adult-sql.txt

--------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg --------------------------------------------------------------- Multiple...

Adult Script 1.6.5 - Multiple SQL Injections

Adult Script 1.6.5 - Multiple SQL Injections --------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg...

FreeWebShop 2.2.7 - cookie Admin Password Grabber

FreeWebShop 2.2.7 - cookie Admin Password Grabber !/usr/bin/perl Indonesian Newhack Security Advisory ------------------------------------ FreeWebshop = 2.2.7 - cookie Admin Password Grabber Exploit Waktu : Dec 17 2007 04:50AM Software : FreeWebshop = 2.2.7 Vendor : http://www.freewebshop.org/ De...

FreeWebShop 2.2.1 - Blind SQL Injection

FreeWebShop 2.2.1 - Blind SQL Injection !/usr/bin/perl Indonesian Newhack Security Advisory ------------------------------------ FreeWebshop version 2.2.1 - Multiple Remote SQL Injection Vulnerabilities Waktu : Dec 16 2007 01:50AM Software : FreeWebshop version 2.2.1 Vendor :...

MS Internet Explorer 6 (Internet.HHCtrl) Heap Overflow Vulnerability

No description provided by source. !-- http://browserfun.blogspot.com/ The following bug was tested on the latest version of Internet Explorer 6 on a fully-patched Windows XP SP2 system. This bug is interesting because ...

Absolute News Manager .NET 5.1 - 'getpath.aspx' Direct Request Error Message Information

source: https://www.securityfocus.com/bid/26692/info Absolute News Manager .NET is prone to multiple remote vulnerabilities, including multiple cross-site scripting, SQL-injection, and information-disclosure issues. Attackers can exploit these issues to steal cookie-based authentication...

Rayzz Script 2.0 - LocalRemote File Inclusion

Rayzz Script 2.0 - LocalRemote File Inclusion +By CrackersChild+ Script.......: Rayzz Script 2.0 Download.....: http://rapidshare.com/files/40333745/rayzznew6726.rar Nulled Author.......: CrackersChild | [email protected] & [email protected] Class........: Local File Inclusion...

Liferay Enterprise Portal multiple XSS

Vendor Site: Liferay.net Version affected: Liferay Enterprise Portal 4.3.1 Demo:http://www.liferay.net/c/portal/login?tabs1=forgot-password Class: Input Validation Error Overview: Liferay fails to sufficiently sanitize user-supplied input data in "email address" text box by pressing the "Send New...

liferay-xss.txt

Vendor Site: Liferay.net Version affected: Liferay Enterprise Portal 4.3.1 Demo:http://www.liferay.net/c/portal/login?tabs1=forgot-password Class: Input Validation Error Overview: Liferay fails to sufficiently sanitize user-supplied input data in "email address" text box by pressing the "Send New...

amber-lfi.txt

+By CrackersChild+ Script.......: Amber Script 1.0 Download.....: http://rapidshare.com/files/54891799/AmberScript1.0.rar Nulled Author.......: CrackersChild | [email protected] & [email protected] Class........: Local File Inclusion Demo.........:...

ESA Software S.p.a. Asp/Portal www/archivio.asp Sql injection

ESA Software S.p.a. Asp/Portal www/archivio.asp Sql injection Credit : CodeXpLoder'tq Mail : codexploderathotmaildotcom Site : codexploder.biyosecurity.net,biyofrm.com Sourge : http://www.esasoftware.com ЈЈЈЈЈЈЈЈЈЈЈЈЈЈЈЈЈЈЈЈЈЈЈЈЈЈЈЈЈЈЈЈЈЈЈЈЈЈЈЈЈЈЈЈЈЈЈЈЈЈЈЈЈЈЈЈЈЈЈЈЈЈЈЈЈЈЈЈЈЈЈЈЈЈЈЈЈЈЈЈЈЈЈЈ Thnx :...

Toko Instan 7.6 Multiple Remote SQL Injection Vulnerabilities

No description provided by source. Indonesian Newhack Security Advisory ------------------------------------ Toko Instan V7.6 - Multiple Remote SQL Injection Vulnerabilities Waktu : Nov 14 2007 08:30AM Software : Toko Instan V7.6 Vendor : http://www.tokohandal.com/ Demo Site :...

Toko Instan 7.6 - Multiple SQL Injections

Indonesian Newhack Security Advisory ------------------------------------ Toko Instan V7.6 - Multiple Remote SQL Injection Vulnerabilities Waktu : Nov 14 2007 08:30AM Software : Toko Instan V7.6 Vendor : http://www.tokohandal.com/ Demo Site : http://www.tokohandal.com/demo/demo2.php Ditemukan ole...

foxnews-xss.txt

Foxnews 0day XSS Shock Attack Demo link to send to a fish: http://www.foxnews.com/video2/launchPage.html?http://localhost/ With netcat listen on localhost : listening on any 80 ... connect to localhost 127.0.0.1 from localhost 127.0.0.1 1964 GET...

Aria-Security.Net Research: Rapid Classified HotList Image

Aria-Security Team, http://Aria-Security.net ------------------------------- Shout Outs: AurA, imm02tal Vendor: http://www.freshink.net/rc-links.htm Demo: http://www.lite.freshink.net/adminlogon.asp Google Search: Developed by: GA Soft Username: anything' OR 'x'='x password: anything' OR 'x'='x...

CVE-2002-2347

Cross-site scripting XSS vulnerability in Oracle Java Server Page OJSP demo files 1 hellouser.jsp, 2 welcomeuser.jsp and 3 usebean.jsp in Oracle 9i Application Server 9.0.2, 1.0.2.2, 1.0.2.1s and 1.0.2 allows remote attackers to inject arbitrary web script or HTML via the text entry field...

CVE-2002-2347

CVE-2002-2347 is a cross-site scripting (XSS) vulnerability in Oracle Java Server Page (OJSP) demo files (hellouser.jsp, welcomeuser.jsp, usebean.jsp) in Oracle 9i Application Server versions 9.0.2, 1.0.2.2, 1.0.2.1s and 1.0.2. The issue allows remote attackers to inject arbitrary web script or H...

ProfileCMS 1.0 Remote File Upload Vulnerability Shell Upload Exploit

Exploit for unknown platform in category web applications ==================================================================== ProfileCMS 1.0 Remote File Upload Vulnerability Shell Upload Exploit ==================================================================== ProfileCMS v1.0 Shell Upload...

Novell OpenSUSE SWAMP multiple XSS

Vendor Site: http://en.opensuse.org/Swamp Version affected: ??? Demo:http://swampdemo.suse.de/webswamp/swamp/template/Index.vm Class: Input Validation Error Overview:OpenSUSE Workflow Administration and Management Platform login page fails to sufficiently sanitize user-supplied input data via log...

Furkan Tastan Blog - SQL Injection

Furkan Tastan Blog - SQL Injection Title : Furkan TaÅŸtan Blog Remote SQL Injection Vulnerability Author : CyberGhost Demo Page : http://furkantastan.somee.com/blog Script Download Page: : http://www.aspindir.com/indir.asp?ID=5152 Vuln. Username :...