SyndeoCMS 2.6.0 - Local File Inclusion Cross-Site Scripting

SyndeoCMS 2.6.0 - Local File Inclusion Cross-Site Scripting =========================================================== SyndeoCMS 2.6.0 LFI/XSS Multiple Remote Vulnerabilities =========================================================== ,--^----------,--------,-----,-------^--, | ||||||||| -------...

TNT Forum 0.9.4 Local File Inclusion Vulnerabilities

Exploit for unknown platform in category web applications ==================================================== TNT Forum 0.9.4 Local File Inclusion Vulnerabilities ==================================================== ====================================================== TNT Forum 0.9.4 Local Fil...

ASPPortal Free Version - 'Topic_Id' SQL Injection

--==+=================== Spanish Hackers Team www.spanish-hackers.com =================+==-- --==+ ASPPortal Free Version TopicId Remote SQL Injection Vulnerability +==-- --==+====================================================================================+==-- - dreaming of necessity is reas...

Unfixed XSS vulnerability at www.labanlieuesexprime.org

Security researcher Mystick, has submitted on 06/10/2008 a cross-site-scripting XSS vulnerability affecting www.labanlieuesexprime.org, which at the time of submission ranked 432828 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/10/2008. It...

TNT Forum 0.9.4 - Local File Inclusion

TNT Forum 0.9.4 - Local File Inclusion ====================================================== TNT Forum 0.9.4 Local File Inclusion Vulnerabilities ====================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking...

TNT Forum 0.9.4 - Local File Inclusion

====================================================== TNT Forum 0.9.4 Local File Inclusion Vulnerabilities ====================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team...

Sql injection

SQL injection vulnerability in forum/topicdetail.php in AJ Square aj-hyip aka AJ HYIP Acme allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-2532

SQL injection vulnerability in forum/topicdetail.php in AJ Square aj-hyip aka AJ HYIP Acme allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-2532

SQL injection vulnerability in forum/topicdetail.php in AJ Square aj-hyip aka AJ HYIP Acme allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-2532

The vulnerability CVE-2008-2532 affects the AJ Square AJ-HYIP (aka AJ HYIP Acme) forum component, specifically forum/topic_detail.php. The issue is a SQL injection in the id parameter that allows remote attackers to execute arbitrary SQL commands. This is caused by improper validation of the id i...

Phpwind所有版本管理权限泄露漏洞利用poc

No description provided by source. -- coding: gb2312 -- import urllib2,httplib,sys httplib.HTTPConnection.debuglevel = 1 cookies = urllib2.HTTPCookieProcessor opener = urllib2.buildopenercookies def banner: print "" print "" print "Phpwind所有版本管理权限泄露漏洞利用poc"...

Joomla! Component JooBB 0.5.9 - Blind SQL Injection

!/usr/bin/perl use LWP::UserAgent; use Getopt::Long; if!$ARGV1 print " \n"; print " \n"; print " Joomla Component Joo!BB Blind SQL Injection Exploit \n"; print " Author:His0k4 ALGERIAN HaCkeR \n"; print " \n"; print " Conctact: His0k4.hlmatgamil.com \n"; print " Greetz: All friends & muslims...

Sql injection

Multiple SQL injection vulnerabilities in Meto Forum 1.1 allow remote attackers to execute arbitrary SQL commands via the 1 id parameter to a admin/duzenle.asp and b adminoku.asp; the 2 kid parameter to c kategori.asp and d adminkategori.asp; and unspecified parameters to e uye.asp and f oku.asp...

CVE-2008-2448

Multiple SQL injection vulnerabilities in Meto Forum 1.1 allow remote attackers to execute arbitrary SQL commands via the 1 id parameter to a admin/duzenle.asp and b adminoku.asp; the 2 kid parameter to c kategori.asp and d adminkategori.asp; and unspecified parameters to e uye.asp and f oku.asp...

CVE-2008-2448

CVE-2008-2448 relates to multiple SQL injection vulnerabilities in Meto Forum 1.1 . The flaws allow remote attackers to execute arbitrary SQL commands via specific parameters: (1) id to (a) admin/duzenle.asp and (b) admin_oku.asp; (2) kid to (c) kategori.asp and (d) admin_kategori.asp; and unspec...

CVE-2008-2448

Multiple SQL injection vulnerabilities in Meto Forum 1.1 allow remote attackers to execute arbitrary SQL commands via the 1 id parameter to a admin/duzenle.asp and b adminoku.asp; the 2 kid parameter to c kategori.asp and d adminkategori.asp; and unspecified parameters to e uye.asp and f oku.asp...

CMS MAXSITE <= 1.10 (category) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================= CMS MAXSITE = 1.10 category Remote SQL Injection Vulnerability ================================================================= + Author: Tesz + Home:...

Unfixed XSS vulnerability at www.experienceadvertising.com

Security researcher PaPPy, has submitted on 26/05/2008 a cross-site-scripting XSS vulnerability affecting www.experienceadvertising.com, which at the time of submission ranked 140745 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 27/05/2008. I...

CMS MAXSITE 1.10 - 'category' SQL Injection

CMS MAXSITE Remote SQL Injection Exploit = 1.10 + Author: Tesz @ THD + Home: http://www.thaishadow.com + Forum: http://www.thaishadow.com/board/index.php + Download: http://maxsite.geniuscyber.com/index.php?name=index + Dork: MAXSITE or intitle:"MAXSITE" + Exploit:...

XOOPS cross-site scripting vulnerability

Overview XOOPS is an open source web content management system implemented in PHP. XOOPS itself and its forum modules have multiple vulnerabilities in validating private messages and forum articles. Impact A remote attacker may upload a script to be executed by a user reading a private message or...