CVE-2010-1975: Undefined Security Weakness

PostgreSQL 7.4 before 7.4.29, 8.0 before 8.0.25, 8.1 before 8.1.21, 8.2 before 8.2.17, 8.3 before 8.3.11, and 8.4 before 8.4.4 does not properly check privileges during certain RESET ALL operations, which allows remote authenticated users to remove arbitrary parameter settings via a 1 ALTER USER ...

Tainos Webdesign (All Scripts) - SQL Injection / Cross-Site Scripting / HTML Injection

------------------------------------------------------------------------------------------- Tainos Webdesign All Scripts SQL/XSS/HTML Injection Vulnerability ------------------------------------------------------------------------------------------- Author: CoBRa21 Mail: [email protected]...

CVE-2010-1733

Multiple SQL injection vulnerabilities in OCS Inventory NG before 1.02.3 allow remote attackers to execute arbitrary SQL commands via 1 multiple inventory fields to the search form, reachable through index.php; or 2 the "Software name" field to the "All softwares" search form, reachable through...

Compgamer SQL Injection Vulnerability

Exploit for php platform in category web applications ===================================== Compgamer SQL Injecti0n Vulnerability ===================================== ALLH AKBAR Exploit Title: Compgamer SQL Injecti0n Vulnerability -::DESCRIPTION Date: 4 de mayo de 2010 -::DATE Author: JM511 Emai...

Clicksor - SQL Injection

Clicksor - SQL Injection ALLH AKBAR Exploit Title: Clicksor SQL Injecti0n Vulnerability -::DESCRIPTION Date: 4 de mayo de 2010 -::DATE Author: JM511 EmaiL : [email protected] , [email protected] -::AUTHOR From :\ Saudi Arabia , Greetz to: GoLdeN-Z3r0 , Dr.Exe , Sec-q8 , Shi5 aL Hacker , SaFa7 al3nz...

Clicksor - SQL Injection

ALLH AKBAR Exploit Title: Clicksor SQL Injecti0n Vulnerability -::DESCRIPTION Date: 4 de mayo de 2010 -::DATE Author: JM511 EmaiL : [email protected] , [email protected] -::AUTHOR From :\ Saudi Arabia , Greetz to: GoLdeN-Z3r0 , Dr.Exe , Sec-q8 , Shi5 aL Hacker , SaFa7 al3nzee , BlacK DeaTh Home :...

All Browsers - Long Unicode DoS PoC

Exploit for multiple platform in category dos / poc =================================== All Browsers - Long Unicode DoS PoC =================================== DrIDE - All Browsers - Long Unicode DoS PoC function boom //The number of strings increases the amount of memory consumed, quicker crash...

Joomla Table JX Cross Site Scripting

Exploit Title: Joomla Component Table JX XSS Vulnerabilities Date: 01.05.2010 Author: Valentin Category: webapps/0day Version: Tested on: CVE : Code : :::::::::::::::::::::::::::::::::::::: 0x1 :::::::::::::::::::::::::::::::::::::: General Information Advisory/Exploit Title = Joomla Component...

All browsers - Crash

All browsers - Crash =============================== All browsers 0day Crash Exploit =============================== + Discovered By: Inj3ct0r Team @Title: All browsers 0day Crash Exploit @Site: http://site.securityspl0its.com/ - http://forum.securityspl0its.com/ - http://inj3ct0r.com/ @Exploit f...

All browsers - Crash

=============================== All browsers 0day Crash Exploit =============================== + Discovered By: Inj3ct0r Team @Title: All browsers 0day Crash Exploit @Site: http://site.securityspl0its.com/ - http://forum.securityspl0its.com/ - http://inj3ct0r.com/ @Exploit for all browsers Teste...

phpegasus 'config.php' Arbitrary File Upload Vulnerability

phpegasus is prone to a vulnerability that lets attackers upload arbitrary files because the application fails to adequately sanitize user-supplied input. An attacker can exploit this vulnerability to upload arbitrary code and run it in the context of the webserver process. This may facilitate...

InfoLink Blog (XSS/URL Redirecting) Multiple Vulnerability

Exploit for php platform in category web applications ========================================================== InfoLink Blog XSS/URL Redirecting Multiple Vulnerability ==========================================================...

mysqldumper Local File Vulnerability

Exploit for php platform in category web applications ==================================== mysqldumper Local File Vulnerability ==================================== mysqldumper Local File Vulnerability Software : all version Software site: : http://www.mysqldumper.net/ Author : tetikci $ miktolyn...

SafeSHOP 1.5.6 - Cross-Site Scripting / Multiple Cross-Site Request Forgery Vulnerabilities

Exploit Title: SafeSHOP | www.DigitalWhisper.co.il Software Link: safeshop.co.il Version: = 1.5.6 Tested on: ASP Cross Site Scripting Cross-Site Scripting attacks are a type of injection problem, in which malicious scripts are injected into the otherwise benign and trusted web sites. Cross-site...

CVE-2009-4747

PHP remote file inclusion vulnerability in public/code/cphtml2xhtmlbasic.php in All In One Control Panel AIOCP 1.4.001 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter, a different vector than CVE-2009-3220...

post Card - catid SQL Injection

post Card - catid SQL Injection post Card catid Remote SQL Injection Vulnerability Author: Hussin X Home : www.iqs3cur1ty.com & www.iq-ty.com MaiL : [email protected] script : http://webbdomain.com/php/postcarden/index2.php script : http://webbdomain.com/php/postcardir/index2.php version : a...

CVE-2009-4747: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in public/code/cphtml2xhtmlbasic.php in All In One Control Panel AIOCP 1.4.001 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter, a different vector than CVE-2009-3220...

eGroupWare 1.6.002 and eGroupWare premium line 9.1 - Multiple Vulnerabilities

Advisory Name: Remote Command Execution in EGroupware Vulnerability Class: Remote Command Execution Release Date: 2010-03-09 Affected Applications: Confirmed in EGroupware 1.4.001+.002 and 1.6.001+.002. EGroupware Premium Line 9.1 and 9.2 is also affected. Other versions may also be affected...

LDF (Default.asp) Sql Injection Vulnerability

Product : LDF vendor : www.ldf.22.cn Vulnerable Versions : All Default.asp Page has an issue on validating "Page" parameter , It could be exploited by attacker & attacker can inject arbitrary Sql Commands http://www.example.com/ldf path/default.asp?page=SQL COMMAND...

Vox blog Cross Site Scripting Vulnerability

Exploit for unknown platform in category web applications =========================================== Vox blog Cross Site Scripting Vulnerability =========================================== Exploit Title: Vox blog Cross Site Scripting Vulnerability Author: Phenom Software Link: Version: Tested on...