Sql injection

SQL injection vulnerability in tr.php in DownlineGoldmine Special Category Addon, Downline Builder Pro, New Addon, and Downline Goldmine Builder allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: some of these details are obtained from third party information...

CVE-2008-4178

CVE-2008-4178: SQL injection in tr.php is exploitable via the id parameter in DownlineGoldmine Special Category Addon, Downline Builder Pro, New Addon, and Downline Goldmine Builder. Affected components: DownlineGoldmine family plugins/addons. Root cause: unsanitized id parameter leading to arbit...

categoryaddon-sql.txt

|| | |Category Addon tr.php id Remote SQL Injection Vulnerability | | |---------------------Hussin X----------------------| | | Author: Hussin X | | Home : WwW.IQ-ty.CoM | WwW.TrYaG.CC | | email: darkangelg85atYahooDoTcom | | | | | | | | script : http://www.downlinegoldmine.com/ | | DorK :...

CVE-2008-2807

Mozilla Firefox before 2.0.0.15 and SeaMonkey before 1.1.10 do not properly handle an invalid .properties file for an add-on, which allows remote attackers to read uninitialized memory, as demonstrated by use of ISO 8859 encoding instead of UTF-8 encoding in a French .properties file...

PixelPost 1.7.1 File Disclosure

PixelPost 1.7.1 File Disclosure by Charles "real" F. charlesfolathotmail.fr http://realn.free.fr Requires registerglobals = On magicquotesgpc = Off PROOF OF CONCEPT TARGET URL: http://url/addons/copyfolder.php?...

MouseoverDictionary vulnerable to arbitrary script execution

Overview MouseoverDictionary, an add-on for Mozilla Firefox, contains a vulnerability that allows an attacker to execute an arbitrary script. MouseoverDictionary, an add-on mouseover English-Japanese dictionary for Mozilla Firefox, contains a vulnerability that allows an attacker to execute an...

phpBB Fishing Cat Portal Addon - functions_portal.php Remote File Inclusion

phpBB Fishing Cat Portal Addon - functionsportal.php Remote File Inclusion source: https://www.securityfocus.com/bid/28708/info Fishing Cat Portal Addon for phpBB is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue ca...

Sql injection

SQL injection vulnerability in jgstreffen.php in the JGS-XA JGS-Treffen 2.0.2 and earlier addon for Woltlab Burning Board wBB allows remote attackers to execute arbitrary SQL commands via the viewid parameter in an ansicht action...

Woltlab Burning Board Addon JGS-Treffen SQL Injection Vulnerability

Exploit for unknown platform in category web applications =================================================================== Woltlab Burning Board Addon JGS-Treffen SQL Injection Vulnerability =================================================================== Woltlab Burning Board Addon...

Woltlab Burning Board Addon JGS-Treffen 2.0.2 - SQL Injection

Woltlab Burning Board Addon JGS-Treffen SQL Injection Bug by: h0yt3r Dork: inurl:jgstreffen.php There is a bug in jgstreffen.php 2.0.2 and lower. It's already fixed in newer Versions... SQL Injection: http://target/path/jgstreffen.php?action=ansicht&viewid=SQL PoC:...

Woltlab Burning Board Addon JGS-Treffen 2.0.2 - SQL Injection

Woltlab Burning Board Addon JGS-Treffen 2.0.2 - SQL Injection Woltlab Burning Board Addon JGS-Treffen SQL Injection Bug by: h0yt3r Dork: inurl:jgstreffen.php There is a bug in jgstreffen.php 2.0.2 and lower. It's already fixed in newer Versions... SQL Injection:...

CVE-2003-1545: Improper Limitation of a Pathname to a Restricted Directory

Absolute path traversal vulnerability in nukestyles.com viewpage.php addon for PHP-Nuke allows remote attackers to read arbitrary files via a full pathname in the file parameter. NOTE: This was originally reported as an issue in PHP-Nuke 6.5, but this is an independent addon...

Joomla Component xfaq 1.2 (aid) Remote SQL Injection Vulnerability

No description provided by source. joomla SQL Injectioncomxfaq AUTHOR : S@BUN HOME : http://www.hackturkiye.com http://www.milw0rm.com/author/1334 MA陌L : [email protected] [email protected] DORK 1 : allinurl: aid "comxfaq" DORK 2 : allinurl: "comxfaq" EXPLOIT :...

Joomla! Component xfaq 1.2 - aid SQL Injection

Joomla! Component xfaq 1.2 - aid SQL Injection joomla SQL Injectioncomxfaq AUTHOR : S@BUN HOME : http://www.hackturkiye.com http://www.milw0rm.com/author/1334 MAÄ°L : [email protected] [email protected] DORK 1 : allinurl: aid "comxfaq" DORK 2 : allinurl: "comxfaq" EXPLOIT ...

CVE-2008-0719: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in customertestimonials.php in the Customer Testimonials 3 and 3.1 Addon for osCommerce Online Merchant 2.2 allows remote attackers to execute arbitrary SQL commands via the testimonialid parameter...

osCommerce Addon Customer Testimonials 3.1 SQL Injection Vulnerability

No description provided by source. osCommerce SQL Injection customertestimonials.php Author: it's my Home page: http://www.antichat.ru Dork: inurl:"customertestimonials.php" Exploit:...

osCommerce Addon Customer Testimonials 3.1 - SQL Injection

osCommerce SQL Injection customertestimonials.php Author: it's my Home page: http://www.antichat.ru Dork: inurl:"customertestimonials.php" Exploit:...

osCommerce Addon Customer Testimonials 3.1 - SQL Injection

osCommerce Addon Customer Testimonials 3.1 - SQL Injection osCommerce SQL Injection customertestimonials.php Author: it's my Home page: http://www.antichat.ru Dork: inurl:"customertestimonials.php" Exploit:...

Mozilla Firefox 2.0 - chrome: URI JavaScript File Request Information Disclosure

Mozilla Firefox 2.0 - chrome: URI JavaScript File Request Information Disclosure source: https://www.securityfocus.com/bid/27406/info Mozilla Firefox is prone to an information-disclosure vulnerability because it fails to restrict access to local JavaScript, images and stylesheets files. Attacker...

Mozilla Firefox 2.0 - 'chrome://' URI JavaScript File Request Information Disclosure

source: https://www.securityfocus.com/bid/27406/info Mozilla Firefox is prone to an information-disclosure vulnerability because it fails to restrict access to local JavaScript, images and stylesheets files. Attackers can exploit this issue to gain access to potentially sensitive information that...