KnowledgeQuest 2.6 SQL Injection Vulnerabilities

Exploit for unknown platform in category web applications ================================================ KnowledgeQuest 2.6 SQL Injection Vulnerabilities ================================================ ...:::::KnowledgeQuest 2.6 SQL Injection Vulnerabilities ::::.... -------- Discoverd By...

KnowledgeQuest 2.6 - SQL Injection

...:::::KnowledgeQuest 2.6 SQL Injection Vulnerabilities ::::.... Virangar Security Team www.virangar.org www.virangar.net -------- Discoverd By :virangar security teamhadihadi special tnx to:MR.nosrati,black.shadowes,MR.hesy,Zahra & all virangar members & all hackerz greetz:to my best friend in...

Microsoft VBScript and JScript Scripting Engines Remote Code Execution Vulnerability

Description Microsoft VBScript and JScript are prone to a remote code-execution vulnerability because they fail to adequately handle user-supplied input. Attackers can leverage this issue by enticing an unsuspecting user to view a malicious web document. Successful exploits would allow arbitrary...

sitesift-sql.txt

powered by Site Sift scripts SQL Injection AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 BLOG : http://my.opera.com/SQL-Injection/blog/ MAiL : [email protected] DORK 1 : powered by Site Sift DORK 2 : allinurl: "index php go addpage" DORK 2 : allinurl: "index.php?go=deta...

MS08-025: Vulnerability in Windows Kernel Could Allow Elevation of Privilege (941693)

The remote host contains a version of the Windows kernel that is vulnerable to a security flaw that could allow a local user to elevate his privileges or to crash it therefore causing a denial of service. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid31798;...

phpTournois G4 - Arbitrary File Upload / Code Execution

Date: 04-06-08 - Remote Code Execution - Remote File Upload When testing if we are admin, phpTournois checks if $grade'a'=='a'. But when we are not loggued in, this var is not defined. So, using registerglobals, we can define it and let the CMS think we are authentificated. Using configuration zo...

CVE-2008-6210

creationtimestamp| type| source ---|---|--- 2008-04-08 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5415 2009-12-27 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/10751...

CVE-2008-4778

creationtimestamp| type| source ---|---|--- 2008-04-08 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5414 2008-04-14 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5447...

CVE-2008-1858

creationtimestamp| type| source ---|---|--- 2008-04-07 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5400 2010-05-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/12560...

Site Sift Listings - id SQL Injection

Site Sift Listings - id SQL Injection powered by Site Sift scripts SQL Injection AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 BLOG : http://my.opera.com/SQL-Injection/blog/ MAiL : [email protected] DORK 1 : powered by Site Sift DORK 2 : allinurl: "index php go addpage"...

comdev-sql.txt

--==+================================================================================+==-- --==+ Comdev News Publisher SQL Injection Vulnerbilitys +==-- --==+================================================================================+==-- Discovered By: t0pP8uZz & xprog Discovered On: 4 Apri...

Comdev News Publisher 4.1.2 - SQL Injection

--==+================================================================================+==-- --==+ Comdev News Publisher SQL Injection Vulnerbilitys +==-- --==+================================================================================+==-- Discovered By: t0pP8uZz & xprog Discovered On: 4 Apri...

Parallels Virtuozzo Containers 3.0.0-25.44.0.0-365.6 VZPP Interface File Manger - Cross-Site Request Forgery

Parallels Virtuozzo Containers 3.0.0-25.44.0.0-365.6 VZPP Interface File Manger - Cross-Site Request Forgery source: https://www.securityfocus.com/bid/28589/info Parallels Virtuozzo Containers is prone to a cross-site request-forgery vulnerability. Exploiting the issue will allow a remote attacke...

Parallels Virtuozzo Containers 3.0.0-25.4.swsoft VZPP Interface Change Pass - Cross-Site Request Forgery

Parallels Virtuozzo Containers 3.0.0-25.4.swsoft VZPP Interface Change Pass - Cross-Site Request Forgery source: https://www.securityfocus.com/bid/28593/info Parallels Virtuozzo Containers is prone to a cross-site request-forgery vulnerability. Exploiting the issue will allow a remote attacker to...

CVE-2008-6211

creationtimestamp| type| source ---|---|--- 2008-04-03 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/31598 2008-04-03 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/31601 2008-04-03 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/31602 2008-04-03...

CVE-2008-6196

creationtimestamp| type| source ---|---|--- 2008-04-02 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/31587 2008-04-02 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/31588 2008-04-02 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/31589...

CVE-2008-1647

creationtimestamp| type| source ---|---|--- 2008-04-01 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5338 2008-12-28 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7594...

Microsoft Crypto API X.509 Certificate Validation - Remote Information Disclosure

source: https://www.securityfocus.com/bid/28548/info Microsoft's Crypto API library is prone to an information-disclosure vulnerability because HTTP requests to arbitrary hosts and ports may be automatically triggered when validating X.509 certificates. Successful exploits allow attackers to...

Microsoft Crypto API X.509 Certificate Validation - Remote Information Disclosure

Microsoft Crypto API X.509 Certificate Validation - Remote Information Disclosure source: https://www.securityfocus.com/bid/28548/info Microsoft's Crypto API library is prone to an information-disclosure vulnerability because HTTP requests to arbitrary hosts and ports may be automatically trigger...

CVE-2008-1560

creationtimestamp| type| source ---|---|--- 2008-03-27 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/31546 2008-03-27 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/31547...