Keld: PHP-MySQL News Script 0.7.1 Remote SQL injection Vulnerability

;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; Name : Keld: PHP-MySQL News Script 0.7.1 Remote SQL injection Vulnerability Author: suN8HclfcrimsoNLoyd9, DaRk-CodeRs Group Source: http://sourceforge.net/project/showfiles.php?groupid=26365 Greetz: c0ndemned, 0in and other DaRk-CodeRs guys, wizZ...

PHPwebnews 0.2 MySQL Edition - id_kat SQL Injection

PHPwebnews 0.2 MySQL Edition - idkat SQL Injection / | | \ | | | | \ \ / / | |/ | | | / | | | | | | | |\ V / | | | | '/ |/ \ | | / | '/ | | || | | |\ | || | | | | | | || | | \ \ / | | | | | | | |/|| |,||| ||/ ,|| |/|||/|| , |...

CVE-2008-2894

Directory traversal vulnerability in the FTP client in NCH Software Classic FTP 1.02 for Windows allows remote FTP servers to create or overwrite arbitrary files via a .. dot dot in a response to a LIST command, a related issue to CVE-2002-1345...

Directory traversal

Directory traversal vulnerability in the FTP client in NCH Software Classic FTP 1.02 for Windows allows remote FTP servers to create or overwrite arbitrary files via a .. dot dot in a response to a LIST command, a related issue to CVE-2002-1345...

CVE-2008-2894

CVE-2008-2894 affects NCH Software Classic FTP 1.02 for Windows. The vulnerability is a directory traversal in the FTP client that lets remote FTP servers cause creation or overwriting of arbitrary files via a .. sequence in a response to a LIST command. The issue originates from how the LIST res...

CVE-2008-2866

SQL injection vulnerability in cscarticledetails.php in Caupo.net CaupoShop Classic 1.3 allows remote attackers to execute arbitrary SQL commands via the saArticleID parameter...

Sql injection

SQL injection vulnerability in cscarticledetails.php in Caupo.net CaupoShop Classic 1.3 allows remote attackers to execute arbitrary SQL commands via the saArticleID parameter...

CVE-2008-2866

CVE-2008-2866 describes an SQL injection in Caupo.net CaupoShop Classic 1.3. The vulnerability resides in the file csc_article_details.php and is exploitable via the parameter saArticle[ID] , enabling remote attackers to execute arbitrary SQL commands on the backend database. The affected product...

CaupoShop Classic 1.3 (saArticle[ID]) Remote SQL Injection Vulnerability

No description provided by source. !/usr/bin/perl CaupoShop Classic 1.3 Remote Exploit Bug by: h0yt3r Dork: inurl:cscarticledetails.php Couldnt find a stable dork for this specific Version. Exploit will only work on correct version. I found this long time ago but never actually shared it. As the...

Classic FTP 1.02 - LIST Directory Traversal

Classic FTP 1.02 - LIST Directory Traversal source: https://www.securityfocus.com/bid/29846/info Classic FTP is prone to a directory-traversal vulnerability because the application fails to sufficiently sanitize user-supplied input. Exploiting this issue allows an attacker to write arbitrary file...

Classic FTP 1.02 - 'LIST' Directory Traversal

source: https://www.securityfocus.com/bid/29846/info Classic FTP is prone to a directory-traversal vulnerability because the application fails to sufficiently sanitize user-supplied input. Exploiting this issue allows an attacker to write arbitrary files to locations outside of the application's...

CaupoShop Classic 1.3 (saArticle[ID]) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ======================================================================== CaupoShop Classic 1.3 saArticleID Remote SQL Injection Vulnerability ======================================================================== !/usr/bin/perl CaupoShop...

CaupoShop Classic 1.3 - 'saArticle[ID]' SQL Injection

!/usr/bin/perl CaupoShop Classic 1.3 Remote Exploit Bug by: h0yt3r Dork: inurl:cscarticledetails.php Couldnt find a stable dork for this specific Version. Exploit will only work on correct version. I found this long time ago but never actually shared it. As the userid's are a bit messy you will...

CaupoShop Classic 1.3 - saArticle[ID] SQL Injection

CaupoShop Classic 1.3 - saArticleID SQL Injection !/usr/bin/perl CaupoShop Classic 1.3 Remote Exploit Bug by: h0yt3r Dork: inurl:cscarticledetails.php Couldnt find a stable dork for this specific Version. Exploit will only work on correct version. I found this long time ago but never actually...

cauposhop-sql.txt

!/usr/bin/perl CaupoShop Classic 1.3 Remote Exploit Bug by: h0yt3r Dork: inurl:cscarticledetails.php Couldnt find a stable dork for this specific Version. Exploit will only work on correct version. I found this long time ago but never actually shared it. As the userid's are a bit messy you will...

CVE-2008-2428

TorrentTrader 1.08 Classic is affected by multiple SQL injection vulnerabilities in the PHP/MySQL-based TorrentTrader platform. Specifically, unsanitized input in account-signup.php (parameters email and wantusername) and in account-inbox.php (parameter receiver when msg is set) allows remote SQL...

realmcms-multi.txt

www.BugReport.ir AmnPardaz Security Research Team Title: Realm CMS Multiple Vulnerabilities Lead to Admin Access. Vendor: www.realmproject.com Vulnerable Version: 2.3 and prior versions Exploit: Available Impact: High Fix: N/A Original Advisory: http://bugreport.ir/index.php?/40 1. Description:...

SQL Injection leading to authorization bypass in Torrent Trader Classic v1.08 and earlier

SQL Injection leading to authorization bypass in Torrent Trader Classic v1.08 and earlier Discovered by: Charles Vaughn [email protected] Software: http://sourceforge.net/projects/torrenttrader Status: Vendor Notified, updated version available Vulnerability TorrentTrader is a popular torrent...

TorrentTrader Classic 1.x - scrape.php SQL Injection

TorrentTrader Classic 1.x - scrape.php SQL Injection source: https://www.securityfocus.com/bid/29451/info TorrentTrader Classic is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allo...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerabilities in account-inbox.php in TorrentTrader Classic 1.08 allow remote attackers to perform certain actions as other users, as demonstrated by sending messages...