174 matches found
Altech Technology <= Remote SQL Injection Vulnerability
Exploit for php platform in category web applications ======================================================= Altech Technology Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : Inj3ct0r.com 0 1 + Support e-mail : submitatinj3ct0r.com 1 0 0 1 1 0 I'm...
BarCodeWiz Barcode 3.29 Buffer Overflow
BarCodeWiz Barcode ActiveX Control 3.29 BoF SEH Bug found: 24th July 2010 Author: loneferret Software: http://www.barcodewiz.com/ Nods to exploit-db.com Vulnerable file BarCodeWiz.dll LoadProperties method Tested on: Windows XP Professional SP3 with Internet Explorer 6 Needs adjustment for Intern...
dit.cms 1.3 Local File Inclusion
dit.cms 1.3 path/sitemap/relPath Local File Inclusion Vulnerabilities + Discovered By SirGod + http://insecurity-ro.org + http://h4cky0u.org + Homepage : http://ditcms.org/ + Local File Inclusion - Note : registerglobals = on - Vulnerable code is everywhere - PoC's...
dit.cms 1.3 - 'path/sitemap/relPath' Local File Inclusion
dit.cms 1.3 path/sitemap/relPath Local File Inclusion Vulnerabilities + Discovered By SirGod + http://insecurity-ro.org + http://h4cky0u.org + Homepage : http://ditcms.org/ + Local File Inclusion - Note : registerglobals = on - Vulnerable code is everywhere - PoC's...
Month Of Twitter Bugs - yfrog XSS
Tuesday, July 7, 2009 MoTB 07: Reflected XSS vulns in yfrog What is yfrog "yfrog is a service run by ImageShack that lets you share your photos on and videos on Twitter." yfrog FAQ page Twitter affect yfrog can be used to send tweets by uploading new photos, or posting comments on existing photos...
webshell431-xssxsrf.txt
======================================================================= . .. | | / / | | | | / \ / / /\ / / \ | | | / / \ /\ \| | / // / /\ \ / / / // http://www.lowsec.org ========================================================================...
major_rls54.txt
MajorSecurity Advisory 54xt:Commerce - Cross Site Scripting and Session Fixation Issues Details ======= Product: xt:Commerce Security-Risk: moderated Remote-Exploit: yes Vendor-URL: http://www.xtcommerce-shop.com/ Vendor-Status: informed Advisory-Status: published Credits ============ Discovered...
Sql injection
Multiple SQL injection vulnerabilities in Concepts & Solutions QuickUpCMS allow remote attackers to execute arbitrary SQL commands via the 1 nr parameter to a frontend/news.php, the 2 id parameter to b events3.php and c videos2.php in frontend/, the 3 y parameter to d frontend/events2.php, and th...
CVE-2008-2530
Multiple SQL injection vulnerabilities in Concepts & Solutions QuickUpCMS allow remote attackers to execute arbitrary SQL commands via the 1 nr parameter to a frontend/news.php, the 2 id parameter to b events3.php and c videos2.php in frontend/, the 3 y parameter to d frontend/events2.php, and th...
CVE-2008-2530
Multiple SQL injection vulnerabilities in Concepts & Solutions QuickUpCMS allow remote attackers to execute arbitrary SQL commands via the 1 nr parameter to a frontend/news.php, the 2 id parameter to b events3.php and c videos2.php in frontend/, the 3 y parameter to d frontend/events2.php, and th...
CVE-2008-2530
CVE-2008-2530 concerns multiple SQL injection vulnerabilities in Concepts & Solutions QuickUpCMS. The issues allow remote attackers to inject SQL via specific parameters: nr to frontend/news.php; id to frontend/events3.php and frontend/videos2.php; y to frontend/events2.php; and ser to frontend/f...
Insanely simple blog - Multiple vulnerabilities
Insanely simple blog version 0.5 and below http://sourceforge.net/projects/insanelysimple2 ISB contains multple vulnerabilities including both XSS, and SQL injection. First off, the search action fails to strip user content for html allowing a user to input tags. Next, anonymous blog entries can...
isb05-sql.txt
Insanely simple blog version 0.5 and below http://sourceforge.net/projects/insanelysimple2 ISB contains multple vulnerabilities including both XSS, and SQL injection. First off, the search action fails to strip user content for html allowing a user to input tags. Next, anonymous blog entries can...
CVE-2006-5991
Multiple SQL injection vulnerabilities in wwweb concepts CactuShop allow remote attackers to execute arbitrary SQL commands via the 1 prodtype parameter in prodtype.asp and the 2 product parameter in product.asp...
CVE-2006-5991
CVE-2006-5991 describes multiple SQL injection vulnerabilities in the wwweb Concepts CactuShop application, enabling remote attackers to alter or extract data by supplying crafted values to the following parameters: (1) prodtype in prodtype.asp and (2) product in product.asp. The connected docume...
Zix Forum <= 1.12 (layid) SQL Injection Vulnerability
No description provided by source. Zix Forum = 1.12 layid SQL Injection Vulnerability Vulnerability: -------------------- SQLInjection: Input passed to the "layid" parameter in 'settings.asp' not properly sanitised before being used in a SQL query. This can be exploited to manipulate SQL queries ...
CVE-2005-4508
Nexus Concepts Dev Hound 2.24 and earlier allows remote attackers to obtain the installation path via a URL containing a non-existent .dll file...
CVE-2005-4506
Nexus Concepts Dev Hound 2.24 and earlier stores username and password information in cleartext in the devhound.tdbd file, which allows local users to gain privileges...
CVE-2005-4508
Nexus Concepts Dev Hound 2.24 and earlier allows remote attackers to obtain the installation path via a URL containing a non-existent .dll file...
CVE-2005-4507
Multiple cross-site scripting XSS vulnerabilities in Nexus Concepts Dev Hound 2.24 and earlier allow remote attackers to inject arbitrary web script or HTML via multiple unspecified user input fields...