PHPCMS2007 SP6 vote模块SQL注射漏洞

vote/vote.php // 22行 $optionids = isarray$op ? implode',',$op : $op; ... $db-query"UPDATE ".TABLEVOTEOPTION." SET number = number+1 WHERE optionid IN $optionids "; PHPCMS2007 SP6 暂无 !/usr/bin/php ?php printr' +---------------------------------------------------------------------------+ Phpcms 200...

Vastal I-Tech Visa Zone (news_id) SQL Injection Vulnerability

No description provided by source. Vastal I-Tech Visa Zone newsid SQL Injection Vulnerability Author : DeViL iRaQ Email : guitarlover46atyahoodotcom Price : $550.00 Script Home Page : http://www.vastal.com/visa-zone-a-specialised-script-made-just-for-law-firm-dealing-in-visa.html Demo :...

Microworld Mailscan 5.6.a Password Reveal Exploit

Exploit for unknown platform in category remote exploits ================================================= Microworld Mailscan 5.6.a Password Reveal Exploit ================================================= /...

Live TV Script (index.php mid) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ========================================================== Live TV Script index.php mid SQL Injection Vulnerability ========================================================== =======================================================...

Vastal I-Tech Share Zone - id SQL Injection

Vastal I-Tech Share Zone - id SQL Injection Vastal I-Tech Share Zone id SQL Injection Vulnerability Author : DeViL iRaQ Email : guitarlover46atyahoodotcom Price : $200.00 Script Home Page : http://www.vastal.com/share-zone-the-file-sharing-software.html Demo : http://www.vastal.com/rapid/ Dork :...

Vastal I-Tech Toner Cart - 'id' SQL Injection

Vastal I-Tech Toner Cart showseriesink.php id SQL Injection Vulnerability Author : DeViL iRaQ Email : guitarlover46atyahoodotcom Price : $400.00 Script Home Page : http://www.vastal.com/toner-cart-a-specialized-script-to-help-you-sell-toners-online.html Demo : http://www.vastal.com/united/ Dork :...

kolifadownload-sql.txt

Title: Kolifa.Net Download Script indir.php ================================================================ + Author : Kacak + Special Thankz : Sa0 & Knock0ut & Biyocanlar & BilisimCanlar & All My Friends + BuqX at Hotmail dot Com +...

iFdate 2.0.3 - SQL Injection

iFdate 2.0.3 - SQL Injection iFdate = 2.0.3 SQL Injection Vulnerability Author: !DoktOR! Date found: 26.08.08 Product: iFdate Version: 2.0.3 Price: $140 Download script: http://depositfiles.com/ru/files/537317 Vulnerability Class: SQL Injection Condition: magicquotesgpc = Off...

vanilla-xss.txt

GulfTech Security Research August 19, 2008 Vendor : Mark O'Sullivan URL : http://www.getvanilla.com/ Version : Vanilla alert document.cookie%3B The above example link would display the end users cookie to them. Of course this can also be used to steal the cookie data as mentioned earlier in this...

phpArcadeScript v4 (cat) Remote SQL Injection Vulnerability

No description provided by source. || | | PHP Arcade Script v4.0 cat Remote SQL Injection Vulnerability | | |---------------------Hussin X----------------------| | | Author: Hussin X | | Home : www.tryag.cc/cc | | email: darkangelg85atYahooDoTcom | | | | | | | script :...

GreenCart PHP Shopping Cart (id) Remote SQL Injection Vulnerability

No description provided by source. || | | GreenCart PHP Shopping Cart id Remote SQL Injection Vulnerability | | |---------------------Hussin X----------------------| | | Author: Hussin X | | Home : www.tryag.cc/cc | | email: darkangelg85atYahooDoTcom | | | | | | script :...

greencart-sql.txt

|| | | GreenCart PHP Shopping Cart id Remote SQL Injection Vulnerability | | |---------------------Hussin X----------------------| | | Author: Hussin X | | Home : www.tryag.cc/cc | | email: darkangelg85atYahooDoTcom | | | | | | script : http://www.pozscripts.com/productdetails.php?itemid=1 | | Do...

GreenCart PHP Shopping Cart (id) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications =================================================================== GreenCart PHP Shopping Cart id Remote SQL Injection Vulnerability =================================================================== || | | GreenCart PHP Shopping Cart id...

GreenCart PHP Shopping Cart - id SQL Injection

GreenCart PHP Shopping Cart - id SQL Injection || | | GreenCart PHP Shopping Cart id Remote SQL Injection Vulnerability | | |---------------------Hussin X----------------------| | | Author: Hussin X | | Home : www.tryag.cc/cc | | email: darkangelg85atYahooDoTcom | | | | | | script :...

pozscripts-sql.txt

|| | | Classified Ads cid Remote SQL Injection Vulnerability | | |---------------------Hussin X----------------------| | | Author: Hussin X | | Home : www.tryag.cc/cc | | email: darkangelg85atYahooDoTcom | | | | | | script : http://www.pozscripts.com/productdetails.php?categoryid=0&itemid=5 | |...

Gregarius <= 0.5.4 rsargs[] Remote SQL Injection Vulnerability

No description provided by source. GulfTech Security Research July 29, 2008 Vendor : Marco Bonetti URL : http://www.gregarius.net/ Version : Gregarius = 0.5.4 Risk : SQL Injection Description: Gregarius is a popular web-based RSS/RDF/ATOM feed aggregator written in php. There are some SQL Injecti...

Pligg CMS 9.9.0 - Cross-Site Scripting Local File Inclusion SQL Injection

Pligg CMS 9.9.0 - Cross-Site Scripting Local File Inclusion SQL Injection GulfTech Security Research July 30, 2008 Vendor : Pligg LLC URL : http://www.pligg.com/ Version : Pligg alertdocument.cookie; The above example link would display the end users cookie to them. Of course this can also be use...

Gregarius <= 0.5.4 SQL Injection

GulfTech Security Research July 29, 2008 Vendor : Marco Bonetti URL : http://www.gregarius.net/ Version : Gregarius = 0.5.4 Risk : SQL Injection Description: Gregarius is a popular web-based RSS/RDF/ATOM feed aggregator written in php. There are some SQL Injection issues in Gregarius that allow f...

PozScripts Classified Ads Script - 'cid' SQL Injection

|| | | Classified Ads cid Remote SQL Injection Vulnerability | | |---------------------Hussin X----------------------| | | Author: Hussin X | | Home : www.tryag.cc/cc | | email: darkangelg85atYahooDoTcom | | | | | | script : http://www.pozscripts.com/productdetails.php?categoryid=0&itemid=5 | |...

Gregarius <= 0.5.4 rsargs[] Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================== Gregarius populate" noti.unread & ". RSSMODEUNREADSTATE ." and i.cid= $cid", "", 0, 2, ITEMSORTHINTR...