Directory Traversal

source: https://www.securityfocus.com/bid/44397/info SkyBlueCanvas is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue requires administrative privileges and may allow an attacker to obtain sensitive information that...

Sql injection

SQL injection vulnerability in login.asp in DataCheck Solutions ForumPal FE 1.1 and ForumPal 1.5 allows remote attackers to execute arbitrary SQL commands via the 1 password parameter in 1.1 and 2 ppassword parameter in 1.5. NOTE: some of these details are obtained from third party information...

DSA-1827-1 ipplan - cross-site scripting

Bulletin has no description...

CVE-2007-6727

The CVE-2007-6727 entry describes a SQL injection in KerviNet Forum 1.1, specifically topic.php, where the parameter forum can be exploited to execute arbitrary SQL commands remotely. This is the underlying vulnerability: improper sanitization/parameter handling in the forum parameter leading to ...

KerviNet Forum 1.1 SQL Injection / XSS

dork: "Copyright KerviNet" eLwauxc 20.06.2009 Blind SQLinj /index.php ------------------------------------------------------------------------------------------------- if$COOKIE'userenter'=="auto" $enterlogin=$COOKIE'enterlogin'; $enterparol=$COOKIE'enterparol'; $mysql-query"SELECT name, pass,...

kervinet forum 1.1 - Multiple Vulnerabilities

dork: "Copyright KerviNet" eLwauxc 20.06.2009 Blind SQLinj /index.php ------------------------------------------------------------------------------------------------- if$COOKIE'userenter'=="auto" $enterlogin=$COOKIE'enterlogin'; $enterparol=$COOKIE'enterparol'; $mysql-query"SELECT name, pass,...

Unrestricted file upload

Unrestricted file upload vulnerability in includes/sharedscripts/wysiwygeditor/assetmanager/assetmanager.asp in DMXReady Registration Manager 1.1 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file ...

Star Wars Battlefront II 1.1 - Remote Denial of Service

source: https://www.securityfocus.com/bid/35806/info Star Wars Battlefront II is prone to a remote denial-of-service vulnerability because the application fails to handle exceptional conditions. An attacker could exploit this issue to crash the affected application, denying service to legitimate...

Code injection

Mahara 1.1 before 1.1.5 does not apply permission checks when saving a view that contains artefacts, which allows remote authenticated users to read another user's artefact...

CVE-2009-2171

Mahara 1.1 before 1.1.5 does not apply permission checks when saving a view that contains artefacts, which allows remote authenticated users to read another user's artefact...

CVE-2009-2171

Mahara 1.1 before 1.1.5 does not apply permission checks when saving a view that contains artefacts, which allows remote authenticated users to read another user's artefact...

Design/Logic Flaw

admin.php in SkyBlueCanvas 1.1 r237 allows remote authenticated administrators to obtain sensitive information via an invalid id parameter, which reveals the installation path in an error message...

CVE-2009-2114

SkyBlueCanvas 1.1 r237 contains multiple cross-site scripting (XSS) vulnerabilities in admin.php. The issue allows remote attackers to inject arbitrary web script or HTML via the parameters mgroup, mgr, objtype, id, and dir. The CVE entry confirms XSS but does not provide exploit details, affecte...

Microsoft Windows Pointer Validation Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability that occurs in the Windows kernel. An attacker can exploit this issue to execute arbitrary code with kernel-level privileges. Successful exploits will result in the complete compromise of affected computers...

CVE-2009-1814

SQL injection vulnerability in mail.php in PHPenpals 1.1 and earlier allows remote attackers to execute arbitrary SQL commands via the ID parameter. NOTE: the profile.php vector is already covered by CVE-2006-0074...

CVE-2009-1814

CVE-2009-1814 describes an SQL injection in mail.php of PHPenpals (v1.1 and earlier) allowing remote SQL command execution via the ID parameter. Consequences and patch details are not provided here beyond noting that the profile.php vector is covered by CVE-2006-0074; the connected records indica...

Flash Image Gallery 1.1 File Disclosure

0x01 Informations: Script : Flash Image Gallery 1.1 and maybe last version Download : http://www.flashimagegallery.com/download/fig116admin110.zip Vulnerability : Sensitive Data Disclosure Author : DarkbiteX Greets: : |OverclockiX| , |0oZeuzo0|, |Status-X|, |Fatal Inside|, |NaOnack|, |Good-Spide|...