5502 matches found
CVE-2007-6463
CVE-2007-6463 affects PHP Real Estate Classifieds: multiple XSS flaws in the admin panel allow remote injection of arbitrary script via unspecified text areas/boxes. Base score 4.3 (MEDIUM); impact limited to partial integrity compromise and non-sensitive disclosure, with no authentication requir...
CVE-2007-6463: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in the admin panel in PHP Real Estate Classifieds allow remote attackers to inject arbitrary web script or HTML via unspecified "text areas/boxes."...
phpMyRealty 1.0.x (search.php type) Remote SQL Injection Vulnerability
No description provided by source. xaker.name & grabberz.com . . NN NNNN JNNN NNNN. NNN NNNNNNNNNNN NN NN NNN.NNNF .NNNNN NN """4NNN""" NN NN NNNNNN NNNNN NNN NNN NN NN 4NNNN NNNNNN.NNF NNN NN NN JNNNNL NN NNNNNN NNN NN NN JNNNNNN JNN NNNNN JNNF&nbs...
PHPMyRealty 1.0.x - search.php SQL Injection
PHPMyRealty 1.0.x - search.php SQL Injection xaker.name & grabberz.com . . NN NNNN JNNN NNNN. NNN NNNNNNNNNNN NN NN NNN.NNNF .NNNNN NN """4NNN""" NN NN NNNNNN NNNNN NNN NNN NN NN 4NNNN NNNNNN.NNF NNN NN NN JNNNNL NN NNNNNN NNN NN NN JNNNNNN JNN NNNNN JNNF NN NN .NNNF NNN. NNN 4NNN NNN NN NN JNNN...
PHPMyRealty 1.0.x - 'search.php' SQL Injection
xaker.name & grabberz.com . . NN NNNN JNNN NNNN. NNN NNNNNNNNNNN NN NN NNN.NNNF .NNNNN NN """4NNN""" NN NN NNNNNN NNNNN NNN NNN NN NN 4NNNN NNNNNN.NNF NNN NN NN JNNNNL NN NNNNNN NNN NN NN JNNNNNN JNN NNNNN JNNF NN NN .NNNF NNN. NNN 4NNN NNN NN NN JNNN NNNN NN NNN NNN NN NN NN . http://xaker.name...
Adult Script <= 1.6 Unauthorized Administrative Access Exploit
Exploit for unknown platform in category web applications ============================================================== Adult Script Adult Script Unauthorized Administrative Access Exploit...
MonAlbum 0.87 Upload Shell / Password Grabber Exploit
No description provided by source. !/usr/bin/env perl use strict; use warnings; use LWP::UserAgent; use HTTP::Request::Common; use Getopt::Std; my %args, $user, $password, $sqlhost, $sqluser, $sqlpassword, $cookie, $path, $file, $upload = ; my $tmp = 'cmd1.jpg'; getopts"u:a:f:p:", %args; -a don't...
MonAlbum 0.87 - Arbitrary File Upload Password Grabber
MonAlbum 0.87 - Arbitrary File Upload Password Grabber !/usr/bin/env perl use strict; use warnings; use LWP::UserAgent; use HTTP::Request::Common; use Getopt::Std; my %args, $user, $password, $sqlhost, $sqluser, $sqlpassword, $cookie, $path, $file, $upload = ; my $tmp = 'cmd1.jpg';...
SineCMS 2.3.4 Calendar Remote SQL Injection Vulnerability
No description provided by source. --------------------------------------------------------------- / | |\\\\ \\\\ / | / |/ | | |/ \\\\ | | | |||| \\\\/\\\\| \\\\/ &n...
SineCMS <= 2.3.4 Calendar Remote SQL Injection Vulnerability
No description provided by source. --------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | / \ \ | \ \ | | | \ | |/ \ | | // | || | ||| /| / /\ | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org...
SineCMS 2.3.4 - Calendar SQL Injection
SineCMS 2.3.4 - Calendar SQL Injection --------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg...
SineCMS <= 2.3.4 Calendar Remote SQL Injection Vulnerability
Exploit for unknown platform in category web applications ============================================================ SineCMS | |||| /| / / --------------------------------------------------------------- SineCMS Off --------------------------------------------------------------- Corrupted...
Sql injection
SQL injection vulnerability in admin/index.php in IceBB 1.0-rc6 allows remote attackers to execute arbitrary SQL commands via the X-Forwarded-For HTTP header...
Black Lily 2007 (products.php class) Remote SQL Injection Vulnerability
SnIper-sa.com SSSSS nnn nn ii ppppppp eeeeeeeee rrrrr ss nn nn nn ii pp p ee rr rr s nn nn nn ii pp p ee rr r ss nn nn nn ii ppppppp ee rr rr sssss nn nn nn ii pp eeeeee rrrr ss nn nn nn ii pp ee rrrr s nn nn nn ii pp ee rr rr ss nn nnn ii pp ee rr rr sssss nn nnn ii pp eeeeeeeeee rr rr VerY-SecR...
softbiz2-sql.txt
Softbiz Ad Management plus Script ver 1 SQL INJECTION BY IRCRASH AUTHOR : IRCRASH Dr.Crash Script Download : http://www.softbizscripts.com/ Injection Adress : http://sitename/ads.php?package= SQL C0de :...
CVE-2007-5917
Cross-site request forgery CSRF vulnerability in admin/adminaccount.php in Skalinks 1.5 and earlier allows remote attackers to add arbitrary privileged accounts as administrators via the adminname, adminpassword, admintype, and Addadmin parameters...
DEBIAN-CVE-2007-5828
Cross-site request forgery CSRF vulnerability in the admin panel in Django 0.96 allows remote attackers to change passwords of arbitrary users via a request to admin/auth/user/1/password/. NOTE: this issue has been disputed by Debian, since product documentation includes a recommendation for a CS...
CVE-2007-5828
Cross-site request forgery CSRF vulnerability in the admin panel in Django 0.96 allows remote attackers to change passwords of arbitrary users via a request to admin/auth/user/1/password/. NOTE: this issue has been disputed by Debian, since product documentation includes a recommendation for a CS...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in the admin panel in Django 0.96 allows remote attackers to change passwords of arbitrary users via a request to admin/auth/user/1/password/. NOTE: this issue has been disputed by Debian, since product documentation includes a recommendation for a CS...
CVE-2007-5828
Cross-site request forgery CSRF vulnerability in the admin panel in Django 0.96 allows remote attackers to change passwords of arbitrary users via a request to admin/auth/user/1/password/. NOTE: this issue has been disputed by Debian, since product documentation includes a recommendation for a CS...