New5starRating 1.0 (rating.php) SQL Injection Vulnerability

Exploit for unknown platform in category web applications =========================================================== New5starRating 1.0 rating.php SQL Injection Vulnerability =========================================================== New5starRating v1.0 rating.php Sql Inj. Vuln. Yazar: Bgh7 Tur...

New5starRating 1.0 SQL Injection

New5starRating v1.0 rating.php Sql Inj. Vuln. Yazar: Bgh7 Turk Bilisim Gucleri Download; http://www.maniacomputer.com/5starrating/New5Star.html Bug--Sql Inj. Exp: rating.php?det=-1 union select userid,0,0,userpass from admin Panel: /admin/ Thanks: milw0rm--Str0ke...

Design/Logic Flaw

Wordpress before 2.8.3 allows remote attackers to gain privileges via a direct request to 1 admin-footer.php, 2 edit-category-form.php, 3 edit-form-advanced.php, 4 edit-form-comment.php, 5 edit-link-category-form.php, 6 edit-link-form.php, 7 edit-page-form.php, and 8 edit-tag-form.php in wp-admin...

CVE-2008-6956

Static code injection vulnerability in admin/admin.php in mxCamArchive 2.2 allows remote authenticated administrators to inject arbitrary PHP code into an unspecified program via the description parameter, which is executed by invocation of index.php. NOTE: some of these details are obtained from...

Gallarific 1.1 - '/gallery.php' Arbitrary Delete/Edit Category

Gallarific Photo Gallery = 1.0 Arbitrary Delete-Edit Category Vulnerability //Author: iLker Kandemir -- MEFISTO //Price : 47 $ //script demo : http://www.gallarific.com/demo/index.php //imhatimi.org ---------------------------------------------------------------- //exploit : 1...

CVE-2008-6917

SQL injection vulnerability in admin.php in Exocrew ExoPHPDesk 1.2 Final allows remote attackers to execute arbitrary SQL commands via the username user parameter...

Sql injection

SQL injection vulnerability in admin.php in Exocrew ExoPHPDesk 1.2 Final allows remote attackers to execute arbitrary SQL commands via the username user parameter...

TYPO3 CMS 4.0 - showUid SQL Injection

TYPO3 CMS 4.0 - showUid SQL Injection ----- TYPO3 CMS 4.0 SQL-Injection Vulnerability ----- + Author : CyberNaj, JxE-13 + Vulnerability : SQL injection + Group : Ro0T-MaFia ----- Info CMS: Name : TYPO3 Web : http://typo3.org dowloand : http://typo3.org/download/packages/ Country : Venezuela -----...

TYPO3 CMS 4.0 SQL Injection

----- TYPO3 CMS 4.0 SQL-Injection Vulnerability ----- + Author : CyberNaj, JxE-13 + Vulnerability : SQL injection + Group : Ro0T-MaFia ----- Info CMS: Name : TYPO3 Web : http://typo3.org dowloand : http://typo3.org/download/packages/ Country : Venezuela ----- Vulnerability:...

TYPO3 CMS 4.0 - 'showUid' SQL Injection

----- TYPO3 CMS 4.0 SQL-Injection Vulnerability ----- + Author : CyberNaj, JxE-13 + Vulnerability : SQL injection + Group : Ro0T-MaFia ----- Info CMS: Name : TYPO3 Web : http://typo3.org dowloand : http://typo3.org/download/packages/ Country : Venezuela ----- Vulnerability:...

simplePHPWeb 0.2 Authentication Bypass

simplePHPWeb 0.2 Authentication Bypass Vulnerability + Discovered By SirGod + http://insecurity-ro.org + http://h4cky0u.org + download : http://sourceforge.net/projects/simplephpweb/files/simplephpweb/simplephpweb-v0.2/simplephpweb-v0.2.zip/download + Authentication Bypass Vulnerability - No...

simplePHPWeb 0.2 (files.php) Authentication Bypass Vulnerability

Exploit for unknown platform in category web applications ================================================================ simplePHPWeb 0.2 files.php Authentication Bypass Vulnerability ================================================================ + simplePHPWeb 0.2 Authentication Bypass...

simplePHPWeb 0.2 - files.php Authentication Bypass

simplePHPWeb 0.2 - files.php Authentication Bypass + simplePHPWeb 0.2 Authentication Bypass Vulnerability + Discovered By SirGod + http://insecurity-ro.org + http://h4cky0u.org + download :...

simplePHPWeb 0.2 (files.php) Authentication Bypass Vulnerability

No description provided by source. + simplePHPWeb 0.2 Authentication Bypass Vulnerability + Discovered By SirGod + http://insecurity-ro.org + http://h4cky0u.org + download : http://sourceforge.net/projects/simplephpweb/files/simplephpweb/simplephpweb-v0.2/simplephpweb-v0.2.zip/download +...

Cross-Site Scripting and Insufficient Anti-automation vulnerabilities in XAMPP

Hello 3APA3A! I want to warn you about new security vulnerabilities in XAMPP. These are Cross-Site Scripting and Insufficient Anti-automation vulnerabilities. XSS: http://site/xampp/iart.php?text=223E3Cscript3Ealertdocument.cookie3C/script3E Insufficient Anti-automation:...

CVE-2008-6878

CVE-2008-6878 is a directory traversal vulnerability in Zen Cart where remote attackers can cause arbitrary local file inclusion via a crafted _SESSION[language] value in admin/includes/languages/english.php on Zen Cart 1.3.8a, 1.3.8 and earlier when .htaccess is not supported. The issue affects ...

Vulnerabilities in XAMPP

Hello 3APA3A! I want to warn you about security vulnerabilities in XAMPP. These are Information Leakage, Cross-Site Request Forgery and SQL Injection vulnerabilities. Information Leakage: http://site/xampp/phpinfo.php During access to admin panel via Insufficient Authorization vulnerabilities it'...

Insufficient Authentication, XSS and SQL Injection vulnerabilities in XAMPP

Hello 3APA3A! I want to warn you about security vulnerabilities in XAMPP. These are Insufficient Authentication, Cross-Site Scripting and SQL Injection vulnerabilities. Insufficient Authentication: http://site/xampp/ There are such sites, where access to admin panel of XAMPP is not restricted by...

PowerUpload 2.4 Insecure Cookie

|| || | || o,7 || . o7 || 4||| ow, : / / . |-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=| | | | /' \ /'\ /\ \ /'\ /\ \ | | /, \ /\/\L\ \ \ \ ,/\ /\ \ \ \ / | | //\ \ /' \ /\ //\ Kings of injection | | // | | |...

WebVision 2.1 - 'news.php?n' SQL Injection

!/usr/bin/perl -w WebVision 2.1 n Remote SQL Injection Exploit Demo : http://www.webdev4all.nl/demowebsite/ Dork : Webdevelopment Tinx-IT Dork2: Copyright © 2006-2008 Tinx-IT and open your mind admin panel : www.target.com/path/cms Found by : Mr.tro0oqy E-mail : [email protected] special thank...