Apache JackRabbit 2.0.0 - webapp XPath Injection

Apache JackRabbit 2.0.0 - webapp XPath Injection Title: Apache JackRabbit webapp XPath Injection Author: ADEO Security Published: 11/08/2010 Version: 2.0.0 Possible all versions Vendor: http://www.apache.org Download: http://www.apache.org/dyn/closer.cgi/jackrabbit/2.0.0/jackrabbit-2.0.0-src.zip...

Apache JackRabbit 2.0.0 - webapp XPath Injection

Title: Apache JackRabbit webapp XPath Injection Author: ADEO Security Published: 11/08/2010 Version: 2.0.0 Possible all versions Vendor: http://www.apache.org Download: http://www.apache.org/dyn/closer.cgi/jackrabbit/2.0.0/jackrabbit-2.0.0-src.zip Description: "Apache Jackrabbit is a fully...

DEBIAN-CVE-2010-2092

SQL injection vulnerability in graph.php in Cacti 0.8.7e and earlier allows remote attackers to execute arbitrary SQL commands via a crafted rraid parameter in a GET request in conjunction with a valid rraid value in a POST request or a cookie, which causes the POST or cookie value to bypass the...

Sql injection

SQL injection vulnerability in index.php in Katalog Stron Hurricane 1.3.5, and possibly earlier, allows remote attackers to execute arbitrary SQL commands via the get parameter...

SphereCMS 1.1 Alpha Blind SQL Injection

www.BugReport.ir AmnPardaz Security Research Team Title: SphereCMS Blind SQL Injection Vulnerability Vendor: http://sphere.xlentprojects.se/ Vulnerable Version: 1.1 alpha Latest version till now Exploitation: Remote with browser Fix: N/A - Description: SphereCMS is a CMS which allow managing foru...

Joomla yt_color YOOOtheme XSS and Cookie Stealing

Exploit for unknown platform in category web applications ================================================= Joomla ytcolor YOOOtheme XSS and Cookie Stealing ================================================= The GET variable ytcolor can be set to any script Example 1:...

Vivvo CMS 4.1.5.1 file disclosure

Exploit for unknown platform in category web applications ================================= Vivvo CMS 4.1.5.1 file disclosure ================================= Description of vulnerable software: Vivvo CMS is an intuitive content management system atop a powerful programming framework, empowering...

Super Mod System 3.1.5 SQL Injection

---------------------------------------------------------------------------------------------------- Name : Super Mod System 3.1 5 Site : http://www.classified-software.co.uk/ Demo : http://www.classified-software.co.uk/super-mod-system-v3/...

OpenX 2.6.3 - 'MAX_type' Local File Inclusion

includeonce '../../init-delivery.php'; $MAXPLUGINSADPLUGINNAME = 'MAXtype'; if!isset$GET$MAXPLUGINSADPLUGINNAME echo $MAXPLUGINSADPLUGINNAME . ' is not specified'; exit1; $tagName = $GET$MAXPLUGINSADPLUGINNAME; $tagFileName = MAXPATH...

Photobase 1.2 - 'Language' Local File Inclusion

START 0x01 Informations: Script : Photobase 1.2 Download : http://www.monstar.nl/php-bin/count.php3?what=photobase.zip&id=0 Vulnerability : Local File Inclusion Author : Osirys Contact : osirysatlivedotit Website : http://osirys.org 0x02 Bug: Local File Inclusion Bugged file is:...

Photobase 1.2 - Language Local File Inclusion

Photobase 1.2 - Language Local File Inclusion START 0x01 Informations: Script : Photobase 1.2 Download : http://www.monstar.nl/php-bin/count.php3?what=photobase.zip&id=0 Vulnerability : Local File Inclusion Author : Osirys Contact : osirysatlivedotit Website : http://osirys.org 0x02 Bug: Local Fi...

RedPeach CMS SQL Injection

REDPEACH CMS - SQL Injection Vulnerability http://www.redpeach.de/ Vulnerability discovered by: LidlosesAuge Greetz to: -=Player=- , Suicide, g4ms3, enco, Palme, GPM, karamble, Free-Hack Date: 23.12.2008 Admin Panel: Target/admin/login.php Description: The Files "index.php" and "page.php" contain...

ILIAS 3.7.4 - ref_id Blind SQL Injection

ILIAS 3.7.4 - refid Blind SQL Injection ILIAS Learning Management 50-- milw0rm.com 2008-12-24...

REDPEACH CMS - SQL Injection

REDPEACH CMS - SQL Injection REDPEACH CMS - SQL Injection Vulnerability http://www.redpeach.de/ Vulnerability discovered by: LidlosesAuge Greetz to: -=Player=- , Suicide, g4ms3, enco, Palme, GPM, karamble, Free-Hack Date: 23.12.2008 Admin Panel: Target/admin/login.php Description: The Files...

REDPEACH CMS - SQL Injection

REDPEACH CMS - SQL Injection Vulnerability http://www.redpeach.de/ Vulnerability discovered by: LidlosesAuge Greetz to: -=Player=- , Suicide, g4ms3, enco, Palme, GPM, karamble, Free-Hack Date: 23.12.2008 Admin Panel: Target/admin/login.php Description: The Files "index.php" and "page.php" contain...

MyBB Plugin Custom Pages 1.0 Remote SQL Injection Vulnerability

No description provided by source. MyBulletin Board MyBB Plugin "Custom Pages 1.0" - SQL Injection Vulnerability found by: LidlosesAuge Contact ICQ: 120946783 Greetz to: free-hack.com Vulnerability: Document: pages.php GET-Parameter: page Dork: inurl:"pages.php" + intext:"powered by&...

724cms-sql.txt

724CMS = 4.01 Enterprise - SQL Injection Vulnerability found by: LidlosesAuge Date: 07.04.2008 Contact ICQ: 120946783 Greetz to: free-hack.com Vulnerability: Document: index.php GET-Parameter: ID Dork: 724CMS + "Version 4.01" Example:...

mybbcp-sql.txt

MyBulletin Board MyBB Plugin "Custom Pages 1.0" - SQL Injection Vulnerability found by: LidlosesAuge Contact ICQ: 120946783 Greetz to: free-hack.com Vulnerability: Document: pages.php GET-Parameter: page Dork: inurl:"pages.php" + intext:"powered by mybb" Example:...

MyBB Plugin Custom Pages 1.0 - SQL Injection

MyBulletin Board MyBB Plugin "Custom Pages 1.0" - SQL Injection Vulnerability found by: LidlosesAuge Greetz to: free-hack.com Vulnerability: Document: pages.php GET-Parameter: page Dork: inurl:"pages.php" + intext:"powered by mybb" Example:...

reloadcms-lfi.txt

New Advisory: ReloadCMS http://reloadcms.com ——————–Summary—————- Software: ReloadCMS Sowtware’s Web Site: http://reloadcms.com/main/ Versions: 1.2.7 Critical Level: Moderate Type: Multiple Vulnerabilities Class: Remote Status: Unpatched PoC/Exploit: Available Solution: Not Available Discovered b...