Sql injection

SQL injection vulnerability in cscarticledetails.php in Caupo.net CaupoShop Classic 1.3 allows remote attackers to execute arbitrary SQL commands via the saArticleID parameter...

CVE-2008-2866

SQL injection vulnerability in cscarticledetails.php in Caupo.net CaupoShop Classic 1.3 allows remote attackers to execute arbitrary SQL commands via the saArticleID parameter...

CVE-2008-2866

CVE-2008-2866 describes an SQL injection in Caupo.net CaupoShop Classic 1.3. The vulnerability resides in the file csc_article_details.php and is exploitable via the parameter saArticle[ID] , enabling remote attackers to execute arbitrary SQL commands on the backend database. The affected product...

CVE-2008-2866: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in cscarticledetails.php in Caupo.net CaupoShop Classic 1.3 allows remote attackers to execute arbitrary SQL commands via the saArticleID parameter...

Classic FTP 1.02 - LIST Directory Traversal

Classic FTP 1.02 - LIST Directory Traversal source: https://www.securityfocus.com/bid/29846/info Classic FTP is prone to a directory-traversal vulnerability because the application fails to sufficiently sanitize user-supplied input. Exploiting this issue allows an attacker to write arbitrary file...

CaupoShop Classic 1.3 (saArticle[ID]) Remote SQL Injection Vulnerability

No description provided by source. !/usr/bin/perl CaupoShop Classic 1.3 Remote Exploit Bug by: h0yt3r Dork: inurl:cscarticledetails.php Couldnt find a stable dork for this specific Version. Exploit will only work on correct version. I found this long time ago but never actually shared it. As the...

Classic FTP 1.02 - 'LIST' Directory Traversal

source: https://www.securityfocus.com/bid/29846/info Classic FTP is prone to a directory-traversal vulnerability because the application fails to sufficiently sanitize user-supplied input. Exploiting this issue allows an attacker to write arbitrary files to locations outside of the application's...

cauposhop-sql.txt

!/usr/bin/perl CaupoShop Classic 1.3 Remote Exploit Bug by: h0yt3r Dork: inurl:cscarticledetails.php Couldnt find a stable dork for this specific Version. Exploit will only work on correct version. I found this long time ago but never actually shared it. As the userid's are a bit messy you will...

CaupoShop Classic 1.3 - 'saArticle[ID]' SQL Injection

!/usr/bin/perl CaupoShop Classic 1.3 Remote Exploit Bug by: h0yt3r Dork: inurl:cscarticledetails.php Couldnt find a stable dork for this specific Version. Exploit will only work on correct version. I found this long time ago but never actually shared it. As the userid's are a bit messy you will...

CaupoShop Classic 1.3 - saArticle[ID] SQL Injection

CaupoShop Classic 1.3 - saArticleID SQL Injection !/usr/bin/perl CaupoShop Classic 1.3 Remote Exploit Bug by: h0yt3r Dork: inurl:cscarticledetails.php Couldnt find a stable dork for this specific Version. Exploit will only work on correct version. I found this long time ago but never actually...

CaupoShop Classic 1.3 (saArticle[ID]) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ======================================================================== CaupoShop Classic 1.3 saArticleID Remote SQL Injection Vulnerability ======================================================================== !/usr/bin/perl CaupoShop...

CVE-2008-2428

TorrentTrader 1.08 Classic is affected by multiple SQL injection vulnerabilities in the PHP/MySQL-based TorrentTrader platform. Specifically, unsanitized input in account-signup.php (parameters email and wantusername) and in account-inbox.php (parameter receiver when msg is set) allows remote SQL...

realmcms-multi.txt

www.BugReport.ir AmnPardaz Security Research Team Title: Realm CMS Multiple Vulnerabilities Lead to Admin Access. Vendor: www.realmproject.com Vulnerable Version: 2.3 and prior versions Exploit: Available Impact: High Fix: N/A Original Advisory: http://bugreport.ir/index.php?/40 1. Description:...

SQL Injection leading to authorization bypass in Torrent Trader Classic v1.08 and earlier

SQL Injection leading to authorization bypass in Torrent Trader Classic v1.08 and earlier Discovered by: Charles Vaughn [email protected] Software: http://sourceforge.net/projects/torrenttrader Status: Vendor Notified, updated version available Vulnerability TorrentTrader is a popular torrent...

TorrentTrader Classic 1.x - scrape.php SQL Injection

TorrentTrader Classic 1.x - scrape.php SQL Injection source: https://www.securityfocus.com/bid/29451/info TorrentTrader Classic is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allo...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerabilities in account-inbox.php in TorrentTrader Classic 1.08 allow remote attackers to perform certain actions as other users, as demonstrated by sending messages...

CVE-2008-1172

Cross-site request forgery CSRF vulnerabilities in account-inbox.php in TorrentTrader Classic 1.08 allow remote attackers to perform certain actions as other users, as demonstrated by sending messages...

CVE-2008-1173

Cross-site scripting XSS vulnerability in account-inbox.php in TorrentTrader Classic 1.08 allows remote attackers to inject arbitrary web script or HTML via the msg parameter...

CVE-2008-1173

Cross-site scripting XSS vulnerability in account-inbox.php in TorrentTrader Classic 1.08 allows remote attackers to inject arbitrary web script or HTML via the msg parameter...

CVE-2008-1172

CVE-2008-1172 describes a Cross-site request forgery (CSRF) vulnerability in the file account-inbox.php of TorrentTrader Classic 1.08. The issue allows remote attackers to perform certain actions as other users, demonstrated by sending messages. This vulnerability arises in the context of the aff...