vBulletin 1.0.1 lite/2.x/3.0 - '/admincp/user.php' Multiple SQL Injections

source: https://www.securityfocus.com/bid/14872/info vBulletin is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. Successful exploitation could result in a compromise of...

MyBBRC4.txt

SQL Injection Vulnerabilities in MyBB RC 4 +Security Patch Vendor: MyBB Group Version: MyBulletinBoard 1.00 RC4+ Security Patch Risk: High if magicquotesgpc = Off URL: http://www.mybboard.com "MyBB is a powerful, efficient and free forum package developed in PHP and MySQL. MyBB has been designed...

[Full-disclosure] My Bulletin Board RC 4 Vulnerabilities

SQL Injection Vulnerabilities in MyBB RC 4 +Security Patch Vendor: MyBB Group Version: MyBulletinBoard 1.00 RC4+ Security Patch Risk: High if magicquotesgpc = Off URL: http://www.mybboard.com "MyBB is a powerful, efficient and free forum package developed in PHP and MySQL. MyBB has been designed...

CVE-2005-2478

SQL injection vulnerability in SilverNews 2.0.3 allows remote attackers to execute arbitrary SQL commands via the user field on the login page in the Admin control panel...

CVE-2005-2478

SQL injection vulnerability in SilverNews 2.0.3 allows remote attackers to execute arbitrary SQL commands via the user field on the login page in the Admin control panel...

aspjarSQL.txt

hello , my name is: arash setayeshi & my yahoo id is : arashpc0 I found a new vulnerability in aspjar guestbook that we can control website & go to admin control panel by sql injection. sql injection : in login pageguestbook/admin/login.asp , username should be blank & password is : ' or 'x'='x...

a new sql injection for aspjar guestbook

hello , my name is: arash setayeshi & my yahoo id is : arashpc0 I found a new vulnerability in aspjar guestbook that we can control website & go to admin control panel by sql injection. sql injection : in login pageguestbook/admin/login.asp , username should be blank & password is : ' or 'x'='x...

JiRos Upload System 1.0 - login.asp SQL Injection

JiRos Upload System 1.0 - login.asp SQL Injection source: https://www.securityfocus.com/bid/13833/info JiRo's Upload System is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query...

JiRo's Upload System 1.0 - 'login.asp' SQL Injection

source: https://www.securityfocus.com/bid/13833/info JiRo's Upload System is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a compromise of...

NEXTWEB (i)Site - login.asp SQL Injection

NEXTWEB iSite - login.asp SQL Injection source: https://www.securityfocus.com/bid/13834/info NEXTWEB iSite is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitatio...

CVE-2005-1005

ProfitCode PayProCart 3.0 allows remote attackers to bypass authentication and gain administrative privileges to the admin control panel, as demonstrated via a direct request to adminshop/index.php with hex-encoded .. sequences in the ftoedit parameter...

CVE-2005-1005

CVE-2005-1005 affects ProfitCode PayProCart 3.0. The vulnerability allows remote attackers to bypass authentication and gain administrative privileges in the admin control panel by issuing a direct request to adminshop/index.php containing hex-encoded .. sequences in the ftoedit parameter, enabli...

CVE-2005-1005

ProfitCode PayProCart 3.0 allows remote attackers to bypass authentication and gain administrative privileges to the admin control panel, as demonstrated via a direct request to adminshop/index.php with hex-encoded .. sequences in the ftoedit parameter...

phpbb cookie admin access

-------------------------------------------------------------------- Written by [email protected] -------------------------------------------------------------------- -------------------------------------------------------------------- Exploit : 2.0.x = phpbb 2.0.12 :...

WpQuiz Gain Admin Rightd Exploit found

Ok so here is what I found Authors website wireplastik.com currently down php script I found exploit in wpquiz version 2.60b8 also tested on 2.60b 1-7 Exploit: by default wpquiz comes with a folder called extras. This folder is not password protected nor does it require any sort of authentication...

CVE-2003-0522

Multiple SQL injection vulnerabilities in ProductCart 1.5 through 2 allow remote attackers to 1 gain access to the admin control panel via the idadmin parameter to login.asp or 2 gain other privileges via the Email parameter to Custva.asp...

CVE-2003-0522

CVE-2003-0522 corresponds to multiple SQL injection vulnerabilities in ProductCart versions 1.5–2.0. The affected components include login.asp (admin access via the idadmin parameter) and Custva.asp (privilege escalation via the Email parameter). The underlying issue is SQL injection that enables...

bosen-adv.7.txt

$Id: bosen-adv.7,v1 25/06/2003 bosen Exp $ 1ndonesian Security Team 1st Bosen Advisory 7 ProductCart SQL Injection 25/06/2003 ProductCart SQL Injection Vulnerability 1ndonesian Security Team 1st http://bosen.net/releases/...