9769 matches found
CVE-2010-4860: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in productdesc.php in MyPhpAuction 2010 allows remote attackers to execute arbitrary SQL commands via the id parameter...
PT-2011-1789
Name of the Vulnerable Software and Affected Versions Zuitu version 1.6 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the id parameter in a consume action in the "ajax/coupon.php" file when magic quotes gpc is disabled. Recommendations For...
PT-2011-3945
Name of the Vulnerable Software and Affected Versions ACDSee FotoSlate version 4.0 Build 146 Description The issue concerns multiple stack-based buffer overflows that allow remote attackers to execute arbitrary code. This is achieved by providing a long id parameter in either a String or Int tag...
CVE-2011-2595: Improper Restriction of Operations within the Bounds of a Memory Buffer
Multiple stack-based buffer overflows in ACDSee FotoSlate 4.0 Build 146 allow remote attackers to execute arbitrary code via a long id parameter in a 1 String or 2 Int tag in a FotoSlate Project aka PLP file...
CVE-2009-5091
SQL injection vulnerability in page.php in Vlinks 1.0.3 and 1.1.6 allows remote attackers to execute arbitrary SQL commands via the id parameter...
PT-2011-1339
Name of the Vulnerable Software and Affected Versions Bloggeruniverse Beta 2 Description The issue allows remote attackers to execute arbitrary SQL commands. This is possible via the id parameter in editcomments.php when magic quotes gpc is disabled. Recommendations For Bloggeruniverse Beta 2,...
PT-2011-1340
Name of the Vulnerable Software and Affected Versions Vlinks versions 1.0.3 through 1.1.6 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the id parameter in the page.php file. Recommendations For versions 1.0.3 through 1.1.6, consider...
CVE-2009-5091: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in page.php in Vlinks 1.0.3 and 1.1.6 allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2009-5090: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in editcomments.php in Bloggeruniverse Beta 2, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter and possibly other unspecified vectors...
WordPress Plugin Couponer 1.2 - SQL Injection
Exploit Title: WordPress Couponer plugin = 1.2 SQL Injection Vulnerability Date: 2011-08-31 Author: Miroslav Stampar miroslav.stamparatgmail.com @stamparm Software Link: http://downloads.wordpress.org/plugin/couponer.zip Version: 1.2 tested Note: magicquotes has to be turned off --- PoC ---...
Comfortsuite SQL Injection
|=----=----=----=----=----=--------=| | | | /\ /\ \ /\ /\ \ | | //\ /\ \ \L\ \ \ \ \ Turki$ hackers | | \ \ \ \ \ '\ \ \ | | \ \ \ \ \ \L\ \ \ \ \ \ | | \ \ \ / \ \ \ | | // // //// | | | | | |=----=----=----=----=----=--------=|...
Joomla Soft SQL Injection
Application Name : Joomla comsoft Type : SQL Injection author : Sktevahshat Google Dork : index.php?option=comsoft E-mail: [email protected] http://www.sthst.com/index.php?option=comsoft&cid=3 heloo new bug in joomla -------------------------------------------------- ", "+", "%"; $id =...
Sql injection
SQL injection vulnerability in index.php in DBSite 1.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter...
CVE-2010-4809
SQL injection vulnerability in index.php in DBSite 1.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter...
CVE-2010-4809
SQL injection vulnerability in index.php in DBSite 1.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter...
CVE-2010-4809: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in index.php in DBSite 1.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter...
PT-2011-1755
Name of the Vulnerable Software and Affected Versions DBSite version 1.0 Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands. This is achieved by manipulating the ID parameter in the index.php file. Recommendations For DBSite version 1.0, avoid using the ID...
eTAWASOL SQL Injection
+Title : eTAWASOL Sql Injection vulnerability +Vender : http://www.etawasol.com/ +Auther : Bl4ck.Viper Turkish Hacker +Email : [email protected] +Date : 03/07/2011 +Home : www.skote-vahshat.com +MyArchive : www.xpl.skote-vahshat.com Err0r 0n : back.asp Exploit :...
Leading Edge Technology Solutions SQL Injection
========================================================================= Leading Edge Technology Solutions L.E.T.S SQL-i Vulnerability ========================================================================== +=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+= +=+=+=...