CVE-2008-3753: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in details.php in YourFreeWorld Programs Rating Script allows remote attackers to execute arbitrary SQL commands via the id parameter...

prograte-sql.txt

|| | | Programs Rating details.php id Remote SQL Injection Vulnerability | | |---------------------Hussin X----------------------| | | Author: Hussin X | | Home : www.tryag.cc/cc | | email: darkangelg85atYahooDoTcom | | | | | | | script :http://www.yourfreeworld.com/script/rating.php | | DorK : ^...

Sql injection

SQL injection vulnerability in details.php in Application Dynamics Cartweaver 3.0 allows remote attackers to execute arbitrary SQL commands via the prodId parameter, possibly a related issue to CVE-2006-2046.3...

CVE-2008-2918

SQL injection vulnerability in details.php in Application Dynamics Cartweaver 3.0 allows remote attackers to execute arbitrary SQL commands via the prodId parameter, possibly a related issue to CVE-2006-2046.3...

CVE-2008-2918: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in details.php in Application Dynamics Cartweaver 3.0 allows remote attackers to execute arbitrary SQL commands via the prodId parameter, possibly a related issue to CVE-2006-2046.3...

Cartweaver 3 (prodId) Remote Blind SQL Injection Exploit

No description provided by source. !/usr/bin/perl Cartweaver 3 PHP Blind SQL Injection Substring Vulnerability Bug by: h0yt3r Dork: n/a brainusing required Releasing it to the public No error messages are being returned. Exploit need a vaild Product ID! SQL Injection:...

Cartweaver 3 - 'prodId' Blind SQL Injection

!/usr/bin/perl Cartweaver 3 PHP Blind SQL Injection Substring Vulnerability Bug by: h0yt3r Dork: n/a brainusing required Releasing it to the public No error messages are being returned. Exploit need a vaild Product ID! SQL Injection: http://target/path/details.php?prodId=SQL Gr33tz go to: b!zZ!t,...

CVE-2008-1917

CVE-2008-1917 describes multiple cross-site scripting (XSS) vulnerabilities in AMFPHP 1.2. The affected components are the browser/ module parameters: (1) class parameter to (a) methodTable.php, (b) code.php, and (c) details.php, and (2) the location parameter to browser/code.php. The CVE notes t...

CVE-2008-1917: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in AMFPHP 1.2 allow remote attackers to inject arbitrary web script or HTML via the 1 class parameter to a methodTable.php, b code.php, and c details.php in browser/; and the 2 location parameter to browser/code.php. NOTE: the provenance of this...

CVE-2007-5987

details.php in BtiTracker before 1.4.5, when torrent viewing is disabled for guests, allows remote attackers to bypass protection mechanisms via a direct request, as demonstrated by 1 reading the details of an arbitrary torrent and 2 modifying a torrent owned by a guest...

Design/Logic Flaw

details.php in BtiTracker before 1.4.5, when torrent viewing is disabled for guests, allows remote attackers to bypass protection mechanisms via a direct request, as demonstrated by 1 reading the details of an arbitrary torrent and 2 modifying a torrent owned by a guest...

CVE-2007-5987

details.php in BtiTracker before 1.4.5, when torrent viewing is disabled for guests, allows remote attackers to bypass protection mechanisms via a direct request, as demonstrated by 1 reading the details of an arbitrary torrent and 2 modifying a torrent owned by a guest...

CVE-2007-5987: Improper Authentication

details.php in BtiTracker before 1.4.5, when torrent viewing is disabled for guests, allows remote attackers to bypass protection mechanisms via a direct request, as demonstrated by 1 reading the details of an arbitrary torrent and 2 modifying a torrent owned by a guest...

CVE-2006-6331

metaInfo.php in TorrentFlux 2.2, when $cfg"enablefilepriority" is false, allows remote attackers to execute arbitrary commands via shell metacharacters backticks in the torrent parameter to 1 details.php and 2 startpop.php...

CVE-2006-6331: Undefined Security Weakness

metaInfo.php in TorrentFlux 2.2, when $cfg"enablefilepriority" is false, allows remote attackers to execute arbitrary commands via shell metacharacters backticks in the torrent parameter to 1 details.php and 2 startpop.php...

eXpBlog <= 0.3.5 Cross Site Scripting Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advisory: eXpBlog = 0.3.5 Cross Site Scripting Vulnerabilities Release Date: 10/09/2006 Last Modified: 10/09/2006 Author: Tamriel tamriel at gmx dot net Application: eXpBlog = 0.3.5 Risk: Low Vendor Status: contaced | replied Vendor Site:...

CVE-2006-5145: Undefined Security Weakness

Multiple SQL injection vulnerabilities in OlateDownload 3.4.0 allow remote attackers to execute arbitrary SQL commands via the 1 page parameter in details.php or the 2 query parameter in search.php...

CVE-2006-5057

Multiple cross-site scripting XSS vulnerabilities in Ktools.net PhotoStore allow remote attackers to inject arbitrary web script or HTML via the 1 gid parameter in details.php, or the 2 photogid parameter in viewphotog.php...

CVE-2006-5057: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in Ktools.net PhotoStore allow remote attackers to inject arbitrary web script or HTML via the 1 gid parameter in details.php, or the 2 photogid parameter in viewphotog.php...

mospray.txt

Kurdish Security MoSpray Remote File Include Vulnerability Original Advisory : http://kurdishsecurity.blogspot.com/2006/07/kurdish-security-14-mospray-basedir.html Freedom For Ocalan Contact : irc.gigachat.net kurdhack & www.PatrioticHackers.com Rish : High Class : Remote Script : MoSpray Site :...