maxfileupload-upload.txt

File Upload Exploit AUTHOR: THuGM4N Email : [email protected] Script : maxFileUpload Site : http://anyscripte.com/?now=get&nav=null&message=Downloading&file=maxFileUpload.zip EXPLOIT : The Attacker can upload php shell Format in this script So Go upload any phpshell forma directly and enjoy it !! It...

Keld PHP-MySQL News Script 0.7.1 - 'login.php' SQL Injection

source: https://www.securityfocus.com/bid/30529/info Keld PHP-MySQL News Script is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application,...

EasyPublish 3.0 - 'read' Multiple SQL Injections / Cross-Site Scripting

source: https://www.securityfocus.com/bid/30307/info EasyPublish is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied data. The issues include SQL-injection and cross-site scripting vulnerabilities. Exploiting these issues could allow an...

PHP-Nuke 4ndvddb 0.91 Module - 'id' SQL Injection

source: https://www.securityfocus.com/bid/30120/info The '4ndvddb' module for PHP-Nuke is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

Joomla! / Mambo Component com_is 1.0.1 - Multiple SQL Injections

source: https://www.securityfocus.com/bid/30063/info The 'comis' component for Joomla! and Mambo is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to...

Joomla! Mambo Component com_is 1.0.1 - Multiple SQL Injections

Joomla! Mambo Component comis 1.0.1 - Multiple SQL Injections source: https://www.securityfocus.com/bid/30063/info The 'comis' component for Joomla! and Mambo is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL...

RSS-aggregator 1.0 - 'IdFlux' SQL Injection

source: https://www.securityfocus.com/bid/30016/info RSS-aggregator is prone to multiple SQL-injection and authentication-bypass vulnerabilities. A successful exploit could allow an attacker to compromise the application, access or modify data, exploit vulnerabilities in the underlying database,...

E-topbiz Link ADS 1 - 'out.php' SQL Injection Vulnerability

E-topbiz Link ADS 1 'out.php' SQL Injection Vulnerability. Webapps exploit for php platform source: http://www.securityfocus.com/bid/29923/info Link ADS 1 is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query...

Basic-CMS - 'index.php' SQL Injection Vulnerability

Basic-CMS 'index.php' SQL Injection Vulnerability. Webapps exploit for php platform source: http://www.securityfocus.com/bid/29771/info Basic-CMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting thi...

PHPEasyData 1.5.4 - 'last_records.php?annuaire' Cross-Site Scripting

source: https://www.securityfocus.com/bid/29659/info PHPEasyData is prone to multiple SQL-injection and cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage the cross-site scripting issues to execute arbitrary script code in the...

PHPEasyData 1.5.4 - annuaire.php?annuaire SQL Injection

PHPEasyData 1.5.4 - annuaire.php?annuaire SQL Injection source: https://www.securityfocus.com/bid/29659/info PHPEasyData is prone to multiple SQL-injection and cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage the cross-site...

PHPEasyData 1.5.4 - 'annuaire.php?annuaire' SQL Injection

source: https://www.securityfocus.com/bid/29659/info PHPEasyData is prone to multiple SQL-injection and cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage the cross-site scripting issues to execute arbitrary script code in the...

PHPEasyData 1.5.4 - last_records.php?annuaire Cross-Site Scripting

PHPEasyData 1.5.4 - lastrecords.php?annuaire Cross-Site Scripting source: https://www.securityfocus.com/bid/29659/info PHPEasyData is prone to multiple SQL-injection and cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage the...

PHP Address Book 3.1.5 - Multiple SQL Injections Cross-Site Scripting Vulnerabilities

PHP Address Book 3.1.5 - Multiple SQL Injections Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/29560/info PHP Address Book is prone to multiple cross-site scripting and SQL-injection vulnerabilities because the application fails to sufficiently sanitize...

Te Ecard - 'id' Multiple SQL Injections

source: https://www.securityfocus.com/bid/29478/info Te Ecard is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied input before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the application, access or...

TorrentTrader Classic 1.x - scrape.php SQL Injection

TorrentTrader Classic 1.x - scrape.php SQL Injection source: https://www.securityfocus.com/bid/29451/info TorrentTrader Classic is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allo...

CMS Easyway - mid SQL Injection

CMS Easyway - mid SQL Injection source: https://www.securityfocus.com/bid/29461/info CMS Easyway is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

JustPORTAL 1.0 - site Multiple SQL Injections

JustPORTAL 1.0 - site Multiple SQL Injections source: https://www.securityfocus.com/bid/29426/info JustPORTAL is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an...

dvbbs 8.2 - login.asp Multiple SQL Injections

dvbbs 8.2 - login.asp Multiple SQL Injections source: https://www.securityfocus.com/bid/29429/info The 'dvbbs' program is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could all...

Proje ASP Portal 2.0 - id Multiple SQL Injections

Proje ASP Portal 2.0 - id Multiple SQL Injections source: https://www.securityfocus.com/bid/29427/info Proje ASP Portal is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied input before using it in an SQL query. Exploiting these issues could...