Web Design Noida SQL Injection

============================================== Web Design Noida SQL Injection Vulnerability ============================================== .----..--.--.| |--..-----..----.| |.-----..-----. | || | || || -|| || || || | ||| ||||||| ||||| | || || Web Design Noida SQL Injection Vulnerability Vendor:...

CVE-2009-4791: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Family Connections aka FCMS before 1.8.2 allow remote attackers to execute arbitrary SQL commands via the 1 letter parameter to addressbook.php, 2 id parameter to recipes.php, 3 year parameter to register.php, 4 pollid parameter to home.php, and 5 email...

CVE-2009-4750: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in home.php in Top Paidmailer allows remote attackers to execute arbitrary PHP code via a URL in the page parameter...

CVE-2010-0457: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in home.php in magic-portal 2.1 allows remote attackers to execute arbitrary SQL commands via the id parameter...

magic-portal 2.1 - SQL Injection

magic-portal 2.1 - SQL Injection :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: Exploit Title :magic-portal SQL injection Vulnerability Author: alnjm33 Software Link: Version: 2.1 Tested on: Version 2.1 My home : Sec-war.com...

CVE-2009-3752: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in home.php in Opial 1.0 allows remote attackers to execute arbitrary SQL commands via the genresparent parameter...

CVE-2009-3751: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in home.php in Opial 1.0 allows remote attackers to inject arbitrary web script or HTML via the genresparent parameter...

CVE-2009-3592: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in customer/home.php in Qualiteam X-Cart allows remote attackers to inject arbitrary web script or HTML via the email parameter in a subscribed action, a different vector than CVE-2005-1823...

X-Cart email subscription xss

No description provided by source. X-Cart XSS in email subscription Download: http://www.x-cart.com/ Discovered by: Paulo Santos Contact: [email protected] Blog: http://infocampo.wordpress.com http://target/path/customer/home.php?mode=subscribed&email=plaintext/...

CVE-2008-7041: Improper Authentication

AJ Classifieds allows remote attackers to bypass authentication and gain administrator privileges via a direct request to admin/home.php...

CVE-2009-2773: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in home.php in PHP Paid 4 Mail Script allows remote attackers to execute arbitrary PHP code via a URL in the page parameter...

CVE-2008-6912: Improper Authentication

Zeeways SHAADICLONE 2.0 allows remote attackers to bypass authentication and gain administrative privileges via a direct request to admin/home.php...

Opial 1.0 File Upload / XSS / SQL Injection

::::::::::::::::::::R3AL.RU:::::::::::::::::::: Opial 1.0 Arbitrary File Upload & XSS & SQL Injection genresparent Author: LMaster Greetz: r3al.ru Official Site with demo: http://www.opial.com --Arbitrary File UploadSQL InjectionXSSalertdocument.cookie; Demo: http://www.opial.com/demo/register.ph...

CVE-2009-2219: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in phpCollegeExchange 0.1.5c allow remote attackers to inject arbitrary web script or HTML via the 1 SESSIONhandle parameter to a home.php, b books/allbooks.php, or c books/home.php; or the 2 home parameter to d ihead.php or e inav.php, or f...

Unfixed XSS vulnerability at www.poveditions.com

Security researcher Xylitol, has submitted on 05/03/2009 a cross-site-scripting XSS vulnerability affecting www.poveditions.com, which at the time of submission ranked 2459949 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 19/04/2009. It is...

CVE-2008-6553: Improper Authentication

microcms-admin-home.php in Implied by Design Micro CMS Micro-CMS 3.5 aka 0.3.5 does not require authentication as an administrator, which allows remote attackers to 1 create administrative accounts via an addadmin action, 2 remove administrative accounts via a deleteadmin action, and 3 modify...

CVE-2008-5042

Zeeways PhotoVideoTube 1.1 and earlier contains an authentication bypass vulnerability that allows remote attackers to bypass login and perform administrative tasks via a direct request to admin/home.php. This CVE (CVE-2008-5042) is documented by NVD and CVE lists, with public exploit references ...

CVE-2008-5042: Improper Authentication

Zeeways PhotoVideoTube 1.1 and earlier allows remote attackers to bypass authentication and perform administrative tasks via a direct request to admin/home.php...

CVE-2008-4585: Undefined Security Weakness

Belong Software Site Builder 0.1 beta allows remote attackers to bypass intended access restrictions and perform administrative actions via a direct request to admin/home.php...

Sql injection

Multiple SQL injection vulnerabilities in Haudenschilt Family Connections CMS FCMS 1.4 allow remote authenticated users to execute arbitrary SQL commands via the 1 address parameter to addressbook.php, the 2 getnews parameter to familynews.php, and the 3 pollid parameter to home.php in a results...