Pharmacy System 2.0 (index.php ID) Remote SQL Injection Vulnerability

No description provided by source. --==+================================================================================+==-- --==+ Pharmacy System v2 AND PRIOR SQL INJECTION VULNERBILITYS +==-- --==+================================================================================+==-- AUTHOR:...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Uebimiau Webmail allow remote attackers to inject arbitrary web script or HTML via 1 the PATHINFO to redirect.php or 2 the selectedtheme parameter to demo/pop3/error.php...

CVE-2007-3170

Multiple cross-site scripting XSS vulnerabilities in Uebimiau Webmail allow remote attackers to inject arbitrary web script or HTML via 1 the PATHINFO to redirect.php or 2 the selectedtheme parameter to demo/pop3/error.php...

CVE-2007-3171

Affected software/impact: Uebimiau Webmail is vulnerable to information disclosure. The issue occurs in the demo/pop3/error.php script when an invalid value is supplied for the smarty or selected_theme parameter, which causes error messages to reveal the installation path. Root cause (as describe...

CVE-2007-3170

CVE-2007-3170 relates to multiple XSS vulnerabilities in UebiMiau Webmail. The affected component is the webmail PHP application, with two identified vectors: (1) PATH_INFO to redirect.php and (2) the selected_theme parameter to demo/pop3/error.php. The underlying issue is insufficient sanitizati...

geometrix-sql.txt

Title: GeometriX Download Portal Remote SQL Injection Vulnerability Author: CyberGhost Demo Page: http://fullaspsite.somee.com/ Script Page: http://aspindir.com/indir.asp?id=4949&sIslem=%DDndir Vuln. Password:/downindir.asp?id=-1+union+select+0,1,adminsifre,3,4,5,6,7+from+ayarlar Admin Login :...

CVE-2007-3172: Undefined Security Weakness

Directory traversal vulnerability in demo/pop3/error.php in Uebimiau Webmail allows remote attackers to determine the existence of arbitrary directories via an absolute pathname and .. dot dot in the selectedtheme parameter...

CVE-2007-3171: Undefined Security Weakness

Uebimiau Webmail allows remote attackers to obtain sensitive information via a request to demo/pop3/error.php with an invalid value of the 1 smarty or 2 selectedtheme parameter, which reveals the path in various error messages...

GeometriX Download Portal (down_indir.asp id) SQL Injection Vuln

No description provided by source. Title: GeometriX Download Portal Remote SQL Injection Vulnerability Author: CyberGhost Demo Page: http://fullaspsite.somee.com/ Script Page: http://aspindir.com/indir.asp?id=4949&sIslem=%DDndir Vuln...

GeometriX Download Portal - down_indir.asp?id SQL Injection

GeometriX Download Portal - downindir.asp?id SQL Injection Title: GeometriX Download Portal Remote SQL Injection Vulnerability Author: CyberGhost Demo Page: http://fullaspsite.somee.com/ Script Page: http://aspindir.com/indir.asp?id=4949&sIslem=%DDndir Vuln...

PT-2007-4294 · Salescart · Salescart Shopping Cart

Name of the Vulnerable Software and Affected Versions: SalesCart Shopping Cart affected versions not specified Description: The issue concerns SQL injection vulnerabilities in the cgi-bin/reorder2.asp file of SalesCart Shopping Cart, allowing remote attackers to execute arbitrary SQL commands via...

IE6 / Provideo Camimage (ISSCamControl.dll 1.0.1.5) Remote BoF Exploit

No description provided by source. !-- IE6 / Provideo Camimage class ISSCamControl.dll 1.0.1.5 remote seh overwrite exploit / win2k sp4 tried the SD-222VPRO camera series,you can reach an online demo here: http://www.provideo.com.tw/security%20live%20demo.htm rgod -- HTML...

IE6 / Provideo Camimage (ISSCamControl.dll 1.0.1.5) Remote BoF Exploit

Exploit for unknown platform in category remote exploits ====================================================================== IE6 / Provideo Camimage ISSCamControl.dll 1.0.1.5 Remote BoF Exploit ====================================================================== REM metasploit one, add a use...

Microsoft Internet Explorer 6 Provideo Camimage - ISSCamControl.dll 1.0.1.5 Remote Buffer Overflow

Microsoft Internet Explorer 6 Provideo Camimage - ISSCamControl.dll 1.0.1.5 Remote Buffer Overflow REM metasploit one, add a user 'su' with pass 'tzu' shellcode =...

Vizayn Urun Tanitim Sistemi 0.2 (tr) Remote SQL Injection Vulnerability

No description provided by source. / Vizayn Urun Tanitim Sistemi v0.2 tr Remote SQL Injection Vulnerability Author : BAHADIR Contact: [email protected] Scripr HomePage: http://www.vizayn.web.tr/ws.asp?ws=102 Script Demo URL: http://ws.vizaynhosting.com/V02/ Price : 55YTL PoF Concept:...

vizayn-sql.txt

/ Vizayn Urun Tanitim Sistemi v0.2 tr Remote SQL Injection Vulnerability Author : BAHADIR Contact: [email protected] Scripr HomePage: http://www.vizayn.web.tr/ws.asp?ws=102 Script Demo URL: http://ws.vizaynhosting.com/V02/ Price : 55YTL PoF Concept:...

JVN#81294906 Homepage Builder sample CGI programs vulnerable to OS command injection

Among sample CGI programs included in Homepage Builder, anketo.cgi, kansou.cgi, and order.cgi contain an OS command injection vulnerability as they do not properly validate input data. Impact An arbitrary command could be executed on the web server with the privilege of the web server process...

EfesTECH Haber 5.0 (id) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ========================================================== EfesTECH Haber 5.0 id Remote SQL Injection Vulnerability ========================================================== Title: EfesTECH Haber v5,0 Remote SQL Injection Vulnerability...

EfesTECH Haber 5.0 - 'id' SQL Injection

Title: EfesTECH Haber v5,0 Remote SQL Injection Vulnerability Author: CyberGhost Demo Page: http://www.haberguvercini.com Script Page: http://aspindir.com/indir.asp?id=4899&sIslem=%DDndir Vuln. Username -...

EfesTECH Haber 5.0 (id) Remote SQL Injection Vulnerability

No description provided by source. Title: EfesTECH Haber v5,0 Remote SQL Injection Vulnerability Author: CyberGhost Demo Page: http://www.haberguvercini.com Script Page: http://aspindir.com/indir.asp?id=4899&sIslem=%DDndir Vuln. Username -...