WordPress Plugin WP-Forum 2.3 - SQL Injection / Blind SQL Injection

============================================= INTERNET SECURITY AUDITORS ALERT 2009-010 - Original release date: September 28th, 2009 - Last revised: December 15th, 2009 - Discovered by: Juan Galiana Lara - CVE ID: CVE-2009-3703 - Severity: 8.5/10 CVSS Base Score...

ASPGuest - 'edit.asp?ID' Blind SQL Injection

? ?????????????????????????In The Name Of Allah The Mercifull?????????????????????? ? Tybe:edit.asp ID Blind SQL Injection Vulnerability Vendor: www.cjwsoft.com Software: ASPGuest free author: R3d-D3v!L Date: 17.dec.2009 T!ME: 3:03 am ? Home: WwW.xP10.ME ? contact: N/A ?...

Family Connections <= 2.1.3 Multiple Remote Vulnerabilities

Family Connections = 2.1.3 Multiple Remote Vulnerabilities Name Family Connections Vendor http://www.familycms.com Versions Affected = 2.1.3 Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact salvatorefresta at gmail dot com Date 2009-12-16 X. INDEX I. ABOUT THE...

Smart ASPad(campaignEdit.asp CCam) Blind SQL Injection

No description provided by source. ? ?????????????????????????In The Name Of Allah The Mercifull?????????????????????? ? Tybe:campaignEdit.asp CCam Blind SQL Injection Vulnerability Vendor: www.smartasp.net Software: Smart ASPad author: R3d-D3v!L Date: 17.dec.2009 T!ME: 3:03 am ? Home: WwW.xP10.M...

Smart ASPad(campaignEdit.asp CCam) Blind SQL Injection

Exploit for unknown platform in category web applications ====================================================== Smart ASPadcampaignEdit.asp CCam Blind SQL Injection ====================================================== Err0r C0N50L3: www.target.com/path/campaignEdit.asp?CCam=EV!L blind sql EV!L...

Smart ASPad - campaignEdit.asp?CCam Blind SQL Injection

Smart ASPad - campaignEdit.asp?CCam Blind SQL Injection ? ?????????????????????????In The Name Of Allah The Mercifull?????????????????????? ? Tybe:campaignEdit.asp CCam Blind SQL Injection Vulnerability Vendor: www.smartasp.net Software: Smart ASPad author: R3d-D3v!L Date: 17.dec.2009 T!ME: 3:03 ...

WordPress Plugin WP-Forum 2.3 - SQL Injection Blind SQL Injection

WordPress Plugin WP-Forum 2.3 - SQL Injection Blind SQL Injection ============================================= INTERNET SECURITY AUDITORS ALERT 2009-010 - Original release date: September 28th, 2009 - Last revised: December 15th, 2009 - Discovered by: Juan Galiana Lara - CVE ID: CVE-2009-3703 -...

WP-Forum <= 2.3 SQL Injection & Blind SQL Injection vulnerabilities

Exploit for unknown platform in category web applications =================================================================== WP-Forum = 5.0 III. DESCRIPTION ------------------------- WP-Forum fails to sanitized user supplied input and is vulnerable to SQL Injection and Blind SQL Injection. An...

ASPGuest (edit.asp ID) Blind SQL Injection

Exploit for unknown platform in category web applications ========================================== ASPGuest edit.asp ID Blind SQL Injection ========================================== Err0r C0N50L3: www.target.com/path/admin/edit.asp?ID=EV!L blind sql EV!L BL!ND sql 7Ru3 : campaignEdit.asp?CCam=...

ASPGuest (edit.asp ID) Blind SQL Injection

No description provided by source. ? ?????????????????????????In The Name Of Allah The Mercifull?????????????????????? ? Tybe:edit.asp ID Blind SQL Injection Vulnerability Vendor: www.cjwsoft.com Software: ASPGuest free author: R3d-D3v!L Date: 17.dec.2009 T!ME: 3:03 am ? Home: WwW.xP10.ME ?...

WSCreator 1.1 Blind SQL Injection

WSCreator 1.1 Blind SQL Injection Name WSCreator Vendor http://www.wscreator.com Versions Affected 1.1 Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact salvatorefresta at gmail dot com Date 2009-12-15 X. INDEX I. ABOUT THE APPLICATION II. DESCRIPTION III...

WSCreator 1.1 Blind SQL Injection

No description provided by source. Name WSCreator Vendor http://www.wscreator.com Versions Affected 1.1 Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact salvatorefresta at gmail dot com Date 2009-12-15 X. INDEX I. ABOUT THE APPLICATION II. DESCRIPTION III...

WSCreator 1.1 - Blind SQL Injection

WSCreator 1.1 - Blind SQL Injection Name WSCreator Vendor http://www.wscreator.com Versions Affected 1.1 Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact salvatorefresta at gmail dot com Date 2009-12-15 X. INDEX I. ABOUT THE APPLICATION II. DESCRIPTION III...

PhpShop Multiple Vulnerabilities

Application: PhpShop Version affected: 0.8.1 Website: http://www.phpshop.org/ Discovered By: Andrea Fabrizi Email: [email protected] Web: http://www.andreafabrizi.it Vuln: Multiple Vulnerabilities SQL INJECTION http://localhost/phpshop-0.8.1/?page=admin/functionlist&moduleid=111111' union...

PhpShop 0.8.1 SQL Injection / XSS / XSRF

Application: PhpShop Version affected: 0.8.1 Website: http://www.phpshop.org/ Discovered By: Andrea Fabrizi Email: [email protected] Web: http://www.andreafabrizi.it Vuln: Multiple Vulnerabilities SQL INJECTION http://localhost/phpshop-0.8.1/?page=admin/functionlist&moduleid=111111' union...

phpShop 0.8.1 Multiple Vulnerabilities

Exploit for unknown platform in category web applications ====================================== phpShop 0.8.1 Multiple Vulnerabilities ====================================== Vendor: http://www.phpshop.org/ Discovered By: Andrea Fabrizi SQL INJECTION...

PhpShop 0.8.1 Multiple Vulnerabilities

No description provided by source. Vendor: http://www.phpshop.org/ Discovered By: Andrea Fabrizi Email: [email protected] Web: http://www.andreafabrizi.it SQL INJECTION http://server/phpshop-0.8.1/?page=admin/functionlist&moduleid=111111' union select...

phpShop 0.8.1 - Multiple Vulnerabilities

phpShop 0.8.1 - Multiple Vulnerabilities Vendor: http://www.phpshop.org/ Discovered By: Andrea Fabrizi Email: [email protected] Web: http://www.andreafabrizi.it SQL INJECTION http://server/phpshop-0.8.1/?page=admin/functionlist&moduleid=111111' union select...

phpShop 0.8.1 - Multiple Vulnerabilities

Vendor: http://www.phpshop.org/ Discovered By: Andrea Fabrizi Email: [email protected] Web: http://www.andreafabrizi.it SQL INJECTION http://server/phpshop-0.8.1/?page=admin/functionlist&moduleid=111111' union select 1,database,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1 -- aaa...

ActiveBids Blind SQL Injection

ActiveBids default.asp Blind SQL Injection Vulnerability Author : Hussin X Home : www.IQ-TY.com email : [email protected] Vendor : http://www.activewebsoftwares.com Demo : http://server/default.asp?catid=39+and+1=1 true http://server/default.asp?catid=39+and+1=0 false :: test ::...