Geeklog 1.8.1 SQL Injection

In The Name Of GOD ============================================================================== Geeklog SQL Injection Vulnerability ============================================================================== » Title : Geeklog SQL Injection Vulnerability » TestedON: Linux » Download:...

PT-2012-3539

Name of the Vulnerable Software and Affected Versions WonderDesk SQL version 4.14 Description The issue allows remote attackers to inject arbitrary web script or HTML via specific parameters. The parameters cus email, help name, help email, help website, and help example url are vulnerable in...

JPM Article Script 6 - page2 SQL Injection

JPM Article Script 6 - page2 SQL Injection source: https://www.securityfocus.com/bid/52528/info JPM Article Script 6 is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. A successful exploit may allow an attacker ...

Kevin Mitnick's website open to Cross-Site Scripting ( XSS ) vulnerability

Kevin Mitnick's website open to Cross-Site Scripting XSS vulnerability Cross-Site Scripting XSS vulnerability discovered in official website of Kevin Mitnick one of the most talented hackers, and the one one most prosecuted by the state. Mitnick's hacker handle was "Condor". He became the first...

Barracuda CSRF (change e-mail address)

Exploit for php platform in category web applications Exploit Title: Barracuda CSRF change e-mail address Author: Jonturk75 Vendor or Software Link: http://www.scripts.com/viewscript/barracuda/19576/ Category:: webapps Demo : http://demo.boonex.com/administration/ Greetz: Inj3ct0r Exploit DataBas...

Xavi 7968 ADSL Router Cross Site Request Forgery / Cross Site Scripting

Xavi 7968 ADSL Router: Persistent cross site scripting XSS / Cross site request forgery CSRF ------------------------------------------------------------------------------------------------ Description: Xavi 7968 Router is completely vulnerable to Persistent cross site scripting XSS and Cross sit...

Magezi Solutions SQL Injection

. . . . | | | / || \ \ | / | | / \ / | / \ / \ / \ / /| |\ \ / \ / \ / / \ / | / \ \ \ | || | / // | | | \ / \ \ | | / | | \ \ / // | \ / | | / |||| /\ | / || / \ / || /|| / \ / / \ | \ || / / / / / / / / / /...

K Labs Empowers SQL Injection

. . . . | | | / || \ \ | / | | / \ / | / \ / \ / \ / /| |\ \ / \ / \ / / \ / | / \ \ \ | || | / // | | | \ / \ \ | | / | | \ \ / // | \ / | | / |||| /\ | / || / \ / || /|| / \ / / \ | \ || / / / / / / / / / /...

Impulsio CMS SQL Injection

. . . . | | | / || \ \ | / | | / \ / | / \ / \ / \ / /| |\ \ / \ / \ / / \ / | / \ \ \ | || | / // | | | \ / \ \ | | / | | \ \ / // | \ / | | / |||| /\ | / || / \ / || /|| / \ / / \ | \ || / / / / / / / / / /...

Datacraft Systems SQL Injection

. . . . | | | / || \ \ | / | | / \ / | / \ / \ / \ / /| |\ \ / \ / \ / / \ / | / \ \ \ | || | / // | | | \ / \ \ | | / | | \ \ / // | \ / | | / |||| /\ | / || / \ / || /|| / \ / / \ | \ || / / / / / / / / / /...

sudo 1.8.3p1 Format String

Phenoelit Advisory Authors joernchen Phenoelit Group http://www.phenoelit.de Affected Products sudo 1.8.0 - 1.8.3p1 http://sudo.ws Vendor communication 2012-01-24 Send vulnerability details to sudo maintainer 2012-01-24 Maintainer is embarrased 2012-01-27 Asking maintainer how the fixing goes...

Joomla Component com_sanpham SQL Injection Vulnerability

Exploit for php platform in category web applications Joomla Component comsanpham SQL Injection Vulnerability Author : thecybernuxbie Home : www.thecybernuxbie.com E-mail : email protected Found : 20 January 2012 - 07:45 PM. Tested On : Windows 7 Ultimate. Google Dork :...

Joomla! Component com_discussions - SQL Injection

Title : Joomla Discussions Component comdiscussions SQL Injection Vulnerability Author : Red Security TEAM Date : 17/01/2012 Risk : High Software : http://extensions.joomla.org/extensions/communication/forum/13560 Tested On : CentOS Contact : Info 4t RedSecurity d0t COM Home :...

http-generator NSE Script

Displays the contents of the "generator" meta tag of a web page default: / if there is one. Script Arguments http-generator.path Specify the path you want to check for a generator meta tag default to '/'. http-generator.redirects Specify the maximum number of redirects to follow defaults to 3...

Base Content Management System Lennox Industries - Blind SQL Injection

Exploit for php platform in category web applications Base Content Management System Lennox Industries - Blind SQL Injection Vulnerability Author : thecybernuxbie Home : www.thecybernuxbie.com E-mail : email protected Found : 04 January 2012 - 08:45 PM. Tested On : Back|Track 5. Auto-Tools : SQL...

Posse Softball Director CMS - 'team.php' Blind SQL Injection

.-=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=-=--=-=--=-. Posse Softball Director CMS Blind SQL Injection Vulnerability team.php .-=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=-=--=-=--=-. + Autor: easy laster + Vulnerabilities Blind SQL Injection + Page:...

i4Style Web Design SQL Injection / Cross Site Scripting

Title : i4Style web design SQL Injection / IFrame Injection + Author : AngelParrot + Vendor : http://i4style.com/ + Google Dork : inurl:webpage.php?PageID= "i4Style" + Exploit - http://example.com/webpage.php?PageID=SQL - http://example.com/webpage.php?PageID=IFrame + Example -...

reverse-index NSE Script

Creates a reverse index at the end of scan output showing which hosts run a particular service. This is in addition to Nmap's normal output listing the services on each host. Script Arguments reverse-index.mode the output display mode, can be either horizontal or vertical default: horizontal...

[SECURITY] Fedora 15 Update: phpMyAdmin-3.4.7-1.fc15

phpMyAdmin is a tool written in PHP intended to handle the administration of MySQL over the World Wide Web. Most frequently used operations are supported by the user interface managing databases, tables, fields, relations, index =3D es, users, permissions, while you still have the ability to...

http-put NSE Script

Uploads a local file to a remote web server using the HTTP PUT method. You must specify the filename and URL path with NSE arguments. Script Arguments http-put.file - The full path to the local file that should be uploaded to the server http-put.url - The remote directory and filename to store...