CVE-2008-6468

CVE-2008-6468 affects Diesel Pay: SQL injection in index.php via the area parameter in a browse action. Root cause is improper input handling in that parameter, enabling remote attackers to potentially execute arbitrary SQL commands. The vulnerability is rated CVSS v2 base score 7.5 (HIGH) with n...

Fedora Update for liferea FEDORA-2007-1146

Check for the Version of liferea OpenVAS Vulnerability Test Fedora Update for liferea FEDORA-2007-1146 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

SkyPortal Picture Manager 0.11 Contents Change Vulnerability

No description provided by source. @=======================================@ ====C4TEAM.ORG====ByALBAYX====C4TEAM.ORG===== @=======================================@ @=Author : ByALBAYX @=Website : WWW.C4TEAM.ORG @=From : Turkish @=======================================@ @=Script :SkyPortal Pictur...

MP3 TrackMaker 1.5 - '.mp3' Local Heap Overflow (PoC)

!/bin/perl Author : HouSSamix MP3 TrackMaker v1.5 .mp3 File Heap Overflow PoC http://www.heathcosoft.com/software/mp3trackmaker/mp3tm15.exe open the program browse source file file exploit EAX 41414141 $file" or die "Cannot open $file: $!"; print $FILE "A" x 1200; close$FILE; print "$file has bee...

Sql injection

Multiple SQL injection vulnerabilities in iGaming 1.5 and earlier allow remote attackers to execute arbitrary SQL commands via the browse parameter to 1 previews.php and 2 reviews.php, and the 3 id parameter to index.php in a viewarticle action...

flash-plugin: upload/download user interaction

ActionScript in Adobe Flash Player 9.0.124.0 and earlier does not require user interaction in conjunction with 1 the FileReference.browse operation in the FileReference upload API or 2 the FileReference.download operation in the FileReference download API, which allows remote attackers to create ...

flash-plugin: upload/download user interaction

ActionScript in Adobe Flash Player 9.0.124.0 and earlier does not require user interaction in conjunction with 1 the FileReference.browse operation in the FileReference upload API or 2 the FileReference.download operation in the FileReference download API, which allows remote attackers to create ...

CVE-2008-4674

SQL injection vulnerability in realestate-index.php in Conkurent Real Estate Manager 1.01 allows remote attackers to execute arbitrary SQL commands via the catid parameter in browse mode...

CVE-2008-4674

SQL injection vulnerability in realestate-index.php in Conkurent Real Estate Manager 1.01 allows remote attackers to execute arbitrary SQL commands via the catid parameter in browse mode...

CVE-2008-4674

The vulnerability CVE-2008-4674 affects Conkurent Real Estate Manager 1.01, with a SQL injection in the realestate-index.php file that accepts the cat_id parameter in browse mode. This allows remote attackers to execute arbitrary SQL commands. The connected documents confirm the issue and base im...

[SECURITY] Fedora 8 Update: liferea-1.4.15-4.fc8

Liferea Linux Feed Reader is an RSS/RDF feed reader. It's intended to be a clone of the Windows-only FeedReader. It can be used to maintain a list of subscribed feeds, browse through their items, and show their contents...

CVE-2008-3711

SQL injection vulnerability in index.php in PHPArcadeScript PHP Arcade Script 4.0 allows remote attackers to execute arbitrary SQL commands via the cat parameter in a browse action...

phpArcadeScript 4 - 'cat' SQL Injection

|| | | PHP Arcade Script v4.0 cat Remote SQL Injection Vulnerability | | |---------------------Hussin X----------------------| | | Author: Hussin X | | Home : www.tryag.cc/cc | | email: darkangelg85atYahooDoTcom | | | | | | | script : http://www.phparcadescript.com | | DorK : :-P || Exploit:...

CVE-2008-3383

SQL injection vulnerability in mojoAuto.cgi in MojoAuto allows remote attackers to execute arbitrary SQL commands via the cata parameter in a browse action...

Joomla Simple Shop Galore Component 3.x (catid) SQL Injection

No description provided by source. ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ @ Joomla option: comsimpleshop SQL Injection ------------------------------------------------------ @ AUTHOR: eXeCuTeR executerxatgmaildotcom...

Joomla Simple Shop Galore Component 3.x (catid) SQL Injection

Exploit for unknown platform in category web applications ============================================================= Joomla Simple Shop Galore Component 3.x catid SQL Injection =============================================================...

Unfixed XSS vulnerability at www.muslima.com

Security researcher TurKPoweR, has submitted on 13/06/2008 a cross-site-scripting XSS vulnerability affecting www.muslima.com, which at the time of submission ranked 8354 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/11/2008. It is current...

joomlasimple-sql.txt

/---------------------------------------------------------------\ \ / / Joomla Component simpleshop Remote SQL injection \ \ / ---------------------------------------------------------------/ Author : His0k4 ALGERIAN HaCkEr Dork : inurl:comsimpleshop Dork : inurl:comsimpleshop "catid" POC :...

Joovili 3.1 - 'browse.videos.php' SQL Injection

-Joovili- Rem0te SQL Injection Vulnerability IN == browse.videos.php Author: HaCkeR-EgY H^0mE: WWW.PAL-HACKER.COM , ATSDP.COM CONTact: [email protected] ================================================ Script : Joovili version : Version 3.1.0 price :$155 USD DOWNL0AD : www.joovili.com...

[SECURITY] Fedora 7 Update: galeon-2.0.3-17.fc7

Galeon is a web browser built around Gecko Mozilla's rendering engine and Necko Mozilla's networking engine. It's a GNOME web browser, designed to take advantage of as many GNOME technologies as makes sense. Galeon was written to do just one thing - browse the web...