knorrede-sql.txt

Author: Sebastian Bauer Web: http://blog.gjl-network.net Date: 01/12/07 Vuln. website: http://www.knorr.de Vulnerability: SQL Injection mainly login authentication bypass + any other SQL inj. possibility, XSS Significance: Very Critical ---------------------------------------------------------...

AJ Forum 1.0 (topic_title.php) Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl Script Name: AJ Forum 1.0 topictitle.php Remote BLIND SQL Injection Exploit Coded by : ajann Author : ajann Contact : : S.Page : http://www.ajsquare.com Dork : "/subcat.php?cateid=" $$ : 250.00 USD .. : ajann,Turkey use IO::Socket; if@ARGV 1 print...

AJ Forum 1.0 - topic_title.php SQL Injection

AJ Forum 1.0 - topictitle.php SQL Injection !/usr/bin/perl Script Name: AJ Forum 1.0 topictitle.php Remote BLIND SQL Injection Exploit Coded by : ajann Author : ajann Contact : : S.Page : http://www.ajsquare.com Dork : "/subcat.php?cateid=" $$ : 250.00 USD .. : ajann,Turkey use IO::Socket; if@ARG...

AJ Forum 1.0 - 'topic_title.php' SQL Injection

!/usr/bin/perl Script Name: AJ Forum 1.0 topictitle.php Remote BLIND SQL Injection Exploit Coded by : ajann Author : ajann Contact : : S.Page : http://www.ajsquare.com Dork : "/subcat.php?cateid=" $$ : 250.00 USD .. : ajann,Turkey use IO::Socket; if@ARGV : "; $dir = ; chop $dir; if $dir = /exit/...

AJ Forum 1.0 (topic_title.php) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications =========================================================== AJ Forum 1.0 topictitle.php Remote SQL Injection Exploit =========================================================== !/usr/bin/perl Script Name: AJ Forum 1.0 topictitle.php Remote...

CVE-2007-1237

sitex allows remote attackers to obtain potentially sensitive information via a ' quote value for certain parameters, as demonstrated by parameters used in forum and search, which forces a SQL error...

Sql injection

sitex allows remote attackers to obtain potentially sensitive information via a ' quote value for certain parameters, as demonstrated by parameters used in forum and search, which forces a SQL error...

CVE-2007-1237

CVE-2007-1237 concerns a vulnerability in sitex where remote attackers can disclose potentially sensitive information by supplying a crafted quote character value for certain parameters, which triggers a SQL error. Multiple sources corroborate this description (NVD/NIST, CVE listings, and related...

CVE-2007-1177

WebAPP before 0.9.9.5 does not properly filter certain characters in contexts related to 1 the query string, 2 Profiles, 3 the Forum Post icon field, 4 the Edit Profile, and 5 the Gallery, which has unknown impact and remote attack vectors, possibly related to cross-site scripting XSS...

CVE-2007-1177

WebAPP before 0.9.9.5 does not properly filter certain characters in contexts related to 1 the query string, 2 Profiles, 3 the Forum Post icon field, 4 the Edit Profile, and 5 the Gallery, which has unknown impact and remote attack vectors, possibly related to cross-site scripting XSS...

CVE-2007-1187

WebAPP before 0.9.9.5 allows remote authenticated users, without admin privileges, to obtain sensitive information via 1 the Forum Archive feature and 2 Recent Searches...

CVE-2006-7088

Multiple SQL injection vulnerabilities in Simple PHP Forum before 0.4 allow remote attackers to execute arbitrary SQL commands via the username parameter to 1 logonuser.php and 2 updateprofile.php...

CVE-2007-1187

WebAPP before 0.9.9.5 allows remote authenticated users, without admin privileges, to obtain sensitive information via 1 the Forum Archive feature and 2 Recent Searches...

Cross site scripting

WebAPP before 0.9.9.5 does not properly filter certain characters in contexts related to 1 the query string, 2 Profiles, 3 the Forum Post icon field, 4 the Edit Profile, and 5 the Gallery, which has unknown impact and remote attack vectors, possibly related to cross-site scripting XSS...

CVE-2007-1187

WebAPP before 0.9.9.5 allows remote authenticated users, without admin privileges, to obtain sensitive information via 1 the Forum Archive feature and 2 Recent Searches...

CVE-2007-1187

WebAPP prior to 0.9.9.5 is affected by an information disclosure vulnerability: remote authenticated users without admin privileges can access sensitive information via the Forum Archive feature and Recent Searches. The issue is documented in CVE-2007-1187 with a base impact on confidentiality (P...

CVE-2006-7088

Multiple SQL injection vulnerabilities in Simple PHP Forum before 0.4 allow remote attackers to execute arbitrary SQL commands via the username parameter to 1 logonuser.php and 2 updateprofile.php...

CVE-2006-7088

CVE-2006-7088 affects Simple PHP Forum prior to 0.4, with multiple SQL injection vulnerabilities – attackers can craft the username parameter to logon_user.php or update_profile.php to execute arbitrary SQL. The available documents confirm remote exploitation potential and the affected components...

vBulletin 3.6.4 - inlinemod.php?postids SQL Injection

vBulletin 3.6.4 - inlinemod.php?postids SQL Injection input-cleanarraygpc'p', array 'postids' = TYPESTR, ; $postids = exp...

Unfixed XSS vulnerability at kisiselbasari.com

Security researcher St@rExT, has submitted on 28/02/2007 a cross-site-scripting XSS vulnerability affecting kisiselbasari.com, which at the time of submission ranked 58362 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/03/2007. It is...