airVisionNVR 1.1.13 Disclosure / SQL Injection

Exploit Title: airVisionNVR readfile disclosure and sql injection Google Dork: Date: Oct 13, 2012 Exploit Author: pennyGrit Vendor Homepage: http://www.ubnt.com/ Software Link: http://www.ubnt.com/downloads/airvision/airVision-v1.1.3-installer.exe Version: 1.1.13 Tested on: WinXP SP3 CVE: Possibl...

AraDown - 'id' SQL Injection

source: https://www.securityfocus.com/bid/54891/info AraDown is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. A successful exploit may allow an attacker to compromise the application, access or modify data, or...

Symantec Web Gateway 5.0.2 - 'blocked.php?id' Blind SQL Injection

!/usr/bin/python Exploit Title: Symantec Web Gateway 5.0.2 blocked.php id parameter Blind SQL Injection Date: Jul 23 2012 Author: muts Version: Symantec Web Gateway 5.0.2 Vendor URL: http://www.symantec.com Timeline: 29 May 2012: Vulnerability reported to CERT 30 May 2012: Response received from...

PHP Online Chat v1.0 Multiple Vulnerabilties

Exploit for php platform in category web applications PHP Online Chat v1.0 Multiple Vulnerabilties ======================================================================= .:. Author : AtT4CKxT3rR0r1ST email protected .:. Script : http://phponlinechat.com/ .:. Tested On Demo :...

Community Manager 1.0b11 Blind Injection/XSS Vulnerabilties

Exploit for php platform in category web applications Community Manager 1.0b11 Blind Injection/XSS Vulnerabilties ======================================================================= .:. Author : AtT4CKxT3rR0r1ST email protected .:. Script : http://www.dbmasters.net/ .:. Dork : "Powered by dB...

ezContents (1.x.x , 2.0.3) Blind injection/Reflected XSS Vulnerabilties

Exploit for php platform in category web applications ezContents 1.x.x , 2.0.3 Blind injection/Reflected XSS Vulnerabilties ======================================================================= .:. Author : AtT4CKxT3rR0r1ST email protected .:. Script : http://www.ezcontents.org/ === Exploit ===...

Joomla! Component Vik Real Estate 1.0 - Multiple Vulnerabilities

Joomla! Component Vik Real Estate 1.0 - Multiple Vulnerabilities Vik Real Estate 1.0 Component Joomla Multiple Blind Sql Injection Release Date Bug. 27-Oct-2011 Date Added. 30-Sep-2011 Vendor Notification Date. Never Product. Vik Real Estate Platform. Joomla Affected versions. 1.0 Type. Commercia...

ECShop 2.7.2 /api/client/api. php blind injection vulnerability and fix-vulnerability warning-the black bar safety net

Affected version: ECShop 2.7.2 Vulnerability description: ECShop is a domestic fashion online shopping Mall system. ECShop the presence of a blind injection vulnerabilities, the problem exists in the/api/client/api. php file, submit a specially crafted malicious POST request can be performedSQL...

ECShop 2.7.2 /api/client/api.php盲注漏洞

No description provided by source...

Q8portals SQL injection vulnerability-vulnerability warning-the black bar safety net

Vulnerability description: Q8portals is a foreign of asp content management system, due to design flaws, leading tosql injectionvulnerability Vulnerability type: sql injection, ascript injection, blind injection, injection vulnerabilities Google keywords: intext:Powered by: q8portals.com...

Profshop SQL injection vulnerability-vulnerability warning-the black bar safety net

Vulnerability description: Profshop cmsdisplay.phpsince the filter is not strict, resulting in sql blind injection vulnerability. Vulnerability type: sql injection, ascript injection, blind injection, injection vulnerabilities Vulnerability Publisher/date: Caddy-Dz/2011-05-14 Google keywords:...

Industry management system SQL blind injection vulnerability-vulnerability warning-the black bar safety net

Industry management system SQL blind injection vulnerability. The problem of the file index. asp Type: sql blind injection,injection. Test: http://www.tmdsb.com/index.asp?CID=27+and+1=1– http://www.tmdsb.com/index.asp?CID=27+and+1=2– http://www.tmdsb.com/index.asp?CID=SQLI Google keywords:...

BetMore Site Suite 4 Blind SQL Injection

== Script: BetMore Site Suite Version: 4 Link: http://products.epromptc.com/betmore/?pt=4&rfid=55 == Author: BorN To K!LL - h4ck3r Contact: [email protected] == 3xploit: /mainxa.php?lngx=true-value&x=true-value&xid=true-value&bid=Blind-Injection == 3xample: /mainxa.php?lngx=12&x=367&xid=2&bid=782...

Weeds Weedcms v4. 0-5. 0 blind injection vulnerability-vulnerability warning-the black bar safety net

Weeds Weedcms v4. 0 sp1 to the latest 5.0 New Year Edition USERAGENT blind injection vulnerability Program description: wild Weedcms based on the PHP+MYSQL schema. Innovative content management mode, the establishment of channels can be defined in the content model, both in the background you can...

iGaming CMS 1.5 SQL Injection

Exploit Title: iGamingCMS1.5 multiple vulnirabilities Date: 27/08/2010 Author: Sweet Contact : [email protected] Software Link: http://www.igamingcms.com/ Download: http://forums.igamingcms.com/forumdisplay.php?f=5 Version:1.5 Tested on: WinXp sp3 Risk : hight Description : iGaming CMS is a...

iGamingCMS1.5 multiple vulnirabilities

Exploit for php platform in category web applications ====================================== iGamingCMS1.5 multiple vulnirabilities ====================================== Exploit Title: iGamingCMS1.5 multiple vulnirabilities Date: 27/08/2010 Author: Sweet Contact : email protected Software Link:...

iGaming CMS - Multiple SQL Injections

iGaming CMS - Multiple SQL Injections Exploit Title: iGamingCMS1.5 multiple vulnirabilities Date: 27/08/2010 Author: Sweet Contact : [email protected] Software Link: http://www.igamingcms.com/ Download: http://forums.igamingcms.com/forumdisplay.php?f=5 Version:1.5 Tested on: WinXp sp3 Risk : hi...

PHP Live 3.3 Remote SQL Injection Exploit

Exploit for php platform in category web applications ========================================= PHP Live 3.3 Remote SQL Injection Exploit ========================================= !/usr/bin/perl -w Exploit Title: PHP Live 3.3 Date: 01/08/2010 Author: TA4G - email protected Vendor:...

Joomla Component PhotoMap Gallery 1.6.0 Multiple Blind SQL Injection

Exploit for php platform in category web applications ==================================================================== Joomla Component PhotoMap Gallery 1.6.0 Multiple Blind SQL Injection ==================================================================== PhotoMap Gallery 1.6.0 Joomla...

PunBB <= 1.3.4 Pun_PM <= v1.2.6 Blind SQL Injection Vulnerability

Exploit for php platform in category web applications ================================================================= PunBB 526 function punpmeditmessage global $forumdb, $forumuser, $langpunpm; $errors = array; // Verify input data $query = array 'SELECT' = 'm.id as id, m.senderid as senderid,...