Snitz Forums 2000 - TOPIC_ID SQL Injection

Snitz Forums 2000 - TOPICID SQL Injection source: https://www.securityfocus.com/bid/51596/info Snitz Forums 2000 is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. A successful exploit will allow an attacker to...

Open Source MySQL Injection: sqlsus

sqlsus is an open source MySQL injection and takeover tool, written in perl. Via a command line interface, you can retrieve the databases structure, inject your own SQL queries even complex ones, download files from the web server, crawl the website for writable directories, upload and control a...

Contus Job Portal - 'Category' SQL Injection

source: https://www.securityfocus.com/bid/51404/info Contus Job Portal is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. A successful exploit will allow an attacker to compromise the application, access or modi...

Joomla! Component com_contushdvideoshare 1.3 - 'id' SQL Injection

source: https://www.securityfocus.com/bid/51411/info The HD Video Share 'comcontushdvideoshare' component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an...

MYSQL Schema Dump

This module extracts the schema information from a MySQL DB server. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'yaml' class MetasploitModule 'MYSQL Schema Dump', 'Description' = %Q This module extracts th...

PHPShop CMS 3.4 - Multiple Cross-Site Scripting SQL Injections

PHPShop CMS 3.4 - Multiple Cross-Site Scripting SQL Injections source: https://www.securityfocus.com/bid/51130/info PHPShop CMS is prone to multiple cross-site scripting and SQL-injection vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically...

Joomla! Component com_tsonymf - 'idofitem' SQL Injection

source: https://www.securityfocus.com/bid/51125/info Joomla! 'comtsonymf' component is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application,...

MySQL.com Once again Compromised using Sql Flaw

MySQL.com Once again Compromised using Sql Flaw A hacker with name "D35M0ND142" claim to hack MySql.com website using Sql Injection Flaws. In September, Mysql.com was hacked and it was serving BlackHole exploit malware on the site. In a pastebin dump Hacker Exposes various Admin user credentials...

MySQL.com Once again Compromised using Sql Flaw

MySQL.com Once again Compromised using Sql Flaw A hacker with name "D35M0ND142 " claim to hack MySql.com website using Sql Injection Flaws. In September, Mysql.com was hacked and it was serving BlackHole exploit malware on the site. In a pastebin dump Hacker Exposes various Admin user credentials...

Digital Attic Foundation CMS - id SQL Injection

Digital Attic Foundation CMS - id SQL Injection source: https://www.securityfocus.com/bid/50735/info Digital Attic Foundation CMS is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit...

Ideal home enterprise website CMS system vulnerabilities-vulnerability warning-the black bar safety net

Brief description: The default database didn't do anti-download limit Causing the user can download the database and sign in the background While the website uploaded at didn't do the filter, you can upload any file The manufacturer's site also has this vulnerability The default database address:...

eFront <= 3.6.10 build 11944 Multiple XSS and SQLi Vulnerabilities

eFront is prone to multiple cross-site scripting XSS and SQL injection SQLi vulnerabilities because the software fails to sufficiently sanitize user-supplied input. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C b...

eFront 3.6.x - Multiple Cross-Site Scripting / SQL Injections

source: https://www.securityfocus.com/bid/50492/info eFront is prone to multiple cross-site scripting and SQL-injection vulnerabilities because the software fails to sufficiently sanitize user-supplied input. Exploiting these vulnerabilities could allow an attacker to steal cookie-based...

timelive time and expense tracking 4.1.1 - Multiple Vulnerabilities

timelive time and expense tracking 4.1.1 - Multiple Vulnerabilities Exploit Title : TimeLive Time and Expense Tracking = Multiple Vulnerabilities Vulnerability : Directory Traversal / Remote Database Download / File Download / Source Code Disclosure Date : 28/09/2011 Author : Nathaniel Carew Impa...

timelive time and expense tracking 4.1.1 - Multiple Vulnerabilities

Exploit Title : TimeLive Time and Expense Tracking = Multiple Vulnerabilities Vulnerability : Directory Traversal / Remote Database Download / File Download / Source Code Disclosure Date : 28/09/2011 Author : Nathaniel Carew Impact : High Software Link :...

Fedora Update for roundcubemail FEDORA-2011-12131

Check for the Version of roundcubemail OpenVAS Vulnerability Test Fedora Update for roundcubemail FEDORA-2011-12131 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

MYRE Real Estate Software Cross Site Scripting / SQL Injection

Title : MYRE Real Estate Software Multiple XSS and SQL Injection Vulnerabilities Author : Sooraj K.S SecPod Technologies www.secpod.com Vendor : http://myrephp.com Advisory : http://secpod.org/blog/?p=346 http://secpod.org/advisories/SECPODMRSSQLXSSVuln.txt Software : MYRE Real Estate Software Da...

Mambo Component N-Myndir - SQL Injection

source: https://www.securityfocus.com/bid/49424/info The Mambo CMS N-Myndir component is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the applicatio...

WordPress Bannerize Plugin <= 2.8.6 - SQL Injection

Bannerize plugin is prone to an SQL injection. This vulnerability allows an attacker to modify data, alter queries to the application SQL database, compromise the access and application or exploit hidden vulnerabilities in the underlying database. Solution Upgrade the plugin...

Security advisory: SQL Injection in LedgerSMB 1.2.24 and lower

Hi all; The LedgerSMB development team has found an SQL injection issue in LedgerSMB 1.2.24. Because this issue stems from our common SQL-Ledger heritage, it affects all versions of LedgerSMB and has been confirmed in SQL-Ledger 2.8.33. We contacted Dieter when we initially discovered this and no...