vbzoom1x-sql.txt

--/ Long Life Palestine -- HHHHHH HHHHHH HH HHHHHH HHHHHH HHHHHHHH HHHH HH HH HHHHHH HH HH HH HH HH HHHHH HH HH HH HHH HH HHHHH HH HH HH HH HH HH HH HH HH HHHH HH HH HHHHHH HHHHHH HH HHHHH HHHHHH HH HH HH HH HH HHHHHH HH HH HH HH HH HH HH HH HH HHHH HH HH HH HH HH HHHHH HH HH HH HH HHH HHHHH HH H...

pizaria-rfi.txt

Pixaria Gallery 1.x class.Smarty.php Remote File Include Vulnerability ----------------------------------------------------------------------------------------- scripts : Pixaria Gallery 1.x Discovered By : irvian scripts site : http://pixaria.com/ Thanks To : hitamputih nyubicrew patihack specia...

Pixaria Gallery 1.x - 'class.Smarty.php' Remote File Inclusion

Pixaria Gallery 1.x class.Smarty.php Remote File Include Vulnerability ----------------------------------------------------------------------------------------- scripts : Pixaria Gallery 1.x Discovered By : irvian scripts site : http://pixaria.com/ Thanks To : hitamputih nyubicrew patihack specia...

Pixaria Gallery 1.x - class.Smarty.php Remote File Inclusion

Pixaria Gallery 1.x - class.Smarty.php Remote File Inclusion Pixaria Gallery 1.x class.Smarty.php Remote File Include Vulnerability ----------------------------------------------------------------------------------------- scripts : Pixaria Gallery 1.x Discovered By : irvian scripts site :...

nabopoll 1.2 - survey.inc.php?path Remote File Inclusion

nabopoll 1.2 - survey.inc.php?path Remote File Inclusion By Cr@zyKing [email protected] Thakns : ApAci & Erne & Uyussman & Eno7 & Thehacker & CrackersChild & Liz0zim Script : nabopoll 1.x Risk : Remote File .nclude | High Site : http://nabocorp.com/ Google Dork : inurl:"nabopoll/" Exploit :...

CVE-2007-0520

SQL injection vulnerability in banner.php in Unique Ads UDS 1.x allows remote attackers to execute arbitrary SQL commands via the bid parameter...

CVE-2007-0520

The CVE-2007-0520 entry describes a SQL injection in banner.php of Unique Ads (UDS) 1.x, exploitable via the bid parameter to execute arbitrary SQL commands remotely. This vulnerability is confirmed by multiple sources (NVD entry and related references) and is categorized with network attack vect...

uniqueads-sql.txt

Hello Vulnerable : uds Version: 1.x web : http://www.egyptechno.com The bug : http://example.com/uds/banner.php?bid=SQL Example : http://example.com/uds/banner.php?bid=-55%20union%20select%20null,null,null%20from%20uds ,,,,,,, Discoverey By : LinuxDrox www.LeZr.com Best Regards ,,...

SQL Injection in Unique Ads ( UDS )

Hello Vulnerable : uds Version: 1.x web : http://www.egyptechno.com The bug : http://example.com/uds/banner.php?bid=SQL Example : http://example.com/uds/banner.php?bid=-5520union20select20null,null,null20from20uds ,,,,,,, Discoverey By : LinuxDrox www.LeZr.com Best Regards ,,...

[SA23444] a-blog Cross-Site Scripting Vulnerability

TITLE: a-blog Cross-Site Scripting Vulnerability SECUNIA ADVISORY ID: SA23444 VERIFY ADVISORY: http://secunia.com/advisories/23444/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: a-blog 1.x http://secunia.com/product/12949/ DESCRIPTION: Fukumori has reported a...

Bandwebsite <= 1.5 (Login) Remote Add Admin Exploit

No description provided by source. !-- - Product : Bandsite portal system - Website : http://membres.lycos.fr/fluxx/bandwebsite.php - Author : H0tTurk- WebSiteVersion:1.x - Problem : Admin Added Access. Bandsite is an online portal system designed for Bands. Features: themes support, news posting...

Bandsite portal system Admin Added Access

!-- - Product : Bandsite portal system - Website : http://membres.lycos.fr/fluxx/bandwebsite.php - Author : H0tTurk- WebSiteVersion:1.x - Problem : Admin Added Access. Bandsite is an online portal system designed for Bands. Features: themes support, news posting, audio sections, guestbook, tour...

HP-UX PHSS_35111 : s700_800 11.04 Webproxy 2.1 (Apache 1.x) update

s700800 11.04 Webproxy 2.1 Apache 1.x update : The remote HP-UX host is affected by multiple vulnerabilities : - A security vulnerability has been identified in OpenSSL used in HP VirtualVault 4.7, 4.6, 4.5 and HP WebProxy that may allow remote unauthorized access. HPSBUX02165 SSRT061266 - Two...

bitweaver 1.x - '/newsletters/edition.php?tk' SQL Injection

source: https://www.securityfocus.com/bid/20988/info Bitweaver is prone to multiple input-validation vulnerabilities because the application fails to sufficiently sanitize user-supplied input. These issues include multiple HTML-injection issues and multiple SQL-injection issues. A successful...

HP-UX 11i - 'swmodify' Local Stack Overflow / Local Privilege Escalation

/ HP-UX swmodify buffer overflow exploit ======================================= HP-UX 'swmodify' contains an exploitable stack overflow in the handling of command line arguements. Specifically the problem occurs due to insufficent bounds checking in the "-S" optional arguement. 'swmodify' is...

Secunia Research: Joomla BSQ Sitestats Component Multiple Vulnerabilities

====================================================================== Secunia Research 29/09/2006 - Joomla BSQ Sitestats Component Multiple Vulnerabilities - ====================================================================== Table of Contents Affected...

[SA22028] PT News "pgname" Cross-Site Scripting Vulnerability

TITLE: PT News "pgname" Cross-Site Scripting Vulnerability SECUNIA ADVISORY ID: SA22028 VERIFY ADVISORY: http://secunia.com/advisories/22028/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: PTNews 1.x http://secunia.com/product/1487/ DESCRIPTION: Snake has...

Telekorn Signkorn Guestbook 1.x - helpdeadminhelp1.php?dir_path Remote File Inclusion

Telekorn Signkorn Guestbook 1.x - helpdeadminhelp1.php?dirpath Remote File Inclusion source: https://www.securityfocus.com/bid/19977/info Telekorn Signkorn Guestbook is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. This may all...

VWar 1.x - 'war.php' Multiple SQL Injections

source: https://www.securityfocus.com/bid/19327/info Vwar is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues. These issues occur because the application fails to properly sanitize user-supplied input. A successful exploit of these...

phpBB-Auction 1.x - auction_room.php?ar SQL Injection

phpBB-Auction 1.x - auctionroom.php?ar SQL Injection source: https://www.securityfocus.com/bid/19179/info PHPBB-Auction is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. These vulnerabilities...