e107 Plugin BLOG Engine 2.2 - 'uid' Blind SQL Injection

::e107 Plugin BLOG Engine v2.2 macgurublog.php/uid Blind SQL Injection Vulnerability:: Virangar Security Team www.virangar.net -------- Discoverd By :virangar security teamhadihadi special tnx to:MR.nosrati,black.shadowes,MR.hesy,Zahra & all virangar members & all hackerz greetz:to my best friend...

exteen-disclose.txt

========================================================== Exteen Blog XSS Remote Cookie Disclosure Exploit ========================================================== AUTHOR : CWH Underground DATE : 22 May 2008 SITE : www.citec.us APPLICATION : Exteen Blog VENDOR : www.exteen.com --- Vulnerable...

e107 Plugin BLOG Engine 2.2 (uid) Blind SQL Injection Vulnerability

Exploit for unknown platform in category web applications =================================================================== e107 Plugin BLOG Engine 2.2 uid Blind SQL Injection Vulnerability =================================================================== ::e107 Plugin BLOG Engine v2.2...

Exteen Blog XSS Remote Cookie Disclosure Exploit

========================================================== Exteen Blog XSS Remote Cookie Disclosure Exploit ========================================================== AUTHOR : CWH Underground DATE : 22 May 2008 SITE : www.citec.us APPLICATION : Exteen Blog VENDOR : www.exteen.com --- Vulnerable...

Movable Type session management vulnerability

Overview Movable Type, a web log system from Six Apart KK, contains a vulnerability which could allow a remote attacker to gain illegal access. Impact A remote attacker could freely manipulate a web log by posting or deleting blog entries. Solution None...

a-blog cross-site scripting vulnerability

Overview a-blog, a server-based blog tool from appleple, Inc. contains a cross-site scripting vulnerability. Impact An arbitrary script may be executed on the user's web browser. If session information from a cookie is leaked, an attacker could possibly conduct session hijacking. Solution None...

e107 Plugin BLOG Engine 2.2 (rid) Blind SQL Injection Vulnerability

No description provided by source. + Author: Saime + Script: e107 Plugin BLOG Engine v2.2 rid Blind SQL Injection + URL: http://e107coders.org/download.php?view.1843 + Date: 13/05/2008 + Greetz: BaKo,DrWh4x,optiplex,xprog,cam-man-dan,Tulle,t0pP8uZz,Inspiratio,Novalok,illuz1oN,Untamed,GM,str0ke, a...

e107 Plugin BLOG Engine 2.2 - rid Blind SQL Injection

e107 Plugin BLOG Engine 2.2 - rid Blind SQL Injection + Author: Saime + Script: e107 Plugin BLOG Engine v2.2 rid Blind SQL Injection + URL: http://e107coders.org/download.php?view.1843 + Date: 13/05/2008 + Greetz:...

e107 Plugin BLOG Engine 2.2 (rid) Blind SQL Injection Vulnerability

Exploit for unknown platform in category web applications =================================================================== e107 Plugin BLOG Engine 2.2 rid Blind SQL Injection Vulnerability =================================================================== + Author: Saime + Script: e107 Plugin...

e107 Plugin BLOG Engine 2.2 - 'rid' Blind SQL Injection

Author: Saime + Script: e107 Plugin BLOG Engine v2.2 rid Blind SQL Injection + URL: http://e107coders.org/download.php?view.1843 + Date: 13/05/2008 + Greetz: BaKo,DrWh4x,optiplex,xprog,cam-man-dan,Tulle,t0pP8uZz,Inspiratio,Novalok,illuz1oN,Untamed,GM,str0ke, and everyone else I forgot! + Site:...

Unfixed XSS vulnerability at rdfinewine.com

Security researcher Feralas, has submitted on 05/09/2008 a cross-site-scripting XSS vulnerability affecting rdfinewine.com, which at the time of submission ranked 8065978 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/09/2008. It is current...

Unfixed XSS vulnerability at djantwan.com

Security researcher Feralas, has submitted on 05/09/2008 a cross-site-scripting XSS vulnerability affecting djantwan.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/09/2008. It is currently...

Vulnerability in Multiple Web Application

I found a link about some web applications vulnerability. 1. Chicomos CMS Configuration File Disclosoure 2. Zomplog 3.8.2 Blog Engine Arbitrary Files Download/Disclosoure 3. Wheatlog Blog Engine Auto Create User See below http://kandangjamur.net/tutorial/multiple-application.txt...

Miniweb 2.0 (historymonth) Remote SQL Injection Vulnerability

No description provided by source. Rem0te SQL Injection Vulnerability Miniweb 2.0 index.php Author: HaCkeR-EgY H^0mE: www.pal-hacker.com , atsdp.com CONTact: [email protected] =========================================================== Script : Miniweb " Blog Writer " version : 2.0 Module...

miniweb-sql.txt

Rem0te SQL Injection Vulnerability Miniweb 2.0 index.php Author: HaCkeR-EgY H^0mE: www.pal-hacker.com , atsdp.com CONTact: [email protected] =========================================================== Script : Miniweb " Blog Writer " version : 2.0 Module Price: Only $39.00 Portal Price : $ 11...

Miniweb 2.0 - 'historymonth' SQL Injection

Rem0te SQL Injection Vulnerability Miniweb 2.0 index.php Author: HaCkeR-EgY H^0mE: www.pal-hacker.com , atsdp.com CONTact: [email protected] =========================================================== Script : Miniweb " Blog Writer " version : 2.0 Module Price: Only $39.00 Portal Price : $ 11...

DSA-1568-1 b2evolution - cross site scripting

Bulletin has no description...

Miniweb 2.0 (historymonth) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================= Miniweb 2.0 historymonth Remote SQL Injection Vulnerability ============================================================= Rem0te SQL Injection Vulnerability Miniweb 2.0 index.ph...

FreeBSD : serendipity -- multiple XSS vulnerabilities (9c133aa0-12bd-11dd-bab7-0016179b2dd5)

Hanno Boeck reports : The installer of serendipity 1.3 has various Cross Site Scripting issues. This is considered low priority, as attack scenarios are very unlikely. Various path fields are not escaped properly, thus filling them with JavaScript code will lead to XSS. MySQL error messages are n...

core-sql.txt

Core Impulse SQL Injection vulnerability Vendor site: www.coreimpulse.com discovered by: e.wiZz! Dork: inurl:/products/listProducts.php?cat or inurl:listProducts.php?cat Exploit: http://www.somesite.com/products/listProducts.php?cat=-9999+UNION+ALL+SELECT+username,2,3+FROM+users/...