7902 matches found
K-Rate (SQL/XSS) Multiple Remote Vulnerabilities
Exploit for unknown platform in category web applications ================================================ K-Rate SQL/XSS Multiple Remote Vulnerabilities ================================================ ================================================================================ || K-Rate...
goranicms-blindsql.txt
. . | / | | \ \ | / / |\ \ \ |/ // / /\ \ / |/ \ / // | / | | / \ /|\ / / / / \ / \ / / / \ | | /\ /\ / \ | \ // est.2007 / / forum.darkc0de.com --- d3hydr8 - rsauron - P47r1ck - r45c4l - C1c4Tr1Z - bennu --- QKrun1x - skillfaker - Croathack - Optyx - Nuclear --- Eliminator and to...
MyBulletinBoard (MyBB) 1.2.11 - 'private.php' SQL Injection (2)
',select+username+from+mybbusers+where+uid=4,select+password+from+mybbusers+where+uid=4,select+salt+from+mybbusers+where+uid=4,adminsid',select+sid+from+mybbadminsessions+where+uid=4,'adminloginkey',select+loginkey+from+mybbadminsessions+where+uid=4,1121512515,null,null,'yes',null,null/&action=do...
millionpixel-sql.txt
|| | | Million Pixel Ad Script idcat Remote SQL Injection Vulnerability | | |---------------------Hussin X----------------------| | | Author: Hussin X | | Home : WwW.Hussin-X.com | www.tryag.cc | | email: darkangelg85atYahooDoTcom | | | | | | | script...
MyBulletinBoard (MyBB) 1.2.11 - private.php SQL Injection (2)
MyBulletinBoard MyBB 1.2.11 - private.php SQL Injection 2...
PHP-Fusion <= 6.00.206 Forum SQL Injection Vulnerability
A vulnerability is reported in the forum module of PHP-Fusion 6.00.206 and some early released versions. SPDX-FileCopyrightText: 2008 Ferdy Riphagen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
PHP-Fusion <= 6.00.206 Forum SQL Injection Vulnerability
Description : A vulnerability is reported in the forum module of PHP-Fusion 6.00.206 and some early released versions. When the forum module is activated, a registered user can execute arbitrary SQL injection commands. The failure exists because the application does not properly sanitize...
CVE-2008-3722
SQL injection vulnerability in forum/neu.asp in fipsCMS 2.1 allows remote attackers to execute arbitrary SQL commands via the kat parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2008-3722
SQL injection vulnerability in forum/neu.asp in fipsCMS 2.1 allows remote attackers to execute arbitrary SQL commands via the kat parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
vanilla-xss.txt
GulfTech Security Research August 19, 2008 Vendor : Mark O'Sullivan URL : http://www.getvanilla.com/ Version : Vanilla alert document.cookie%3B The above example link would display the end users cookie to them. Of course this can also be used to steal the cookie data as mentioned earlier in this...
CVE-2008-3722: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in forum/neu.asp in fipsCMS 2.1 allows remote attackers to execute arbitrary SQL commands via the kat parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
Vanilla <= 1.1.4 Script Injection/ XSS
GulfTech Security Research August 19, 2008 Vendor : Mark O'Sullivan URL : http://www.getvanilla.com/ Version : Vanilla = 1.1.4 Risk : Multiple Vulnerabilities Description: Vanilla is an open-source, standards-compliant, multi-lingual, fully extensible web based discussion forum. Unfortunately the...
Unfixed XSS vulnerability at seruv.nethost.co.il
Security researcher BlueMax, has submitted on 08/11/2008 a cross-site-scripting XSS vulnerability affecting seruv.nethost.co.il, which at the time of submission ranked 3043308 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 02/07/2009. It is...
discuz obtain any administrator password vulnerability-vulnerability warning-the black bar safety net
The author of the article: The Frozen prodigal son Information source: evil octal information security team www.eviloctal.com） Vulnerability description: Discuz Forum system is a set of used php+mysql database running,which found a security vulnerability, successful exploitation of this...
CVE-2008-3555
This CVE (CVE-2008-3555) is a directory traversal/local-file-inclusion flaw in index.php across multiple WSN products (WSN Forum 4.1.43 and earlier; Gallery 4.1.30 and earlier; WSNKB 4.1.36 and earlier; Links 4.1.44 and earlier; possibly Classifieds before 4.1.30). The underlying issue is a vulne...
CVE-2008-3555: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in index.php in 1 WSN Forum 4.1.43 and earlier, 2 Gallery 4.1.30 and earlier, 3 Knowledge Base WSNKB 4.1.36 and earlier, 4 Links 4.1.44 and earlier, and possibly 5 Classifieds before 4.1.30 allows remote attackers to include and execute arbitrary local files via ...
wsnprod-lfiexec.txt
Author: otmorozok428, http://forum.antichat.ru Products: Wsn Forum Enter to upload: http://www.site.com/forum/profile.php?action=editprofile&id=Your User ID See the avatar name at your profile. Upload evil avatar and go to: index.php?custom=yes&TID=../../attachments/avatars/Avatar...
WebmasterSite (Multiple Products) - Remote Command Execution
WebmasterSite Multiple Products - Remote Command Execution source: https://www.securityfocus.com/bid/30572/info Multiple WebmasterSite products are prone to a remote shell command-execution vulnerability because the applications fail to sufficiently sanitize user-supplied data. Successfully...
Discuz! Forum the wap function module coding injection vulnerability-vulnerability warning-the black bar safety net
Author: The Frozen prodigal son Due to the hair in a blog on the vulnerability information to a bit beef up. Official has out patch. Since PHP for multibyte character sets support the existence of problem in various coding conversion process, it is possible to initiate a program overflow and...
WebmasterSite (Multiple Products) - Remote Command Execution
source: https://www.securityfocus.com/bid/30572/info Multiple WebmasterSite products are prone to a remote shell command-execution vulnerability because the applications fail to sufficiently sanitize user-supplied data. Successfully exploiting this issue will allow an attacker to execute arbitrar...