923 matches found
PHP video script - SQL Injection
PHP video script - SQL Injection Exploit Title: php video script SQL Injection Vulnerability Date: 2011-25-11 Author: longrifle0x Home page: www.security-research.ge software: PHP video script Download:http://www.alurian.com/php-video-script/ Tools: SQLMAP Drok: Copyright � PHP Video Script power...
PT-2011-1782
Name of the Vulnerable Software and Affected Versions MHP Downloadshop affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands via the ItemID parameter in the view item.php file. This can lead to unauthorized access and manipulation of...
StarMoney Banking Software v8.0 - Multiple Vulnerabilities
Document Title: =============== StarMoney Banking Software v8.0 - Multiple Vulnerabilities References Source: ==================== Download: http://www.vulnerability-lab.com/resources/videos/258.wmv View: http://www.youtube.com/watch?v=Bymh3ct1v4g Release Date: ============= 2011-08-30...
PT-2011-1725
Name of the Vulnerable Software and Affected Versions Pre Online Tests Generator Pro affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands via the tid2 parameter in the takefreestart.php file. This can lead to unauthorized access and...
Multiple Vulnerabilities in IWantOneButton WordPress Plugin
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in IWantOneButton WordPress Plugin which could be exploited to perform cross-site scripting and SQL injection attacks. 1 Cross-site scripting XSS vulnerability in IWantOneButton WordPress Plugin The vulnerability...
Symantec IM Manager rdpageimlogic.aspx Multiple SQL Injections (CVE-2010-0112)
Symantec IM Manager is a software-based proxy to secure, manage, and log IM messages for enterprise and public IM protocols. It provides real-time threat protection against IM viruses, worms, and other types of attacks delivered through IM messages. Symantec IM Manager allows the definition of...
Symantec IM Manager LoggedInUsers.lgx Definition File SQL Injections (CVE-2010-0112)
Symantec IM Manager is a software-based proxy to secure, manage, and log IM messages for enterprise and public IM protocols. It provides real-time threat protection against IM viruses, worms, and other types of attacks delivered through IM messages. An SQL injection vulnerability has been reporte...
SQL Injection Vulnerability in TomatoCMS
High-Tech Bridge SA Security Research Lab has discovered vulnerability in TomatoCMS which could be exploited to execute arbitrary SQL commands in applications database. 1 SQL injection vulnerability in TomatoCMS An input validation error exists in the "q" parameter in /news/search. A remote...
Crea Blog Backup Disclosure
======================================================================================== | Title : Crea Blog = by Pass / Download Backup Vulnerability | Author : indoushka | email : [email protected] | Dork : Ce blog a été mis à disposition par CreaBlog | Tested on: windows SP2 Français V.Pnx...
Dvbbs 8.2 SQL injection 0day
DVBBS是一款由WWW.ASPSKY.NET开发和维护的开放源码Asp论坛程序。 Dvbbs 8.2 暂无 请参考官方补丁 www.dvbbs.net 发帖子，标题为下面的sql语句，然后点评论。0为中立, 1为支持, 2为反对 都行。 这时sql语句被执行 库名：a','',1,'akai','2008-2-4','',2;update//dvuser//set//useremail=dbname//where//username='akai'-- 复制代码加前台和后台管理员：a','',1,'akai','2008-2-4','',2;update dvuser set...
Dvbbs 8.2 SQL injection 0day-vulnerability warning-the black bar safety net
This vulnerability was first in the old General forum to see now online are published, the vulnerability is who found the I forget Use: Posting, the title for the following sql statement, and then comments. 0 for neutral, 1 for support, 2 for the opposition. At this time sql statement is executed...
phpCollegeExchange 0.1.5c Multiple SQL Injection Vulnerabilities
phpCollegeExchange 0.1.5c Multiple SQL Injection Vulnerabilities Name phpCollegeExchange Vendor http://phpcollegeex.sourceforge.net Versions Affected 0.1.5c Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact salvatorefresta at gmail dot com Date 2009-12-11 X...
eoCMS SQL injection vulnerability
No description provided by source. eoCMS SQL injection vulnerability 1. General information eoCMS is an open source code software which is used to develop Internet forum http://eocms.com/. On October 15, 2009, Bkis Security detected a SQL injection vulnerability in some functions of eoCMS. This i...
OCS Inventory NG 1.02 SQL Injection
OCS Inventory NG - Multiple SQL Injections May 30 2009 Product Open Computer and Software OCS Inventory NG http://www.ocsinventory-ng.org/ Vulnerable Versions OCS Inventory NG 1.02 Unix Vendor Status Vendor has been notified and the vulnerability has been fixed. Details The Open Computer and...
OCS Inventory NG 1.02 - Multiple SQL Injections
OCS Inventory NG 1.02 - Multiple SQL Injections OCS Inventory NG - Multiple SQL Injections May 30 2009 Product Open Computer and Software OCS Inventory NG http://www.ocsinventory-ng.org/ Vulnerable Versions OCS Inventory NG 1.02 Unix Vendor Status Vendor has been notified and the vulnerability ha...
Invision Power Board 'name'参数SQL注入漏洞
BUGTRAQ ID: 31288 CNCAN ID：CNCAN-2008092307 Invision Power Board是一款基于PHP的论坛程序。 Invision Power Board不正确处理用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，获得敏感信息或可操作数据库。 问题是脚本对'name'参数缺少过滤，构建恶意的SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息。 Invision Power Services Invision Power Board 2.3.5 Invision Power Services Invision Power Boa...
VHCS 2.4.7.1 - vhcs2_daemon Remote Code Execution
VHCS 2.4.7.1 - vhcs2daemon Remote Code Execution !/usr/bin/php -q http://acid-root.new.fr/ [email protected] Exploit: + Logged in Administrator + The administrator has 2 resellers / Changing dareseller's password / Trying to connect as dareseller:thatpwnz + Login successful + The reseller...
Cacti SQL注入漏洞
Cacti是一款基于PHP的WEB应用程序。 Cacti不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞进行SQL注入攻击，可获得敏感信息或操作数据库。 问题是由于脚本对用户提交的WEB参数缺少过滤，提交恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息或可能操作数据库。 Planet Technology WSW-2401 0.8.6 h Planet Technology WSW-2401 0.8.6 g Cacti Cacti 0.8.7 Cacti Cacti 0.8.6 fCacti Cacti 0.8.6 c Cacti Cacti 0.8.5 aCact...
