Gnew 2013.1 Multipe Vulnerabilities

Gnew is a simple and open-source Content Management System. Exploit Title: Gnew 2013.1 Multipe Vulnerabilities Date: 17/04/2013 Author: Elite Trojan Category:: webapps Google dork: N/A Tested on: linux + windows IVerified XSS +Vulnerable File: /users/register.php +Vulnerable Source Code: $userema...

CVE-2012-4918

Call of Duty Elite for iOS 2.0.1 does not properly validate the server SSL certificate, which allows remote attackers to obtain sensitive information via a Man-in-the-Middle MITM attack...

CVE-2012-4918

Call of Duty Elite for iOS 2.0.1 does not properly validate the server SSL certificate, which allows remote attackers to obtain sensitive information via a Man-in-the-Middle MITM attack...

CVE-2012-4918

CVE-2012-4918 affects Call of Duty Elite for iOS 2.0.1. The vulnerability is that the app does not properly validate the server’s SSL certificate, enabling a Man-in-the-Middle (MITM) attack and potential exposure of sensitive information. The available documents confirm the root cause (insufficie...

CVE-2012-5874

Multiple SQL injection vulnerabilities in the 1 updatewhosonlinereg and 2 updatewhosonlineguest functions in Elite Bulletin Board before 2.1.22 allow remote attackers to execute arbitrary SQL commands via the PATHINFO to a checkuser.php, b groups.php, c index.php, d login.php, e quicklogin.php, f...

Sql injection

Multiple SQL injection vulnerabilities in the 1 updatewhosonlinereg and 2 updatewhosonlineguest functions in Elite Bulletin Board before 2.1.22 allow remote attackers to execute arbitrary SQL commands via the PATHINFO to a checkuser.php, b groups.php, c index.php, d login.php, e quicklogin.php, f...

CVE-2012-5874

CVE-2012-5874 affects Elite Bulletin Board prior to 2.1.22. The vulnerability stems from insufficient sanitization of user-supplied data in URI parameters in the functions update_whosonline_reg and update_whosonline_guest (includes/user_function.php). This allows remote attackers to induce SQL in...

Multiple SQL Injection Vulnerabilities in Elite Bulletin Board

Advisory ID: HTB23133 Product: Elite Bulletin Board Vendor: elite-board.us Vulnerable Versions: 2.1.21 and probably prior Tested Version: 2.1.21 Vendor Notification: November 28, 2012 Vendor Patch: December 6, 2012 Public Disclosure: December 19, 2012 Vulnerability Type: SQL Injection CWE-89 CVE...

Elite Bulletin Board Multiple SQLi Vulnerabilities

Elite Bulletin Board is prone to multiple SQL injection vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Elite Bulletin Board 2.1.21 - Multiple SQL Injections

Elite Bulletin Board 2.1.21 - Multiple SQL Injections Advisory ID: HTB23133 Product: Elite Bulletin Board Vendor: elite-board.us Vulnerable Versions: 2.1.21 and probably prior Tested Version: 2.1.21 Vendor Notification: November 28, 2012 Vendor Patch: December 6, 2012 Public Disclosure: December...

Elite Bulletin Board 2.1.21 - Multiple SQL Injections

Advisory ID: HTB23133 Product: Elite Bulletin Board Vendor: elite-board.us Vulnerable Versions: 2.1.21 and probably prior Tested Version: 2.1.21 Vendor Notification: November 28, 2012 Vendor Patch: December 6, 2012 Public Disclosure: December 19, 2012 Vulnerability Type: SQL Injection CWE-89 CVE...

Elite Bulletin Board 2.1.21 SQL Injection

Advisory ID: HTB23133 Product: Elite Bulletin Board Vendor: elite-board.us Vulnerable Versions: 2.1.21 and probably prior Tested Version: 2.1.21 Vendor Notification: November 28, 2012 Vendor Patch: December 6, 2012 Public Disclosure: December 19, 2012 Vulnerability Type: SQL Injection CWE-89 CVE...

Elite Bulletin Board 2.1.21 SQL Injection Vulnerability

Elite Bulletin Board version 2.1.21 suffers from multiple remote SQL injection vulnerabilities. Product: Elite Bulletin Board Vendor: elite-board.us Vulnerable Versions: 2.1.21 and probably prior Tested Version: 2.1.21 Vendor Notification: November 28, 2012 Vendor Patch: December 6, 2012 Public...

MySQL 5.1/5.5 WiNDOWS REMOTE R00T (mysqljackpot)

No description provided by source. FARLiGHT ELiTE HACKERS LEGACY R3L3ASE Attached is the MySQL Windows Remote Exploit post-auth, udf technique including the previously released mass scanner. The exploit is mirrored at the farlight website http://www.farlight.org. Oracle MySQL on Windows Remote...

Multiple SQL Injection Vulnerabilities in Elite Bulletin Board

High-Tech Bridge Security Research Lab discovered multiple vulnerabilities in Elite Bulletin Board, which can be exploited to perform SQL injection attacks. 1 Multiple SQL injection vulnerabilities in Elite Bulletin Board: CVE-2012-5874 The vulnerabilities exist due to insufficient sanitation of...

Elite Bulletin Board SQL Injection Vulnerability

Elite Bulletin Board is an advanced Bulletin Board program that provides advanced features such as CAPTCHA, sub-board, skinning ability, multilingual, commercial password encryption, and much more. 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 ...

Elite Bulletin Board - Multiple SQL Injections

source: https://www.securityfocus.com/bid/54452/info Elite Bulletin Board is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the...

Elite Bulletin Board 2.1.19 SQL Injection

Exploit Title: Elite Bulletin Board SQL Injection Vulnerability Author: T0x!c Date : 15/07/2012 Facebook Page: www.facebook.com/DzTem E-mail: [email protected] Category:: webapps Google Dork: intext:"Powered by: Elite Bulletin Board " Download: http://elite-board.us/ Version: 2.1.19 Tested on:...

jmCMS SQL injection Vulnerability

Exploit for php platform in category web applications Exploit Title: jmCMS SQL injection Vulnerability Date: 07/06/2012 Author: Elite Trojan Category:: webapps Google dork: N/A Tested on: linux + windows Exploit/p0c : http://site.com/jmCMS/master.php?id=sql injection +Examples :...

o0mBBS <= 0.65B Remote File Upload

Exploit for asp platform in category web applications Exploit Title: o0mBBS !Muslims!,Mosta,team152,Inj3ct0r And all my Freinds + Algerian Hackers -----------------------------------------------------+ DzMafia © 2012 All rights reserved. 0day.today 2018-04-12...