ASPMForum - 'forum.asp?baslik' SQL Injection

source: https://www.securityfocus.com/bid/15767/info ASPMForum is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a compromise of...

Web4Future eDating Professional 5.0 - 'index.php' Multiple SQL Injections

source: https://www.securityfocus.com/bid/15715/info eDating Professional is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a...

Edgewall Software Trac 0.7.1/0.8/0.9 Search Module - SQL Injection

source: https://www.securityfocus.com/bid/15720/info Trac is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could allow an attacker to compromise the...

Web4Future Portal Solutions - 'Comentarii.php' SQL Injection

source: https://www.securityfocus.com/bid/15716/info Portal Solutions is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a compromise of the...

Hobosworld HobSR - Multiple SQL Injections

source: https://www.securityfocus.com/bid/15713/info Hobosworld HobSR is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a...

CVE-2004-2637

The vulnerability CVE-2004-2637 affects the Zonet ZSR1104WE Wireless Router Runtime Code Version 2.41. The NAT implementation converts inbound IP addresses to the router’s IP, allowing remote attackers to bypass intended security restrictions. This is the concrete technical detail documented: the...

DotClear 1.2.11.2.2 - Session.php SQL Injection

DotClear 1.2.11.2.2 - Session.php SQL Injection source: https://www.securityfocus.com/bid/15667/info DotClear is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful...

O-Kiraku Nikki 1.3 - Nikki.php SQL Injection

O-Kiraku Nikki 1.3 - Nikki.php SQL Injection source: https://www.securityfocus.com/bid/15657/info O-Kiraku Nikki is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful...

PHPX 3.5.x - 'Admin 'login.php' SQL Injection

source: https://www.securityfocus.com/bid/15680/info PHPX is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a compromise of the application...

SocketKB 1.1 - index.php SQL Injection

SocketKB 1.1 - index.php SQL Injection source: https://www.securityfocus.com/bid/15650/info SocketKB is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation coul...

Orca KnowledgeBase 2.1 - KnowledgeBase.php SQL Injection

Orca KnowledgeBase 2.1 - KnowledgeBase.php SQL Injection source: https://www.securityfocus.com/bid/15637/info Orca Knowledgebase is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query...

GhostScripter Amazon Shop 5.0 - search.php SQL Injection

GhostScripter Amazon Shop 5.0 - search.php SQL Injection source: https://www.securityfocus.com/bid/15634/info GhostScripter Amazon Shop is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful...

Simple Document Management System 2.0 - list.php?folder_id SQL Injection

Simple Document Management System 2.0 - list.php?folderid SQL Injection source: https://www.securityfocus.com/bid/15596/info Simple Document Management System SDMS is prone to SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied...

Zainu 2.0 - SQL Injection

source: https://www.securityfocus.com/bid/15579/info Zainu is prone to SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a compromise of the...

ShockBoard 3.0/4.0 - 'Offset' SQL Injection

source: https://www.securityfocus.com/bid/15592/info ShockBoard is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a compromise of the...

PHP Labs Survey Wizard - SQL Injection

PHP Labs Survey Wizard - SQL Injection source: https://www.securityfocus.com/bid/15551/info PHP Labs Survey Wizard is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful...

PHP-Fusion 4.05.06.0 - options.php? viewforum.php SQL Injection

PHP-Fusion 4.05.06.0 - options.php? viewforum.php SQL Injection source: https://www.securityfocus.com/bid/15502/info PHP-Fusion is prone to SQL injection vulnerabilities in multiple PHP scripts. These issues are due to a failure in the application to properly sanitize user-supplied input before...

CVE-2005-3673

CVE-2005-3673 relates to an IKEv1 DoS in Check Point products via crafted IKEv1 packets. Connected sources show a broader set of IKEv1 issues (CVE-2005-3666/3667/3668) with remote denial-of-service effects in multiple implementations (notably ipsec-tools’ racoon). The Proton/PROTOS test suite is ...

CVE-2005-3668

CVE-2005-3668 is described as multiple buffer overflows in IKEv1 implementations with several attacker vectors that can lead to a denial of service. Connected sources tie this to ipsec-tools racoon (IPsec-tools) in Red Hat/CentOS advisories and Debian/Nessus findings, indicating a remote DoS via ...

Create Windows own ShellCode-exploit warning-the black bar safety net

In order to help beginners to understand the ShellCode to write, and can step by step get your own ShellCode, so the Windows ShellCode writing process for a detailed description, in order to facilitate as I like the rookie, the final to be able to write a simple but a real ShellCode; and further...