SyntaxCMS 1.3 SQL Injection

Vulnerability ID: HTB22540 Reference: http://www.htbridge.ch/advisory/sqlinjectionvulnerabilityinsyntaxcms.html Product: SyntaxCMS Vendor: Forum One Communications http://www.syntaxcms.org/ Vulnerable Version: 1.3 and Probably Prior Versions Vendor Notification: 27 July 2010 Vulnerability Type: S...

SyntaxCMS - rows_per_page SQL Injection

SyntaxCMS - rowsperpage SQL Injection source: https://www.securityfocus.com/bid/42436/info SyntaxCMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise...

CVE-2010-2801

Integer signedness error in the Quantum decompressor in cabextract before 1.3, when archive test mode is used, allows user-assisted remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted Quantum archive in a .cab file, related to the...

DEBIAN-CVE-2010-2801

Integer signedness error in the Quantum decompressor in cabextract before 1.3, when archive test mode is used, allows user-assisted remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted Quantum archive in a .cab file, related to the...

CVE-2010-2801

Integer signedness error in the Quantum decompressor in cabextract before 1.3, when archive test mode is used, allows user-assisted remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted Quantum archive in a .cab file, related to the...

upload super beta v1.3 Remote Shell Upload Vulnerability

Exploit for php platform in category web applications ======================================================== upload super beta v1.3 Remote Shell Upload Vulnerability ======================================================== Author: ViRuS Qalaa Email: email protected Home Script:...

CMSQLite SQL Injection Vulnerability

Exploit for php platform in category web applications ==================================== CMSQLite SQL Injection Vulnerability ==================================== Product: CMSQLite Vendor: CMSQLite-Team Vulnerable Version: 1.3 and Probably Prior Versions June 2010 Vulnerability Type: SQL...

ZenPhoto CMS 1.3 - Multiple Cross-Site Request Forgery Vulnerabilities

ZenPhoto CMS 1.3 - Multiple Cross-Site Request Forgery Vulnerabilities Date: Wed 14 Jul 2010 12:48:56 PM EEST Vendor: http://www.zenphoto.org/ Download: http://zenphoto.googlecode.com/files/zenphoto-1.3.tar.gz --- -= CSRF PoC 1 - Change Admin Password =- Zenphoto CMS 1.3 Multiple CSRF...

Sql injection

Multiple SQL injection vulnerabilities in PsNews 1.3 allow remote attackers to execute arbitrary SQL commands via the id parameter to 1 ndetail.php and 2 print.php...

ClanTiger Multiple CSRF Vulnerabilities

Exploit for php platform in category web applications ======================================= ClanTiger Multiple CSRF Vulnerabilities ======================================= Exploit Title: ClanTiger 1.3 Multiple CSRF, delete user, shoutbox items, news, ??? ban/unban user, delete forum etc. Date: ...

Planet 1.3 Cross Site Request Forgery

Exploit Title: Planet 1.3 - CSRF Add Admin Account Date:20 -06-2010 Author: G0D-F4Th3r Software Link: http://php.femtolayer.com/planet13/ Version: 1.3 Tested on: http://php.femtolayer.com/planet13/ " Greetz to : AL-MoGrM - dEvIL NeT - Bad hacker - v4-team members - And All My Friends...

Joomla Listbingo 1.3 SQL Injection / Cross Site Scripting

Exploit Title: Joomla Component Listbingo 1.3 Multiple Vulnerabilities Date: 09 June 2010 Author: jdc Software Link: http://extensions.joomla.org/extensions/ads-a-affiliates/classified-ads/12062 Version: 1.3 Tested on: PHP5, MySQL5 SQL Injection ------------- ?q=11111 &catid=0 &searchfromprice=99...

Joomla! Component com_listbingo 1.3 - Multiple Vulnerabilities

Exploit Title: Joomla Component Listbingo 1.3 Multiple Vulnerabilities Date: 09 June 2010 Author: jdc Software Link: http://extensions.joomla.org/extensions/ads-a-affiliates/classified-ads/12062 Version: 1.3 Tested on: PHP5, MySQL5 SQL Injection ------------- ?q=11111 &catid=0 &searchfromprice=99...

CVE-2010-2318

PHPCityPortal 1.3 has a Cross-site scripting (XSS) vulnerability in cms_data.php, exploitable via the page parameter to inject arbitrary script/HTML. This is caused by unsanitized input passed to the page parameter, enabling remote attackers to execute embedded scripts in the victim’s browser. Mu...

BtiTracker 1.3.x / 1.4.x SQL Injection

!/usr/bin/env python xpl0it /\ \ /\ \ /\ \ //\ / \ ,\L\ /\ \ ,\ \ \ \ /' /\ \ /'\ /'/\ /\ /'/\ \ \ / /\ /\ \ \ /\ /\ /\ \L\ /\ //\ /\ \ \ \ \ / \ \ \ \ \ \ \ \ /\ \ \ \ \ \\ /\ \ \ \ \/ \ //////////// // // //// // \ // www.insecurity.ro // BtiTracker...

AneCMS 1.x - '/modules/blog/index.php' HTML Injection

source: https://www.securityfocus.com/bid/40838/info AneCMS is prone to an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied data. Attacker-supplied HTML or JavaScript code could run in the context of the affected site, potentially allowing the attacker to steal...

BtiTracker 1.3.x < 1.4.x - SQL Injection

!/usr/bin/env python xpl0it /\ \ /\ \ /\ \ //\ / \ ,\L\ /\ \ ,\ \ \ \ /' /\ \ /'\ /'/\ /\ /'/\ \ \ / /\ /\ \ \ /\ /\ /\ \L\ /\ //\ /\ \ \ \ \ / \ \ \ \ \ \ \ \ /\ \ \ \ \ \\ /\ \ \ \ \/ \ //////////// // // //// // \ // www.insecurity.ro // BtiTracker...

Sphider Script 1.3.x Command Execution

======================================================================= Sphider Script Remote Code Execution ======================================================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ ...

Sphider Script - Remote Code Execution

======================================================================= Sphider Script Remote Code Execution ======================================================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ ...

Sphider Script Remote Code Execution

Exploit for php platform in category web applications ==================================== Sphider Script Remote Code Execution ==================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1...