Sql injection

The Sidebar gadget in ITN News Gadget aka ITN Hub Gadget 1.06 for Windows Vista, and possibly other versions before 1.23, allows remote web servers or man-in-the-middle attackers to execute arbitrary commands via script in a shorttitle response...

CVE-2008-7037

The Sidebar gadget in ITN News Gadget aka ITN Hub Gadget 1.06 for Windows Vista, and possibly other versions before 1.23, allows remote web servers or man-in-the-middle attackers to execute arbitrary commands via script in a shorttitle response...

CVE-2008-7037

The CVE-2008-7037 entry affects the ITN News Gadget (ITN Hub Gadget) 1.06 for Windows Vista and possibly earlier versions up to 1.23. Affected component: the gadget’s short_title response, where an attacker-controlled remote server or MITM can inject script to execute arbitrary commands on the us...

Microsoft Security Bulletin MS07-048 - Important Vulnerabilities in Windows Gadgets Could Allow Remote Code Execution (938123)

Microsoft Security Bulletin MS07-048 - Important Vulnerabilities in Windows Gadgets Could Allow Remote Code Execution 938123 Published: August 14, 2007 Version: 1.0 General Information Executive Summary This important security update resolves two privately reported vulnerabilities in addition to...

Microsoft Windows Vista Weather Gadget vulnerability

Overview The Windows Vista Weather gadget contains a vulnerability that may allow and attacker to execute code. Description From Microsoft Security Bulletin MS07-048:Gadgets are mini-applications designed to provide the user with information or utilities. Windows Vista treats gadgets similar to t...

Microsoft Windows Vista Contacts Gadget vulnerability

Overview The Windows Vista Contacts gadget contains a vulnerability that may allow an attacker to execute code. Description From Microsoft Security Bulletin MS07-048:Gadgets are mini-applications designed to provide the user with information or utilities. Windows Vista treats gadgets similar to t...

Design/Logic Flaw

Unspecified vulnerability in Windows Vista Contacts Gadget in Windows Vista allows user-assisted remote attackers to execute arbitrary code via crafted contact information that is not properly handled when it is imported...

CVE-2007-3032

Unspecified vulnerability in Windows Vista Contacts Gadget in Windows Vista allows user-assisted remote attackers to execute arbitrary code via crafted contact information that is not properly handled when it is imported...

CVE-2007-3032

Unspecified vulnerability in Windows Vista Contacts Gadget in Windows Vista allows user-assisted remote attackers to execute arbitrary code via crafted contact information that is not properly handled when it is imported...

CVE-2007-3032

CVE-2007-3032 is a Windows Vista vulnerability in the Contacts Gadget that could allow remote code execution when a user imports specially crafted contact data. The issue, described across multiple sources, arises from insufficient validation of imported contact information, enabling code executi...

Hacker chickens concealed the whereabouts of the Let account stealth-vulnerability warning-the black bar safety net

Analyzing a hack whether excellent, not a single look at his of the invasion means, whether smart, more important is to see he won't be hiding their whereabouts. I believe we have mastered a variety of invasion means that the hands control the broiler also everywhere is. However, your stealth...

Debian DSA-1097-1 : kernel-source-2.4.27 - several vulnerabilities

Several local and remote vulnerabilities have been discovered in the Linux kernel that may lead to a denial of service or the execution of arbitrary code. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2006-0038 'Solar Designer' discovered that arithmet...

Debian DSA-1103-1 : kernel-source-2.6.8 - several vulnerabilities

Several local and remote vulnerabilities have been discovered in the Linux kernel that may lead to a denial of service or the execution of arbitrary code. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2005-3359 Franz Filz discovered that some socket...

CVE-2006-5228

Multiple SQL injection vulnerabilities in the Google Gadget login.php gadget/login.php in Rob Hensley ackerTodo 4.2 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 uplogin, 2 uppass, or 3 upnumtasks parameters...

CVE-2006-5228

Multiple SQL injection vulnerabilities in the Google Gadget login.php gadget/login.php in Rob Hensley ackerTodo 4.2 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 uplogin, 2 uppass, or 3 upnumtasks parameters...

CVE-2006-5228

CVE-2006-5228 refers to multiple SQL injection vulnerabilities in the Google Gadget login.php (gadget/login.php) for Rob Hensley appckerTodo 4.2 and earlier. The vulnerable component is the login script (up_login, up_pass, up_num_tasks parameters) that allows remote attackers to execute arbitrary...

CVE-2006-3292

CVE-2006-3292 affects Jaws 0.6.2, where a SQL injection vulnerability in the Search gadget allows remote attackers to modify or query the database via the searchdata parameter (LIKE usage). The underlying issue is unsafely concatenating user input into SQL statements used by the search functional...

CVE-2006-3292

SQL injection vulnerability in the Search gadget in Jaws 0.6.2 allows remote attackers to execute arbitrary SQL commands via queries with the "LIKE" keyword in the searchdata parameter search field...

Jaws <= 0.6.2 (Search gadget) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ========================================================== Jaws = 0.6.2 Search gadget Remote SQL Injection Exploit ========================================================== !/usr/bin/php -q -d shortopentag=on ? echo "Jaws = 0.6.2 'Search...

Jaws 0.6.2 - Search gadget SQL Injection

Jaws 0.6.2 - Search gadget SQL Injection !/usr/bin/php -q -d shortopentag=on ? echo "Jaws = 0.6.2 'Search gadget' SQL injection / admin credentials disclosure\r\n"; echo "by rgod [email protected]\r\n"; echo "site: http://retrogod.altervista.org\r\n"; echo "dork: "powered by jaws" | "powered by...