Sql injection

Multiple SQL injection vulnerabilities in ASP-DEv XM Diary allow remote attackers to execute arbitrary SQL commands via the 1 id parameter to diaryview.asp or 2 viewdate parameter to default.asp...

CVE-2012-4061

Multiple SQL injection vulnerabilities in ASP-DEv XM Diary allow remote attackers to execute arbitrary SQL commands via the 1 id parameter to diaryview.asp or 2 viewdate parameter to default.asp...

CVE-2012-4061

ASP-DEv XM Diary is affected by SQL injection flaws in the diary_view.asp (id parameter) and default.asp (view_date parameter). The underlying issue allows remote attackers to craft input to cause arbitrary SQL execution, as summarized by CVE-2012-4061. The entry records a CVSS v2 base score of 7...

PT-2012-5179

Name of the Vulnerable Software and Affected Versions ASP-DEv XM Diary affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via the id parameter to "diary view.asp" or the view date parameter to "default.asp"...

CVE-2012-4061: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in ASP-DEv XM Diary allow remote attackers to execute arbitrary SQL commands via the 1 id parameter to diaryview.asp or 2 viewdate parameter to default.asp...

WordPress Theme Diary/Notebook Site5 - Email Spoofing

!/usr/bin/perl Exploit Title: Diary/Notebook Site5 Wordpress Theme - Email Spoofing Date: 15.07.2012 Exploit Author: @bwallHatesTwits Discovered by: @xxDigiPxx http://www.ticktockcomputers.com/wordpress/site5-wordpress-theme-diary-sendmail-php-spoofing/ Software Link: http://www.wpdiarytheme.com/...

ASP-DEv XM Diary SQL Injection

Exploit Title : ASP-DEv XM Diary SQL Injection Vulnerability Author : Secure-Land Security Team Discovered By : farbodmahini Home : Secure-Land.net Version : All Version Software Link : http://www.asp-dev.com/download.asp?did=2 Contact : [email protected] , [email protected] Security Ris...

WikiLeaks suspect Bradley Manning nominated for Nobel Peace Prize 2012

WikiLeaks suspect Bradley Manning nominated for Nobel Peace Prize 2012 A spokesman for the Nobel Peace Prize jury says 231 nominations have been submitted for this year's award, with publicly disclosed candidates including WikiLeaks whistle-blower Bradley Manning may be among the hundreds of...

Nikki vulnerable to OS command injection

Overview Nikki from HP no Mawashimono contains an OS command injection vulnerability. Nikki from HP no Mawashimono is a CGI software for posting diary entries. Nikki contains an OS command injection vulnerability. Masako Ohno reported this vulnerability to IPA. JPCERT/CC coordinated with the...

Cross site scripting

Cross-site scripting XSS vulnerability in multiple Rocomotion products, including P board 1.18 and other versions, P forum 1.30 and earlier, P up board 1.38 and other versions, P diary R 1.13 and earlier, P link 1.11 and earlier, P link compact 1.04 and earlier, pplog 3.31 and earlier, pplog2 3.3...

CVE-2010-3931

The CVE-2010-3931 entry corresponds to a cross-site scripting (XSS) vulnerability in multiple Rocomotion products (e.g., P board, P forum, P up board, P diary R, P link, pplog/pplog2, PM bbs/PM forum) across listed versions (e.g., P board 1.18 and earlier, P forum 1.30 and earlier, P up board 1.3...

CVE-2010-3931: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in multiple Rocomotion products, including P board 1.18 and other versions, P forum 1.30 and earlier, P up board 1.38 and other versions, P diary R 1.13 and earlier, P link 1.11 and earlier, P link compact 1.04 and earlier, pplog 3.31 and earlier, pplog2 3.3...

Cross-site scripting vulnerability in multiple Rocomotion products

Overview Multiple products provided by Rocomotion contain a cross-site scripting vulnerablility. Multiple products P board etc. provided by Rocomotion contain a cross-site scripting vulnerablility. Saeki Tominaga of KINOTROPE INC. reported this vulnerability to IPA. JPCERT/CC coordinated with the...

My Kazaam Notes Management System SQL Injection / Cross Site Scripting

Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title: My Kazaam Notes Management System Multiple Vulnerability Vendor url:http://www.mykazaam.com Version:1 Published: 2010-07-11 Greetz to:r0073r inj3ct0r.com, Sid3^effects, MaYur, MA1201, Sonic Bluehat, Sai, KD, M4n0j. Special Greetz:...

My Kazaam Notes Management System Multiple Vulnerability

No description provided by source. Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title: My Kazaam Notes Management System Multiple Vulnerability Vendor url:http://www.mykazaam.com Version:1 Published: 2010-07-11 Greetz to:r0073r inj3ct0r.com, Sid3^effects, MaYur, MA1201, Sonic...

My Kazaam Notes Management System - Multiple Vulnerabilities

Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title: My Kazaam Notes Management System Multiple Vulnerability Vendor url:http://www.mykazaam.com Version:1 Published: 2010-07-11 Greetz to:r0073r inj3ct0r.com, Sid3^effects, MaYur, MA1201, Sonic Bluehat, Sai, KD, M4n0j. Special Greetz:...

My Kazaam Notes Management System - Multiple Vulnerabilities

My Kazaam Notes Management System - Multiple Vulnerabilities Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title: My Kazaam Notes Management System Multiple Vulnerability Vendor url:http://www.mykazaam.com Version:1 Published: 2010-07-11 Greetz to:r0073r inj3ct0r.com, Sid3^effects,...

My Kazaam Notes Management System Multiple Vulnerability

Exploit for php platform in category web applications ======================================================== My Kazaam Notes Management System Multiple Vulnerability ======================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0...

Joomla Digital Diary 1.5.0 Local File Inclusion

=========================================================================================================== o Joomla Component Digital Diary Local File Inclusion Vulnerability Software : comdiary version 1.5.0 Vendor : http://dev.pucit.edu.pk/ Download :...

Joomla! Component Digital Diary 1.5.0 - Local File Inclusion

Joomla! Component Digital Diary 1.5.0 - Local File Inclusion =========================================================================================================== o Joomla Component Digital Diary Local File Inclusion Vulnerability Software : comdiary version 1.5.0 Author : AntiSecurity...