BlueSoft Rate My Photo Site SQL Injection

Script Name : BlueSoft Rate My Photo Site Vulnerable Type : Blind SQL Ýnjection Time Based Author : darkTR Date : 08.08.2011 E-mail : [email protected] Target: : index.php?cmd=SQLi Demo: : http://shopbluesoft.com/demo7/index.php?cmd=10&ty=2SQLi darkTR / Code Hunters TIM...

System Werkform 2.0 SQL Injection

|Title : System werkform index.php SQL Injection Vulnerability | Software : werkform | Version : 2.0 | Date : 3 / 08 / 2011 | Author : Net.Edit0r | Contact : [email protected] & [email protected] | Google Dork : "powered by werkform" | Vendor : http://www.werkform.at/ | My Home :...

PT-2011-4177

Name of the Vulnerable Software and Affected Versions Joomla! versions 1.6.x through 1.6.1 Description The issue allows remote attackers to obtain sensitive information via an empty Itemid array parameter to "index.php", which reveals the installation path in an error message. Recommendations For...

SmartCMS (index.php) Blind Sql Injection Vulnerability

Exploit for php platform in category web applications Exploit Title:SmartCMSindex.phpBlind Sql Injection Vulnerability Author: Angel Injection home Page: http://www.club-h.co.cc Email: Angel-InjectionathotmailDotcom Vendor or Software Link:www.smartwebsites.com.cy Version: N/A Category:: webapps...

Musicbox SQL Injection and Cross Site Scripting Vulnerabilities

Musicbox is prone to SQL injection and cross site scripting vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2011-2710: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Joomla! before 1.7.0 allow remote attackers to inject arbitrary web script or HTML via 1 the URI to includes/application.php, reachable through index.php; and, when Internet Explorer or Konqueror is used, 2 allow remote attackers to inject...

CVE-2011-2891: Exposure of Sensitive Information to an Unauthorized Actor

Joomla! 1.6.x before 1.6.2 allows remote attackers to obtain sensitive information via an empty Itemid array parameter to index.php, which reveals the installation path in an error message, a different vulnerability than CVE-2011-2488...

Argeweb SQL Injection

x Exploit Title: Argeweb SQL Ýnjection Vulnerability Deze Weblog Themes x Date: 24/07/2011 x Author: 3spi0n x HomePage: Http://Www.3spi0n.NET | Http://Twitter.Com/RigidusCO | CrypTR.ORG x E-Mail: 3spi0natgmaildotcom x Software Link: http://www.argeweb.nl/ x Category: WebApps x Google Dork: "Deze...

Joomla com_yvhotels SQLi Vulnerability

Joomla yvhotels component is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Tempus Media 1.0.0 Cross Site Scripting

Exploit Title: TempusMedia index.php Cross-site scripting Vulnerability Date: 2011-07-08 Author: Net.Edit0r Software Link: http://www.tempusmedia.com/ Version : 1.0.0 Tested on: ubuntu 11.04 CVE : - -----------------------------------------------------------------------------------------...

Sql injection

SQL injection vulnerability in index.php in Webmatic allows remote attackers to execute arbitrary SQL commands via the p parameter...

Sql injection

SQL injection vulnerability in index.php in DBSite 1.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter...

CVE-2010-4808

SQL injection vulnerability in index.php in Webmatic allows remote attackers to execute arbitrary SQL commands via the p parameter...

CVE-2010-4808

The provided documents confirm a SQL injection vulnerability in Webmatic’s index.php exploitable via the p parameter, enabling remote execution of arbitrary SQL commands. Affected software/component: Webmatic (index.php). Root cause: improper handling of the p parameter leading to SQL injection. ...

CVE-2010-4809

CVE-2010-4809 concerns a SQL injection in DBSite 1.0, specifically in index.php where the ID parameter can be manipulated to execute arbitrary SQL commands. The vulnerability is evidenced across multiple sources (NVD, CVE lists) and indicates remote exploitation potential with no authentication r...

CVE-2010-4809: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in DBSite 1.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter...

PT-2011-1754

Name of the Vulnerable Software and Affected Versions Webmatic affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the p parameter in the "index.php" endpoint. Recommendations At the moment, there is no information...

PT-2011-1755

Name of the Vulnerable Software and Affected Versions DBSite version 1.0 Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands. This is achieved by manipulating the ID parameter in the index.php file. Recommendations For DBSite version 1.0, avoid using the ID...

HUGE-inc Portal SQL Injection

+Title : HUGE Sql Injection vulnerability +Vender : http://www.hugeinc.com +Auther : Bl4ck.Viper Turkish Hacker +Email : [email protected] +Date : 05/07/2011 +Home : www.skote-vahshat.com +MyArchive : www.xpl.skote-vahshat.com Err0r 0n : index.php Exploit : http://target.com/index.php?ID=SQL...

CVE-2010-4808: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in Webmatic allows remote attackers to execute arbitrary SQL commands via the p parameter...