Jamit Job Board v.3.0 Cross Scripting Vulnerabilities

Exploit for unknown platform in category web applications ===================================================== Jamit Job Board v.3.0 Cross Scripting Vulnerabilities ===================================================== Jamit Job Board v.3.0 Cross Scripting Vulnerabilities + Exploit Title: Jamit...

phpMySite - Cross-Site Scripting / SQL Injection

================================================================= phpMySite XSS/SQLi Multiple Remote Vulnerabilities ================================================================= Author: Crux Homepage: http://hack-tech.com Date: 2-27-2010 Software Link: http://www.phpmysite.com/ Version: N/A...

Joomla JoomlaConnect_be SQL Injection

!/usr/bin/php » Greetz to: Spécial His0k4 Tous les hackers Algérie » Dork: inurl:index.php?option=comjoomlaconnectbe Joomla comjoomlaconnectbe id Blind SQL Injection Exploit x Usage: joomla.php "http://url/index.php?option=comjoomlaconnectbe&Itemid=53&task=showBizPage&id=3 '; if $argc 1 $url =...

LiveChatNow SQL Injection

Title: SQL injection vulnerability in LiveChatNow Date: 20.02.2010 Author: Ariko-Security Software Link: http://www.livechatnow.com/ Version: ALL Tested on: freebsd / ubuntu ============ Ariko-Security - Advisory 4/2/2010 ============= SQL injection vulnerability in LiveChatNow Vendor's Descripti...

JavaPont Local File Inclusion

JavaPont SQL Injection LFI Vulnerability Author : Palyo34 Homepage : http://www.1923turk.com Vulnerable File index.php?module=search&q= XpL XpL ../../../../../../../../../../../../../../../etc/passwd%00 Demo...

GameScript 3.0 - SQL Injection

Author : FormatXformat Home : Tkurd.net Script : http://www.gamescript.net Vulnerabilities : SQL Injection Dork: Copyright © 2005 - 2006 GameScript.net. All Games Copyright © To Their Respective Owners. All Rights Reserved. Exploit:...

Sql injection

SQL injection vulnerability in index.php in CommodityRentals Video Games Rentals allows remote attackers to execute arbitrary SQL commands via the pfid parameter in a catalog action...

Directory traversal

Directory traversal vulnerability in index.php in ZeusCMS 0.2 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the page parameter...

Sql injection

SQL injection vulnerability in index.php in Katalog Stron Hurricane 1.3.5, and possibly earlier, allows remote attackers to execute arbitrary SQL commands via the get parameter...

CVE-2010-0677

CVE-2010-0677 affects the PHP-based system component “index.php” in the Katalog Stron Hurricane version 1.3.5 (and possibly earlier). The vulnerability is a SQL injection that allows remote attackers to execute arbitrary SQL commands through the HTTP GET parameter, enabling potential data disclos...

CVE-2010-0672

SQL injection vulnerability in index.php in WSN Guest 1.02 allows remote attackers to execute arbitrary SQL commands via the orderlinks parameter...

CVE-2010-0675

CVE-2010-0675 affects BGSvetionik BGS CMS 2.2.1. The vulnerability is a Cross-site Scripting (XSS) in index.php that allows remote attackers to inject arbitrary web script or HTML via the search parameter in a search action. Root cause is insufficient sanitization/validation of the search paramet...

CVE-2010-0672

Affected software: WSN Guest 1.02. The entry CVE-2010-0672 describes an SQL injection in index.php where the orderlinks parameter allows remote attackers to execute arbitrary SQL commands. The vulnerability is caused by unsafely handling user-supplied input in a web application component, enablin...

CVE-2010-0671

Summary of CVE-2010-0671 (normal mode): The vulnerability affects the KR MEDIA Pogodny CMS, specifically in the index.php handling of the niusy action. The root cause is improper handling of the id parameter, leading to an SQL injection that allows remote attackers to execute arbitrary SQL comman...

CubeCart (index.php) SQL Injection Vulnerability

No description provided by source. CubeCart index.php Sql Injection Vulnerability ============================================================== .:. Author : AtT4CKxT3rR0r1ST [email protected] .:. Team : Sec Attack Team .:. Home : www.sec-attack.com/vb .:. Script : http://www.cubecart.com/downloads/ .:...

CubeCart - index.php SQL Injection

CubeCart - index.php SQL Injection CubeCart index.php Sql Injection Vulnerability ============================================================== .:. Author : AtT4CKxT3rR0r1ST [email protected] .:. Team : Sec Attack Team .:. Home : www.sec-attack.com/vb .:. Script : http://www.cubecart.com/downloads/ .:...

CubeCart - 'index.php' SQL Injection

CubeCart index.php Sql Injection Vulnerability ============================================================== .:. Author : AtT4CKxT3rR0r1ST [email protected] .:. Team : Sec Attack Team .:. Home : www.sec-attack.com/vb .:. Script : http://www.cubecart.com/downloads/ .:. Dork : "powered by CubeCart"...

Mambo Component com_acnews [id] SQL Injection Vulnerability

No description provided by source. Author: Zero Bits & Xzit3 Team: Ro0T-MaFia Member's: Zero Bits, CMD, Jeferx, Xzit3, XP3RM4 & Jeferx Date: 15/02/2010 Contact: [email protected] - [email protected] Country: Venezuela - Mexico Vulnerability's: + SQL Injection: Error: You have an error...

Joomla com_flashmagazinedeluxe Remote Blind Sql Injection Vulnerability

Exploit for unknown platform in category web applications ======================================================================= Joomla comflashmagazinedeluxe Remote Blind Sql Injection Vulnerability ======================================================================= !/usr/bin/php 1 $url =...

Mambo Component 'com_acnews' - 'id' SQL Injection

Mambo Component comacnews id | SQL Injection Author: Zero Bits & Xzit3 Team: Ro0T-MaFia Member's: Zero Bits, CMD, Jeferx, Xzit3, XP3RM4 & Jeferx Date: 15/02/2010 Contact: [email protected] - [email protected] Country: Venezuela - Mexico Vulnerability's: + SQL Injection: Error: You hav...