Sql injection

SQL injection vulnerability in the GBU Facebook comgbufacebook component 1.0.5 for Joomla! allows remote attackers to execute arbitrary SQL commands via the faceid parameter in a showface action to index.php...

CVE-2010-5056

SQL injection vulnerability in the GBU Facebook comgbufacebook component 1.0.5 for Joomla! allows remote attackers to execute arbitrary SQL commands via the faceid parameter in a showface action to index.php...

CVE-2010-5056

CVE-2010-5056 describes an SQL injection in the Joomla! extension/component com_gbufacebook version 1.0.5. The vulnerability is triggered via the face_id parameter in the show_face action to index.php , allowing remote attackers to execute arbitrary SQL commands. The available connected records (...

CVE-2010-5056: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the GBU Facebook comgbufacebook component 1.0.5 for Joomla! allows remote attackers to execute arbitrary SQL commands via the faceid parameter in a showface action to index.php...

Facebook PromocionMomentosMágicos - SQL Vulnerability

Document Title: =============== Facebook PromocionMomentosMágicos - SQL Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=303 Release Date: ============= 2011-11-22 Vulnerability Laboratory ID VL-ID: ==================================== 303...

Facebook PromocionMomentosMágicos - SQL Vulnerability

Document Title: =============== Facebook PromocionMomentosMágicos - SQL Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=303 Release Date: ============= 2011-11-22 Vulnerability Laboratory ID VL-ID: ==================================== 303...

ARASTAR SQL Injection

++ |o ID | ++ + Title : ARASTAR SQL Injection Vulnerability + Affected Version : ALL VERSIONS + Software Link : http://ara-star.com/art.php?ID=172 + Tested on : Windows XP SP2 + Date : 18/11/2011 + Dork : inurl:'.co.il/Cat.php?ID=' intext:"POWERED BY ARASTAR" + Category : Content Management +...

YSD Web Design SQL Injection

Exploit Title: Ysd Web Design Sql Injection Vulnerability Date: 20/11/2011 - 03:18 Author: 3spi0n Software Website: http://www.ysd.hk/ Tested On: BackTrack 5 - Win7 Ultimate Platform: Php $ Vulnerable File: Changer $ Dorks: "Designed by YSD" $ Demo Sites:...

Facebook User Error Behind Porn, Mutilation Spam

A campaign of explicit spam on Facebook this week has been linked to a relatively obscure exploit method known as self-inflicted JavaScript injection and not malicious code running on Facebook’s massive network, an independent analysis has shown. The campaign, in which violent and pornographic...

Report: FTC Nears Deal with Facebook For Opt-In Privacy Changes

The deal will settle an FTC case alleging privacy violations on the social network by forcing users to opt in to any changes to default privacy settings, according to a report in the Wall Street Journal. The FTC inquiry dates back more than two years, and followed changes to the default privacy...

Facebook A+ Academy SQL Injection

Title: ====== Facebook A+ Academy - SQL Injection Vulnerability Date: ===== 2011-11-08 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=276 VL-ID: ===== 276 Introduction: ============= The application is currently included and viewable by all facebook users. The service ...

The Hacker News arrived on Google+ Pages

The Hacker News arrived on Google+ Pages Google has finally added Google+ Pages feature in their social network which allow brands, products, companies, businesses, places, groups, and everyone else to establish a presence on the service. We've gone ahead and set up our very own 'The Hacker News'...

Zynga Open URL Redirect

\ \ \ \ \ | / \ \ \ / /\ / /\ \ / / |/ /| | / / \ / / / | | /\ / \ / / /| Author: r007k17-w a.k.a Raghavendra Karthik.D Email: [email protected] My blog: http://shadowrootkit.wordpress.com/ Google Dork: Copyright 2010 Zynga Game Network Inc...

#OccupyLondon : The Night of Thousand Masks on 5th November

OccupyLondon : The Night of Thousand Masks on 5th November Anonymous Mask = "A symbol that unites them behind one universal message" . Activists plan to protest on 5th November ,2011 at Saint Pauls Cathedral London 9:00pm - 11:00pm. This going to be "The Night of Thousand Masks". Message By...

Promiscuous Facebookers More Likely To Fall For Fake Friend Scams

Having more friends on Facebook might not mean you’re popular, but it does make you more likely to accept an invitation from a fake friend, according to research from the University of British Columbia. In a paper to be presented in December at the Annual Computer Security Application Conference ...

Shady ChatSend App Linked to Facebook Spamming Activity

Security experts are warning Facebook users about a shady file-sharing application called ChatSend that has been linked to spammy e-mail and wall posts from the accounts of Facebook users who download it. According to a report by GFI Labs, questionable messages that link to ChatSend’s Facebook pa...

Facebook Holi Greeting Cards - SQL Injection Vulnerability

Document Title: =============== Facebook Holi Greeting Cards - SQL Injection Vulnerability References Source: ==================== Facebook 3rd Party Application - Holi Greeting Cards 2011/Q2 Release Date: ============= 2011-11-01 Vulnerability Laboratory ID VL-ID:...

Facebook Holi Greeting Cards - SQL Injection Vulnerability

Document Title: =============== Facebook Holi Greeting Cards - SQL Injection Vulnerability References Source: ==================== Facebook 3rd Party Application - Holi Greeting Cards 2011/Q2 Release Date: ============= 2011-11-01 Vulnerability Laboratory ID VL-ID:...

Facebook "Trusted friends" Security Feature Easily Exploitable

Facebook "Trusted friends" Security Feature Easily Exploitable Last week Facebook announced that in one day 600,000 accounts possibly get hacked. Another possible solution for Facebook to combat security issues is to find 3 to 5 "Trusted friends". Facebook will be adding two new security features...

Facebook My Phrase Box SQL Injection

Title: ====== Facebook My Phrase Box - SQL Injection Vulnerability Date: ===== 2011-10-16 VL-ID: ===== 288 Introduction: ============= The application is currently included and viewable by all facebook users. The service is an external 3rd party application sponsored by the My Phrase Box. Copy fr...