PHP-Nuke Downloads Module SQL Injection

PHP-Nuke 8.0 Downloads Blind Sql Injection AUTHOR : Sina Yazdanmehr R3d.W0rm Discovered by : Sina Yazdanmehr R3d.W0rm Our Site : http://ircrash.com My Official WebSite : http://r3dw0rm.ir IRCRASH Team Members : Khashayar Fereidani - R3d.w0rm Sina Yazdanmehr Download : http://phpnuke.org Dork :...

PHP-Nuke Downloads Module - 'url' SQL Injection

source: https://www.securityfocus.com/bid/33410/info The Downloads module for PHP-Nuke is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

CVE-2008-5905

The web interface plugin in KTorrent before 3.1.4 allows remote attackers to bypass intended access restrictions and upload arbitrary torrent files, and trigger the start of downloads and seeding, via a crafted HTTP POST request...

pidgin: unrestricted download of arbitrary files triggered via UPnP

The UPnP functionality in Pidgin 2.0.0, and possibly other versions, allows remote attackers to trigger the download of arbitrary files and cause a denial of service memory or disk consumption via a UDP packet that specifies an arbitrary URL...

Secure Downloads 2.0.0r SQL Injection

vBulletin Mode Secure Downloads v2.0.0r SQL Injection Vulnerability Mod : http://www.1src.com/freeware/download.php?id=1880 Author : Cn4phux PoC : URL.com/fileinfo.php?id=SQL : 1797'+AND0+UNION+SELECT+1,1,1,1,1,'Cn4phux',0,0,0,1,0,1,0,0,0,0,0,USER,DATABASE,0,0,0,0,0,0,0+OR+'1'='0 //Cn4phux...

Secure Downloads v2.0.0r for vBulletin SQL Injection Vulnerability

No description provided by source. vBulletin Mode Secure Downloads v2.0.0r SQL Injection Vulnerability Mod : http://www.1src.com/freeware/download.php?id=1880 Author : Cn4phux PoC : URL.com/fileinfo.php?id=SQL :...

vBulletin Secure Downloads 2.0.0r - SQL Injection

vBulletin Secure Downloads 2.0.0r - SQL Injection vBulletin Mode Secure Downloads v2.0.0r SQL Injection Vulnerability Mod : http://www.1src.com/freeware/download.php?id=1880 Author : Cn4phux PoC : URL.com/fileinfo.php?id=SQL :...

Secure Downloads v2.0.0r for vBulletin SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================== Secure Downloads v2.0.0r for vBulletin SQL Injection Vulnerability ================================================================== vBulletin Mode Secure Downloads v2.0.0...

vBulletin Secure Downloads 2.0.0r - SQL Injection

vBulletin Mode Secure Downloads v2.0.0r SQL Injection Vulnerability Mod : http://www.1src.com/freeware/download.php?id=1880 Author : Cn4phux PoC : URL.com/fileinfo.php?id=SQL : 1797'+AND0+UNION+SELECT+1,1,1,1,1,'Cn4phux',0,0,0,1,0,1,0,0,0,0,0,USER,DATABASE,0,0,0,0,0,0,0+OR+'1'='0 //Cn4phux...

KTP Computer Customer Database CMS 1.0 - Blind SQL Injection

================================================ KTPCCD CMS Blind SQL Injection Vulnerability ================================================ ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team .. +---------------------------^----------| ,-------, ...

NetRisk <= 2.0 (XSS/SQL Injection) Remote Vulnerabilities

Exploit for unknown platform in category web applications ========================================================= NetRisk javascript Remote SQL Injection index.php?p=profile&id=1+union+all+select+0,0,concatlogin,0x3a,password,0,0,0,0,0,0,0,0,0,0,0,0+from+netriskusers+where+id=1/...

CVE-2008-4435

Multiple cross-site scripting XSS vulnerabilities in the RMSOFT Downloads Plus rmdp module 1.5 and 1.7 for Xoops allow remote attackers to inject arbitrary web script or HTML via the 1 key parameter to search.php and the 2 id parameter to down.php...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the RMSOFT Downloads Plus rmdp module 1.5 and 1.7 for Xoops allow remote attackers to inject arbitrary web script or HTML via the 1 key parameter to search.php and the 2 id parameter to down.php...

CVE-2008-4435

CVE-2008-4435 affects RMSOFT Downloads Plus (rmdp) module for Xoops (versions 1.5 and 1.7). The vulnerability is a cross-site scripting (XSS) flaw that allows remote attackers to inject arbitrary web script or HTML via the key parameter to search.php or the id parameter to down.php. The available...

CVE-2008-4435

Multiple cross-site scripting XSS vulnerabilities in the RMSOFT Downloads Plus rmdp module 1.5 and 1.7 for Xoops allow remote attackers to inject arbitrary web script or HTML via the 1 key parameter to search.php and the 2 id parameter to down.php...

JBossEAP allows download of non-EJB class files

The default configuration of the JBossAs component in Red Hat JBoss Enterprise Application Platform aka JBossEAP or EAP, possibly 4.2 before CP04 and 4.3 before CP02, when a production environment is enabled, sets the DownloadServerClasses property to true, which allows remote attackers to obtain...

Google Chrome < 0.2.149.29 Multiple Vulnerabilities

Binary data 4681.pasl...

Google Chrome < 0.2.149.29 Multiple Vulnerabilities

The version of Google Chrome installed on the remote host is earlier than 0.2.149.29. Such versions are reportedly affected by several issues : - A buffer overflow involving long filenames that display in the 'Save As...' dialog could lead to arbitrary code execution Issue 1414. - A buffer overfl...

CVE-2008-3879

The Ultra.OfficeControl ActiveX control in OfficeCtrl.ocx 2.0.2008.801 and earlier in Ultra Shareware Ultra Office Control allows remote attackers to force the download of arbitrary files onto a client system via a URL in the first argument to the Open method, in conjunction with a full destinati...

rmsoft-xss.txt

RMSOFT Downloads Plus two scripts two variables XSS Vendor url:http://www.xoops-mexico.net/ Advisore:http://lostmon.blogspot.com/2008/08/ rmsoft-downloads-plus-two-scripts-two.html Vendor notify:no exploits availables:yes RMSOFT Downloads Plus is a download php/Mysql script module for multiple CM...