Metyus Okul Ynetim Sistemi V.1.0 (tr) Sql injection Vuln.

LiderHack.Org script name : Metyus Okul Ynetim Sistemi V.1.0 tr Script Download : http://www.maxiasp.com/scriptler.asp?ktno=1 Risk : High Found By : ShaFuck31 Thanks : Dekolax , DesquneR , ST@ReXT , SaboTaqe Vulnerable file : uyegirisislem.asp Manual connect : Go to Admin Panel Login -----...

Aspee Ziyareti Defteri (tr) Sql injection Vuln.

LiderHack.Org Script name : Aspee Ziyaretзi Defteri tr Script Download : http://aspindir.com/goster/4575 Risk : High Found By : ShaFuck31 Thanks : Dekolax , DesquneR , ST@ReXT , SaboTaqe Vulnerable file : giris.asp Manual connect : Go to Admin Panel Login ----- http://victim.com/path to...

UltraSite 1.0 (update.asp) Remote SQL Injection Vulnerability

Title : UltraSite 1.0 update.asp Remote SQL Injection Vulnerability Author : ajann Admin Panel= http://target/path//update.asp?id=SQL Example: //update.asp?id=-120union20select200,0,0,username,password,0,0,0,0,0,0,0,0,020from20members20where20id20like207 """"""""""""""""""""" ajann,Turkey ... Im...

CVE-2006-5777

Creasito E-Commerce Content Manager 1.3.08 allows remote attackers to bypass authentication and perform privileged functions via a non-empty finame parameter to 1 addnewcont.php, 2 adminpassw.php, 3 amministrazione.php, 4 artins.php, 5 bgcolor.php, 6 cancartcat.php, 7 canccat.php, 8 cancelart.php...

Creasito E-Commerce Content Manager - 'admin' Authentication Bypass

============================================================================================ Creasito E-Commerce Content Manager admin Authentication Bypass ============================================================================================ Product............: Creasito E-Commerce Conten...

Hazir Site v2.0 Admin SQL Injection

BiyoSecurity.Org script name : HazirSite v2.0 Script Download : http://www.aspindir.com/indir.asp?id=2728 Risk : High Regards : Dj ReMix Thanks : Korsan , Liz0zim , TrIP Vulnerable file : girisyap.asp Manual connect : Go to Admin Panel Login ----- http://victim.com/path to script/idare.asp Remote...

Emek Portal v2.1 SQL Injection

BiyoSecurity.Org script name : Emek Portal v2.1 tr Script Download : http://www.aspindir.com/indir.asp?id=2728 Risk : High Regards : Dj ReMix Thanks : Korsan , Liz0zim , TrIP Vulnerable file : girisyap.asp Manual connect : Go to Admin Panel Login ----- http://victim.com/path to script/uyegiris.as...

phpWordPress (Vivvo Article Manager)

MercilessTurk [email protected] App Name: phpWordPress Vivvo Article Manager App Author: vivvo.net App Version: =3.2 Vulnerable Code in pdfversion.php : line 19: $aid=securesql$GET'id'; line 20: $query="SELECT from tblArticles where id=$aid"; securesql function doesn't block all sql injection...

Vivvo Article Manager 3.2 - id SQL Injection

Vivvo Article Manager 3.2 - id SQL Injection MercilessTurk [email protected] App Name: phpWordPress Vivvo Article Manager App Author: vivvo.net App Version: =3.2 Vulnerable Code in pdfversion.php : line 19: $aid=securesql$GET'id'; line 20: $query="SELECT from tblArticles where id=$aid";...

Vivvo Article Manager 3.2 - 'id' SQL Injection

MercilessTurk [email protected] App Name: phpWordPress Vivvo Article Manager App Author: vivvo.net App Version: =3.2 Vulnerable Code in pdfversion.php : line 19: $aid=securesql$GET'id'; line 20: $query="SELECT from tblArticles where id=$aid"; securesql function doesn't block all sql injection...

Icblogger.txt

Icblogger = "YID" Remote Blind SQL Injection - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Credit by | Chironex Fleckeri Mail | [email protected] - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Usage : http://www.target.com/path/devam.asp?YID=-...

forum112.txt

©ZIXForum 1.12 = "RepId" Remote SQL Injection - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Credit by | Chironex Fleckeri Mail | [email protected] - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Username :...

CVE-2006-4586

The admin panel in Tr Forum 2.0 accepts a username and password hash for authentication, which allows remote authenticated users to perform unauthorized actions, as demonstrated by modifying user settings via the id parameter to /membres/modifprofil.php, and changing a password via...

CVE-2006-4586

CVE-2006-4586 affects the Tr Forum 2.0 admin panel, where authentication can be done by supplying a username and password hash. This enables remote authenticated users to perform unauthorized actions such as modifying user profile settings via /membres/modif_profil.php (id parameter) and changing...

EUVD-2006-4574

The admin panel in Tr Forum 2.0 accepts a username and password hash for authentication, which allows remote authenticated users to perform unauthorized actions, as demonstrated by modifying user settings via the id parameter to /membres/modifprofil.php, and changing a password via...

Zix Forum <= 1.12 (RepId) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================ Zix Forum = 1.12 RepId Remote SQL Injection Vulnerability ============================================================ ZIXForum 1.12 = "RepId" Remote SQL Injection - - - - - - - ...

Zix Forum <= 1.12 (RepId) Remote SQL Injection Vulnerability

No description provided by source. ©ZIXForum 1.12 = "RepId" Remote SQL Injection - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Credit by | Chironex Fleckeri Mail | [email protected] - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Username :...

Zix Forum 1.12 - 'RepId' SQL Injection (1)

©ZIXForum 1.12 = "RepId" Remote SQL Injection - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Credit by | Chironex Fleckeri Mail | [email protected] - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Username :...

Zix Forum 1.12 - RepId SQL Injection (1)

Zix Forum 1.12 - RepId SQL Injection 1 ©ZIXForum 1.12 = "RepId" Remote SQL Injection - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Credit by | Chironex Fleckeri Mail | [email protected] - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Username :...

Tr Forum 2.0 SQL Injection / Bypass Security Restriction Exploit

Exploit for unknown platform in category web applications ================================================================ Tr Forum 2.0 SQL Injection / Bypass Security Restriction Exploit ================================================================ !/usr/bin/perl Affected.scr..: Tr Forum V2.0...