CVE-2009-3187: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in gamelist.php in Stand Alone Arcade 1.1 allows remote attackers to inject arbitrary web script or HTML via the cat parameter...

Sql injection

SQL injection vulnerability in rss.php in Ultimate Regnow Affiliate URA 3.0 allows remote attackers to execute arbitrary SQL commands via the cat parameter...

CVE-2009-2895: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in rss.php in Ultimate Regnow Affiliate URA 3.0 allows remote attackers to execute arbitrary SQL commands via the cat parameter...

CVE-2009-2780

Multiple cross-site scripting XSS vulnerabilities in 68 Classifieds 4.1 allow remote attackers to inject arbitrary web script or HTML via the 1 cat parameter to category.php, view parameter to 2 login.php and 3 viewlisting.php, page parameter to 4 searchresults.php and 5 toplistings.php, and 6...

CVE-2009-2790

SQL injection vulnerability in catproducts.php in SoftBiz Dating Script allows remote attackers to execute arbitrary SQL commands via the cid parameter. NOTE: this might overlap CVE-2006-3271.4...

Ordinary users by udev vulnerability to elevate to root permissions demo-vulnerability warning-the black bar safety net

Recently exposed by the udev permissions hint of vulnerability, as long as with normal user permissions, you can elevate to root privileges, the experiment a handful, really easy to upgrade. Put the following code saved as test. sh file !/ bin/sh Linux 2.6 bug found by Sebastian Krahmer lame splo...

CVE-2009-2603: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in index.php in Escon SupportPortal Pro 3.0 allow remote attackers to execute arbitrary SQL commands via the 1 cat and 2 tid parameters...

GLinks 2.1 Blind SQL Injection

0000000000000000000000000000000000 000000000000000000000 00000000000000000000000000000000000 0000000000000000 00000000000000000000000000000000 + GLinks v2.1 Remote Blind SQL injection + Author : 599eme Man + Contact : [email protected] + Thanks : Moudi, Str0ke, Neocoderz, Sheiry, Shimik Root aka...

CVE-2009-2099: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the iJoomla RSS Feeder comijoomlarss component for Joomla! allows remote attackers to execute arbitrary SQL commands via the cat parameter in an xml action to index.php...

Escon SupportPortal Pro 3.0 (tid) Blind SQL Injection Vulnerability

Exploit for unknown platform in category web applications =================================================================== Escon SupportPortal Pro 3.0 tid Blind SQL Injection Vulnerability =================================================================== Autor : OzX Sitio :...

Sql injection

SQL injection vulnerability in directory.php in Scripts For Sites SFS EZ Pub Site allows remote attackers to execute arbitrary SQL commands via the cat parameter...

CVE-2008-6794: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in directory.php in Scripts For Sites SFS EZ Pub Site allows remote attackers to execute arbitrary SQL commands via the cat parameter...

Sql injection

SQL injection vulnerability in viewfaqs.php in Scripts for Sites SFS EZ Auction allows remote attackers to execute arbitrary SQL commands via the cat parameter...

CVE-2008-6778: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in viewfaqs.php in Scripts for Sites SFS EZ Auction allows remote attackers to execute arbitrary SQL commands via the cat parameter...

CVE-2009-1458: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in admin/index.php in razorCMS before 0.4 allow remote attackers to inject arbitrary web script or HTML via 1 the slab parameter in an edit action, 2 the catname parameter in a showcats action, and 3 the cat parameter in a reordercat action...

CVE-2008-6562: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in jaxlinklists.php in Jack tR Jax LinkLists 1.00 allows remote attackers to inject arbitrary web script or HTML via the cat parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

Sql injection

SQL injection vulnerability in detail.php in MountainGrafix easyLink 1.1.0 allows remote attackers to execute arbitrary SQL commands via the cat parameter in a show action...

CVE-2008-6471: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in detail.php in MountainGrafix easyLink 1.1.0 allows remote attackers to execute arbitrary SQL commands via the cat parameter in a show action...

FreeBSD/x86 - execve(/bin/cat & /etc/master.passwd) - 65 bytes

No description provided by source. ; sm4x 2008 ; /bin/cat /etc/master.passwd ; 65 bytes ; FreeBSD 7.0-RELEASE global start start: xor eax, eax ; --- setuid0 push eax push eax mov al, 0x17 int 0x80 ; --- setup /etc/master.passwd jmp short loadfile ok: pop esi ; setup /bin/cat push eax push...

CVE-2008-6372: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in default.asp in Ocean12 FAQ Manager Pro 1.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter in a Cat action. NOTE: some of these details are obtained from third party information...