CVE-2007-4604

SQL injection vulnerability in viewitem.php in DL PayCart 1.01 allows remote attackers to execute arbitrary SQL commands via the ItemID parameter...

CVE-2007-4604: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in viewitem.php in DL PayCart 1.01 allows remote attackers to execute arbitrary SQL commands via the ItemID parameter...

CVE-2007-4604

SQL injection vulnerability in viewitem.php in DL PayCart 1.01 allows remote attackers to execute arbitrary SQL commands via the ItemID parameter...

paycart-sql.txt

!/usr/bin/perl -w use HTTP::Request; use LWP::UserAgent; --------------------------------------------------------------------------------- scripts : DL PayCart 1.01 - c 2006 Discovered By : irvian scripts site : http://www.dinkumsoft.com/ Thanks To bot : sqlscan, hantuinternet, xcart chanell :...

DL PayCart 1.01 - viewitem.php?ItemID Blind SQL Injection

DL PayCart 1.01 - viewitem.php?ItemID Blind SQL Injection !/usr/bin/perl -w use HTTP::Request; use LWP::UserAgent; --------------------------------------------------------------------------------- scripts : DL PayCart 1.01 - c 2006 Discovered By : irvian scripts site : http://www.dinkumsoft.com/...

DL PayCart 1.01 - 'viewitem.php?ItemID' Blind SQL Injection

!/usr/bin/perl -w use HTTP::Request; use LWP::UserAgent; --------------------------------------------------------------------------------- scripts : DL PayCart 1.01 - c 2006 Discovered By : irvian scripts site : http://www.dinkumsoft.com/ Thanks To bot : sqlscan, hantuinternet, xcart chanell :...

Breakthrough Windows 2 0 0 3 the PHP server to new ideas-vulnerability warning-the black bar safety net

From WIN2000 to WIN XP, WIN2003, MS IIS server security improvement is obvious. In WIN2000, a regular PHP SHELL will be able to put it down; in WIN XP, even Safe mode = off,you cannot use system function executes a system command, but we can also use the comfunction to break;to WIN 2 0 0 3,even i...

The use of dl function breakthrough disable_functions command execution-vulnerability warning-the black bar safety net

Go:http://www. tantao. cn:8 0 8 0/? action=show&id=2 7 5 Article submission: TTorchidy jnchahaat163.com PHP is a powerful and widely used scripting language, a large part of the site is using PHP architecture. Because it provides a powerful file operation function and interact with the system...

CVE-2006-7086

The 1 dlback.php and 2 dlback.cgi scripts in Hot Links allow remote attackers to obtain sensitive information and download the database via a direct request with a modified dl parameter...

solaris/sparc download and execute 278 bytes

No description provided by source. / black-dl-exec-SOLARIS.c MIPS 278:bytes Dowloads a binary from host given named 'evil-dl' to '/tmp/ff' then executes. 11.21.6 Russell Sanford [email protected] gcc -lnsl black-dl-exec-SOLARIS.c -o bdes / include sys/socket.h include netinet/in.h include...

CVE-2006-6233: Undefined Security Weakness

SQL injection vulnerability in the Downloads module for unknown versions of PostNuke allows remote attackers to execute arbitrary SQL commands via the lid parameter in a viewdownloaddetails operation. NOTE: this issue might have been in the viewdownloaddetails function in dl-downloaddetails.php,...

solaris/sparc download and execute 278 bytes

Exploit for solaris/sparc platform in category shellcode ============================================ solaris/sparc download and execute 278 bytes ============================================ / black-dl-exec-SOLARIS.c MIPS 278:bytes Dowloads a binary from host given named 'evil-dl' to '/tmp/ff'...

Breakthrough Windows 2 0 0 3 the PHP server to new ideas-vulnerability warning-the black bar safety net

From WIN2000 to WIN XP, WIN2003, MS IIS server security improvement is obvious. In WIN2000, a regular PHP SHELL will be able to put it down; in WIN XP, even Safe mode = off,you cannot use system function executes a system command, but we can also use the comfunction to break;to WIN 2 0 0 3,even i...

CVE-2005-2839

Multiple cross-site scripting XSS vulnerabilities in MAXdev MD-Pro 1.0.72 allow remote attackers to inject arbitrary web script or HTML via 1 dl-search.php or 2 wl-search.php...

CVE-2005-2839: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in MAXdev MD-Pro 1.0.72 allow remote attackers to inject arbitrary web script or HTML via 1 dl-search.php or 2 wl-search.php...

CVE-2005-2690: Undefined Security Weakness

SQL injection vulnerability in the Downloads module in PostNuke 0.760-RC4b allows PostNuke administrators to execute arbitrary SQL commands via the show parameter to dl-viewdownload.php...

CVE-2002-1865: Undefined Security Weakness

Buffer overflow in the Embedded HTTP server, as used in 1 D-Link DI-804 4.68, Dl-704 V2.56b6, and Dl-704 V2.56b5 and 2 Linksys Etherfast BEFW11S4 Wireless AP + Cable/DSL Router 1.37.2 through 1.42.7 and Linksys WAP11 1.3 and 1.4, allows remote attackers to cause a denial of service crash via a lo...

CVE-2005-0617: Undefined Security Weakness

SQL injection vulnerability in dl-search.php in PostNuke 0.750 and 0.760-RC2 allows remote attackers to execute arbitrary SQL commands via the show parameter...

D-Link Dl-704 2.56 b5 - IP Fragment Denial of Service

D-Link Dl-704 2.56 b5 - IP Fragment Denial of Service // source: https://www.securityfocus.com/bid/3306/info The DLink Dl-704 is a DSL/Cable router and switch designed for home network use. A problem has been discovered in the Dl-704 router. Upon receiving a high amount of fragmented IP packets,...