13686 matches found
PT-2011-1938
Name of the Vulnerable Software and Affected Versions com autartimonial version 1.0.8 Description The issue allows remote attackers to execute arbitrary SQL commands via the limit parameter in an autartimonial action to "index.php". This enables attackers to manipulate the database by injecting...
PT-2011-1907
Name of the Vulnerable Software and Affected Versions YPNinc JokeScript affected versions not specified Description A SQL injection issue exists, allowing remote attackers to execute arbitrary SQL commands. This is achieved by manipulating the ypncat id parameter in the index.php file...
PT-2011-1934
Name of the Vulnerable Software and Affected Versions esoftpro Online Photo Pro version 2.0 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the section parameter in the index.php file. Recommendations For esoftpro Online Photo Pro...
PT-2011-1910
Name of the Vulnerable Software and Affected Versions Joomla! component Techjoomla SocialAds For JomSocial com socialads affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands via the ads description field in a showad action to "index.php"...
CVE-2010-4993: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the eventcal comeventcal component 1.6.4 for Joomla! allows remote attackers to execute arbitrary SQL commands via the Itemid parameter to index.php...
PT-2011-1912
Name of the Vulnerable Software and Affected Versions Canteen com canteen component version 1.0 for Joomla! Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the mealid parameter in the API endpoint "index.php" to execute SQL injection...
Alsbtain Bulletin 1.5 / 1.6 Local File Inclusion
Title : Alsbtain Bulletin index.php Local File include Author : Null H4ck3r Product : Alsbtain Alsbtain Bulletin Vendor : http://www.alsbtain.net/ipb/ Date : 25/10/2011 Version : 1.5 , 1.6 Tested on : windows Dork : Powered By Alsbtain Bulletin 1.6 & Powered By Alsbtain Bulletin 1.5 Contact :...
Uiga Personal Portal - Multiple Vulnerabilities
Uiga Personal Portal - Multiple Vulnerabilities Exploit Title: Uiga Personal Portal Multiple Vulnerability Date: 2011 Author: Eyup CELIK Version: All Version Tested on: All versions are Vulnerability Web Site: www.eyupcelik.com.tr ISSUE Blind SQL Injection and XSS can be done using the command...
fims File Management System 1.2.1a - Multiple Vulnerabilities
fims File Management System 1.2.1a - Multiple Vulnerabilities Exploit Title: fims - File Management System execute"select from fimsuser where email='$email' and password=md5'$password'"; if $db-numrows$rs0 return true; else return false; Line 51 of index.php: if isset$REQUESTf...
Uiga Personal Portal Cross Site Scripting / Blind SQL Injection
Exploit Title: Uiga Personal Portal Multiple Vulnerability Date: 2011 Author: Eyup CELIK Version: All Version Tested on: All versions are Vulnerability Web Site: www.eyupcelik.com.tr ISSUE Blind SQL Injection and XSS can be done using the command input Vulnerable Page: index.php cart.php...
Uiga Personal Portal Multiple Vulnerabilities
Exploit for php platform in category web applications Exploit Title: Uiga Personal Portal Multiple Vulnerability Date: 2011 Author: Eyup CELIK Version: All Version Tested on: All versions are Vulnerability Web Site: www.eyupcelik.com.tr ISSUE Blind SQL Injection and XSS can be done using the...
Yet Another CMS 1.0 - SQL Injection / Cross-Site Scripting
Advisory: Yet Another CMS 1.0 SQL Injection & XSS vulnerabilities Advisory ID: SSCHADV2011-031 Author: Stefan Schurtz Affected Software: Successfully tested on Yet Another CMS 1.0 Vendor URL: http://yetanothercms.codeplex.com/ Vendor Status: informed ========================== Vulnerability...
Site@School 2.4.10 - index.php Cross-Site Scripting SQL Injection
Site@School 2.4.10 - index.php Cross-Site Scripting SQL Injection source: https://www.securityfocus.com/bid/50195/info Site@School is prone to multiple SQL-injection and cross-site scripting vulnerabilities. Exploiting these issues could allow an attacker to steal cookie-based authentication...
iSchoolSite SQL Injection
========================================================================== Exploit Title: iSchoolSite SQL Injection Vulnerability Date: 16.10.2011 Author: poach3r Software Link: http://www.ischoolsite.com/ Tested on: Windows XP SP3 Google Dork: "Powered by iSchoolSite" inurl:.php Price: $5000...
Multiple vulnerabilities in Efront
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Efront, which can be exploited to perform SQL injection and cross-site scripting attacks. 1 Cross-Site scripting XSS vulnerabilities in Efront 1.1 Input passed via the "course" GET parameter to index.php is not...
Sql injection
SQL injection vulnerability in the Teams comteams component 110281008091711 for Joomla! allows remote attackers to execute arbitrary SQL commands via the PlayerID parameter in a player save action to index.php...
Sql injection
SQL injection vulnerability in index.php in WAnewsletter 2.1.2 allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2010-4958
SQL injection vulnerability in index.php in Prado Portal 1.2.0 allows remote attackers to execute arbitrary SQL commands via the page parameter...
Sql injection
SQL injection vulnerability in the Joostina comezautos component for Joomla! allows remote attackers to execute arbitrary SQL commands via the firstCode parameter in a helpers action to index.php...