AlstraSoft EPay Enterprise v4.0 Blind SQL Injection

Exploit for php platform in category web applications Exploit Title: AlstraSoft EPay Enterprise v4.0 Blind SQL Injection Google Dork: Copyright @ 2010 iPayGold.com Date: Decembar/6/2011 Author: Don BalcanCrew & BalcanHack Software Link: http://www.alstrasoft.com/epayenterprise.htm Version: 4.0...

V-CMS 1.0 SQL Injection

------------------------------------------------------------------------ Software................V-CMS 1.0 Vulnerability...........SQL Injection Threat Level............Critical 4/5 Download................http://v-cms.org/ Discovery Date..........11/13/2011 Tested On...............Windows Vista ...

Support Incident Tracker 3.65 Remote Command Execution

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Support Incident...

Ubuntu 10.04 LTS / 10.10 : xorg-server vulnerability (USN-1232-3)

USN-1232-1 fixed vulnerabilities in the X.Org X server. A regression was found on Ubuntu 10.04 LTS that affected GLX support, and USN-1232-2 was released to temporarily disable the problematic security fix. This update includes a revised fix for CVE-2010-4818. We apologize for the inconvenience. ...

Ubuntu 10.04 LTS : xorg-server regression (USN-1232-2)

USN-1232-1 fixed vulnerabilities in the X.Org X server. A regression was found on Ubuntu 10.04 LTS that affected GLX support. This update temporarily disables the fix for CVE-2010-4818 that introduced the regression. We apologize for the inconvenience. It was discovered that the X server...

Ubuntu 10.04 LTS / 10.10 / 11.04 / 11.10 : xorg-server vulnerabilities (USN-1232-1)

It was discovered that the X server incorrectly handled certain malformed input. An authorized attacker could exploit this to cause the X server to crash, leading to a denial or service, or possibly execute arbitrary code with root privileges. This issue only affected Ubuntu 10.04 LTS and 10.10...

USN-1232-1: X.Org X server vulnerabilities

It was discovered that the X server incorrectly handled certain malformed input. An authorized attacker could exploit this to cause the X server to crash, leading to a denial or service, or possibly execute arbitrary code with root privileges. This issue only affected Ubuntu 10.04 LTS and 10.10...

Mambo 4.6.x 4.6.5 - SQL Injection

Mambo 4.6.x 4.6.5 - SQL Injection ========================================= Mambo CMS 4.6.x 4.6.5 | SQL Injection ========================================= 1. OVERVIEW Mambo CMS 4.6.5 and lower versions are vulnerable to SQL Injection. 2. BACKGROUND Mambo is a full-featured, award-winning content...

Buffer overflow

Buffer overflow in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1.4.x before 1.4.8, and 1.5.x before 1.5.4, when used by an application that calls the pngrgbtogray function but not the pngsetexpand function, allows remote attackers to overwrite memory with an arbitrary amount of data, and...

Arbitrary Data Insertion Vulnerability in Hitachi Web Server SSL/TLS Protocol

Overview When using SSL on the Hitachi Web Server, it could allow an attacker to insert arbitrary data on the top of communication data. Impact A remote attacker could insert arbitrary data on the top of communication data. Solution Please refer to the 'Vendor Information' section for the officia...

Clipbucket 2.4 RC2 645 SQL Injection Vulnerability

Exploit for php platform in category web applications ------------------------------------------------------------------------ Software................Clipbucket 2.4 RC2 645 Vulnerability...........SQL Injection Threat Level............Critical 4/5...

Clipbucket 2.4 RC2 645 - SQL Injection

------------------------------------------------------------------------ Software................Clipbucket 2.4 RC2 645 Vulnerability...........SQL Injection Threat Level............Critical 4/5 Download................http://www.clip-bucket.com/ Discovery Date..........5/23/2011 Tested...

Tickets 2.13 SQL Injection Vulnerability

No description provided by source. !------------------------------------------------------------------------ Software................Tickets 2.13 Vulnerability...........SQL Injection Threat Level............Critical 4/5 Download................http://www.ticketscad.org/ Discovery...

Clipbucket 2.4 RC2 645 - SQL Injection

Clipbucket 2.4 RC2 645 - SQL Injection ------------------------------------------------------------------------ Software................Clipbucket 2.4 RC2 645 Vulnerability...........SQL Injection Threat Level............Critical 4/5 Download................http://www.clip-bucket.com/ Discovery...

Clipbucket 2.4 RC2 645 SQL Injection

------------------------------------------------------------------------ Software................Clipbucket 2.4 RC2 645 Vulnerability...........SQL Injection Threat Level............Critical 4/5 Download................http://www.clip-bucket.com/ Discovery Date..........5/23/2011 Tested...

Tickets 2.13 SQL Injection Vulnerability

Exploit for php platform in category web applications ------------------------------------------------------------------------ --Description-- A sql injection vulnerability in Tickets 2.13 can be exploited to extract arbitrary data. In some environments it may be possible to create a PHP shell...

NoticeBoardPro 1.0 - Multiple Vulnerabilities

NoticeBoardPro 1.0 - Multiple Vulnerabilities ------------------------------------------------------------------------ Software................NoticeBoardPro 1.0 Vulnerability...........SQL Injection Threat Level............Critical 4/5 Download................http://www.NoticeBoardPro.com/...

NoticeBoardPro 1.0 Multiple Vulnerabilities

Exploit for php platform in category web applications ------------------------------------------------------------------------ Software................NoticeBoardPro 1.0 Vulnerability...........SQL Injection Threat Level............Critical 4/5 Download................http://www.NoticeBoardPro.co...

NoticeBoardPro 1.0 - Multiple Vulnerabilities

------------------------------------------------------------------------ Software................NoticeBoardPro 1.0 Vulnerability...........SQL Injection Threat Level............Critical 4/5 Download................http://www.NoticeBoardPro.com/ Discovery Date..........5/11/2011 Tested...

TCExam 11.1.029 SQL Injection

------------------------------------------------------------------------ Software................TCExam 11.1.029 Vulnerability...........SQL Injection Threat Level............Serious 3/5 Download................http://www.tcexam.org/ Discovery Date..........5/2/2011 Tested On...............Window...