99 matches found
DL PayCart 1.34 - Admin Password Changing
DL PayCart 1.34 - Admin Password Changing === LIVE === » removed... === Greetz === » ALLAH » Tornado2800 »...
DL PayCart <= 1.34 Admin Password Changing Exploit
Exploit for unknown platform in category web applications ================================================== DL PayCart = 1.34 Admin Password Changing Exploit ================================================== ?php / ============================================================================== /...
Design/Logic Flaw
regex/v4/perlmatchernonrecursive.hpp in the Boost regex library aka Boost.Regex in Boost 1.33 and 1.34 allows context-dependent attackers to cause a denial of service failed assertion and crash via an invalid regular expression...
Design/Logic Flaw
The getrepeattype function in basicregexcreator.hpp in the Boost regex library aka Boost.Regex in Boost 1.33 and 1.34 allows context-dependent attackers to cause a denial of service NULL dereference and crash via an invalid regular expression...
HLStats 1.34 - hlstats.php SQL Injection
HLStats 1.34 - hlstats.php SQL Injection = 1.20 works with magicquotesgpc=On by Michael Brooks / print "HLStats SQL Injection Exploit -------------------------------------------------------------------------------------------------------------------------------------------- Welcome To HLstats...
HLStats <=1.34 (hlstats.php) Remote SQL Injection Exploit
Exploit for unknown platform in category web applications ========================================================= HLStats = 1.20 works with magicquotesgpc=On by Michael Brooks / print "HLStats SQL Injection Exploit...
CVE-2006-4454
Cross-site scripting XSS vulnerability in hlstats.php in HLstats 1.34 allows remote attackers to inject arbitrary web script or HTML via the q parameter...
CVE-2006-4454
CVE-2006-4454 describes a cross-site scripting (XSS) vulnerability in hlstats.php of HLstats 1.34 . The issue allows remote attackers to inject arbitrary script/HTML through the q parameter. Connected sources corroborate an XSS risk in hlstats with no explicit exploitation details or widely confi...
HLstats 1.34 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/19771/info HLstats is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied data. Exploiting these issues may help an attacker steal cookie-based authentication credentials and launch...
HLstats 1.34 - index.php Multiple Cross-Site Scripting Vulnerabilities
HLstats 1.34 - index.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/19771/info HLstats is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied data. Exploiting these issues may help...
hlstatsXSS.txt
Cross-site Scripting Vulnerability in HLStats 1.34 hlstats.php?mode=search&game=cstrike&st=player&q=%22%3CSCRIPT%3Ealert%28%22XSS%22%29%3B%3C%2FSCRIPT%3E%22 Search module fails to sanitize quotes. kefka [email protected] Thanks to RSnake...
HLstats 1.34 - hlstats.php Cross-Site Scripting
HLstats 1.34 - hlstats.php Cross-Site Scripting source: https://www.securityfocus.com/bid/19745/info HLstats is prone to a cross-site scripting vulnerability because the application fails to sufficiently sanitize user-supplied data. Exploiting this issue may help the attacker steal cookie-based...
devilzclan.txt
x128.net oo website : www.x128.net\n"; function exploitexecute $connection = curlinit; if $SERVER'argv'5...
deV!Lz Clanportal [DZCP] <= 1.34 (id) Remote SQL Injection Exploit
No description provided by source. ? errorreportingEERROR; function exploitinit if !extensionloaded'phpcurl' && !extensionloaded'curl' if !dl'curl.so' && !dl'phpcurl.dll' die "oo error - cannot load curl extension!"; function exploitheader echo...
Jax Calendar 1.34 - jax_calendar.php SQL Injection
Jax Calendar 1.34 - jaxcalendar.php SQL Injection source: https://www.securityfocus.com/bid/16130/info Jax Calendar is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful...
Jax Calendar 1.34 - 'jax_calendar.php' SQL Injection
source: https://www.securityfocus.com/bid/16130/info Jax Calendar is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a compromise of the...
CVE-2005-4008
SQL injection vulnerability in jaxcalendar.php in Jax Calendar 1.34 allows remote attackers to execute arbitrary SQL commands via the 1 calid parameter, and possibly the 2 Y and 3 m parameters...
CVE-2005-4008
CVE-2005-4008 affects Jax Calendar 1.34. A SQL injection flaw exists in jax_calendar.php, exploitable via the cal_id parameter and possibly Y and m parameters, allowing remote attackers to alter/steal data. The NVD reports a CVSSv2 base score of 7.5 ( HIGH ) with network access, low attack comple...