4163 matches found
Open redirect
Open redirect vulnerability in admin/auth.php in NooMS 1.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the gsiteurl parameter...
Sql injection
SQL injection vulnerability in groups.php in Vastal I-Tech phpVID 1.1 allows remote attackers to execute arbitrary SQL commands via the cat parameter, a different vector than CVE-2007-3610. NOTE: it was later reported that 1.2.3 is also affected...
CVE-2008-4157
CVE-2008-4157 documents an SQL injection in phpVID (Vastal I-Tech) groups.php via the cat parameter affecting PHPVID 1.1 and later 1.2.3. Connected records confirm related SQL injection issues in phpVID 1.2.3 via the n parameter (and note that the cat vector is already covered by CVE-2008-4157), ...
CVE-2008-4056
CVE-2008-4056 describes a Cross-site scripting (XSS) vulnerability in the admin/login.php of Matterdaddy Market 1.1 . The issue allows remote attackers to inject arbitrary web script or HTML via the msg parameter. Multiple connected sources corroborate the description. The NVD entry lists a CVSSv...
nooms-xss.txt
---------------------------------------------------------------- Script : Nooms 1.1 Type : Multiple Vulnerabilities Cross Site Scripting/Redirect/Mysql Brute Force Local Access Risk : Medium ---------------------------------------------------------------- Download From :...
Nooms 1.1 - 'smileys.php?page_id' Cross-Site Scripting
source: https://www.securityfocus.com/bid/31131/info NooMS is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...
CVE-2008-3943
SQL injection vulnerability in listtest.php in eZoneScripts Living Local 1.1 allows remote attackers to execute arbitrary SQL commands via the r parameter...
CVE-2008-3943
CVE-2008-3943 describes an SQL injection in listtest.php of the eZoneScripts Living Local 1.1 application, exploitable via the r parameter. Root cause: unsafely constructed SQL queries from user input leading to arbitrary SQL execution. Impact: partial confidentiality, integrity, and availability...
FreeBSD Ports: apache-tomcat
The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
[SECURITY] [DSA-1597-2] New mt-daapd package fix regression
------------------------------------------------------------------------ Debian Security Advisory DSA-1597-2 [email protected] http://www.debian.org/security/ Devin Carraway August 30, 2008 http://www.debian.org/security/faq -...
Sql injection
Multiple SQL injection vulnerabilities in index.php in Matterdaddy Market 1.1, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 category and 2 type parameters...
matterdaddy-sql.txt
Author: !DoktOR! Contact: coder5attopmail.kz Home Page: www.antichat.ru Date found: 25.08.08 Product: Market Version: 1.1 Download script: http://www.matterdaddy.com/4/scripts/marketv11.zip Vulnerability Class: SQL Injection magicquotesgpc = Off http://localhost/installdir/ Exploit:...
MatterDaddy Market 1.1 - 'login.php' Cross-Site Scripting
source: https://www.securityfocus.com/bid/30848/info MatterDaddy Market is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...
Matterdaddy Market 1.1 Multiple SQL Injection Vulnerabilities
No description provided by source. Author: !DoktOR! Contact: coder5attopmail.kz Home Page: www.antichat.ru Date found: 25.08.08 Product: Market Version: 1.1 Download script: http://www.matterdaddy.com/4/scripts/marketv11.zip Vulnerability Class: SQL Injection magicquotesgpc = Off...
Matterdaddy Market 1.1 - 'index.php' Multiple SQL Injections
Author: !DoktOR! Contact: coder5attopmail.kz Home Page: www.antichat.ru Date found: 25.08.08 Product: Market Version: 1.1 Download script: http://www.matterdaddy.com/4/scripts/marketv11.zip Vulnerability Class: SQL Injection magicquotesgpc = Off http://localhost/installdir/ Exploit:...
Matterdaddy Market 1.1 Multiple SQL Injection Vulnerabilities
Exploit for unknown platform in category web applications ============================================================= Matterdaddy Market 1.1 Multiple SQL Injection Vulnerabilities =============================================================...
NoName Script <= 1.1 Multiple Remote Vulnerabilities
No description provided by source. + NoName Script 1.1 BETA Multiple Remote Vulnerabilities + Discovered By SirGod + www.mortal-team.org + Greetz : E.M.I.N.E.M,Ras,Puscasmarin,ToxicBlood,MesSiAH,xZu,HrN,kemrayz + Local File Inclusion...
noname script 1.1 - Multiple Vulnerabilities
noname script 1.1 - Multiple Vulnerabilities + NoName Script 1.1 BETA Multiple Remote Vulnerabilities + Discovered By SirGod + www.mortal-team.org + Greetz : E.M.I.N.E.M,Ras,Puscasmarin,ToxicBlood,MesSiAH,xZu,HrN,kemrayz + Local File Inclusion...
openimpro-sql.txt
OpenImpro 1.1id Sql Injection Vulnerability Author: nuclear script: http://downloads.sourceforge.net/openimpro/openimpro-1.1.zip exploit: target.com/image.php?id=-1 union select 1,2,concatfirstname,0x3a,lastname,0x3a,password,4,5,6 from imperson -- Description: when you do the injection you will ...