1406 matches found
SimpleBlog 2.3 - id SQL Injection
SimpleBlog 2.3 - id SQL Injection | | \ \ / / | ' / | / | \ V /| | | \ \ || | | / || ./|/\,| || AnD | | | | | | | ' | | | | '/ |/ \ '/ | |/ / | | | / | | | | | | || | | | | | / | \ \ | | | |/ / || || ||,|| ,||| |/|\||/| +-----------------------------------------------------------------+ |...
SimpleBlog <= 2.3 (id) Remote SQL Injection Vulnerability
Exploit for unknown platform in category web applications ========================================================= SimpleBlog = 2.3 id Remote SQL Injection Vulnerability ========================================================= | | \ \ / / | ' / | / | \ V /| | | \ \ || | | / || ./|/\,| || AnD |...
SimpleBlog 2.3 - 'id' SQL Injection
| | \ \ / / | ' / | / | \ V /| | | \ \ || | | / || ./|/\,| || AnD | | | | | | | ' | | | | '/ |/ \ '/ | |/ / | | | / | | | | | | || | | | | | / | \ \ | | | |/ / || || ||,|| ,||| |/|\||/| +-----------------------------------------------------------------+ | Vipsta & MurderSkillz fucking pwnt...
SimpleBlog <= 2.3 (id) Remote SQL Injection Vulnerability
No description provided by source. | | \ \ / / | ' / | / | \ V /| | | \ \ || | | / || ./|/\,| || AnD | | | | | | | ' | | | | '/ |/ \ '/ | |/ / | | | / | | | | | | || | | | | | / | \ \ | | | |/ / || || ||,|| ,||| |/|\||/| +-----------------------------------------------------------------+ |...
Sql injection
SQL injection vulnerability in YourAccount.asp in Mini-Nuke 2.3 and earlier allows remote attackers to execute arbitrary SQL commands via the 1 yas1, 2 yas2, and 3 yas3 parameters...
CVE-2006-2732
SQL injection vulnerability in YourAccount.asp in Mini-Nuke 2.3 and earlier allows remote attackers to execute arbitrary SQL commands via the 1 yas1, 2 yas2, and 3 yas3 parameters...
CVE-2006-2734
enter.asp in Mini-Nuke 2.3 and earlier makes it easier for remote attackers to conduct password guessing attacks by setting the guvenlik parameter to the same value as the hidden gguvenlik parameter, which bypasses a verification step because the gguvenlik parameter is assumed to be immutable by...
CVE-2006-2733
membership.asp in Mini-Nuke 2.3 and earlier uses plaintext security codes, which allows remote attackers to register multiple times via automated scripts...
CVE-2006-2732
The CVE-2006-2732 entry concerns a SQL injection vulnerability in Mini-Nuke 2.3 and earlier, specifically in Your_Account.asp. The underlying issue is that the parameters yas_1, yas_2, and yas_3 can be manipulated to inject arbitrary SQL, enabling remote command execution on affected installation...
CVE-2006-2734
enter.asp in Mini-Nuke 2.3 and earlier makes it easier for remote attackers to conduct password guessing attacks by setting the guvenlik parameter to the same value as the hidden gguvenlik parameter, which bypasses a verification step because the gguvenlik parameter is assumed to be immutable by...
CVE-2006-2732
SQL injection vulnerability in YourAccount.asp in Mini-Nuke 2.3 and earlier allows remote attackers to execute arbitrary SQL commands via the 1 yas1, 2 yas2, and 3 yas3 parameters...
XDT Pro 2.3 - 'stats.php' Cross-Site Scripting
source: https://www.securityfocus.com/bid/17781/info XDT Pro is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the browser of a...
XDT Pro 2.3 - stats.php Cross-Site Scripting
XDT Pro 2.3 - stats.php Cross-Site Scripting source: https://www.securityfocus.com/bid/17781/info XDT Pro is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have...
CVE-2006-2048
Multiple cross-site scripting XSS vulnerabilities in index.php in Edwin van Wijk phpWebFTP 2.3 allow remote attackers to inject arbitrary web script or HTML via the 1 port, 2 server, and 3 user parameters. NOTE: it is possible that the affected version is actually 3.2...
CVE-2006-1950
Multiple cross-site scripting XSS vulnerabilities in banners.cgi in PerlCoders BannerFarm 2.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 aff and 2 cat parameters...
CVE-2006-1360
Multiple SQL injection vulnerabilities in MusicBox 2.3 Beta 2 allow remote attackers to execute arbitrary SQL commands via the 1 id, 2 type, or 3 show parameter to a index.php; or the 4 message1 or 5 message parameter to b cart.php...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in Musicbox 2.3 Beta 2 allow remote attackers to inject arbitrary web script or HTML via the 1 id and 2 type and 3 show parameters in a top action in a index.php; and the 4 message1 parameter in b cart.php...
CVE-2006-1349
CVE-2006-1349 describes multiple cross-site scripting (XSS) vulnerabilities in Musicbox 2.3 Beta 2. An affected component is the Musicbox web interface (index.php and cart.php) where user-supplied input in parameters (1) id, (2) type, (3) show, and (4) message1 can be injected as script/HTML. The...
MusicBox 2.3 - 'cart.php' Cross-Site Scripting
source: https://www.securityfocus.com/bid/17149/info MusicBox is prone to multiple input-validation vulnerabilities. The issues include cross-site scripting and SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Successful...
[OpenPKG-SA-2006.005] OpenPKG Security Advisory (tin)
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 OpenPKG Security Advisory The OpenPKG Project http://www.openpkg.org/security.html http://www.openpkg.org [email protected] [email protected] OpenPKG-SA-2006.005 19-Feb-2006 Package: tin Vulnerability: buffer overflow OpenPKG Specific: no...