CVE-2010-0631: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in index.php in Eicra Car Rental-Script, when the pluginid parameter is 4, allow remote attackers to execute arbitrary SQL commands via the 1 users username and 2 passwords parameters...

BaSiC-CMS SQL Injection / Cross Site Scripting

+===================================================================================+ ./SEC-R1Z / / / / /\ \ |/ / \ \ / / / / | | / | | / / \ / / / / | || / | | / / \ \ \ \2010 | \ | | / / / \ /\ / ||\ \ ||/ \ R.I.P MichaelJackson !!!!!...

CVE-2010-0608

SQL injection vulnerability in index.php in NovaBoard 1.1.2 allows remote attackers to execute arbitrary SQL commands via the forums parameter in a search action...

CVE-2010-0608: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in NovaBoard 1.1.2 allows remote attackers to execute arbitrary SQL commands via the forums parameter in a search action...

Video Games Rentals Script SQL Injection Vulnerability

Exploit for unknown platform in category web applications ====================================================== Video Games Rentals Script SQL Injection Vulnerability ====================================================== Exploit Title: video games rentals Script SQL injection Vulnerability Date...

CVE-2010-0610: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in the Photoblog comphotoblog component for Joomla! allow remote attackers to execute arbitrary SQL commands via the blog parameter in an images action to index.php. NOTE: a separate vector for the id parameter to detail.php may also exist...

eSmile Script - index.php SQL Injection

eSmile Script - index.php SQL Injection eSmile index.php Sql Injection Vulnerability ============================================================== .:. Author : AtT4CKxT3rR0r1ST [email protected] .:. Team : Sec Attack Team .:. Home : www.sec-attack.com/vb .:. Script : eSmile .:. Bug Type : Sql...

JaxCMS 1.0 - Local File Inclusion

JaxCMS 1.0 - Local File Inclusion / Name : JaxCMS p Local File Include WebSite : http://www.pixiescripts.com/ Author : Hamza 'MizoZ' N. Email : [email protected] Greetz : Zuka ! / The vulnerability is in the get $GET'p' , the index.php include '/pages/'.$GET'p'.'.php' So we can read any file in th...

Belkatalog CMS SQL Injection Vulnerability

No description provided by source. Title:Belkatalog CMS--- sql injection vulnerability Author:Teo Manojlovic Belkatalog CMS is comercial cms developed by croatian developer J. K. "Gašo" and it is vulnerable to sql injection vulnerability http://site.com/cms/index.php?id=m&lnk='sql injection here...

IPB (nv2) Awards 1.1.0 - SQL Injection

IPB nv2 Awards 1.1.0 - SQL Injection + + Author: fred777 - fred777.de + Link: http://forums.invisionize.com/nv2-Awards-120-t137847.html + Vuln: index.php?autocom=awards&do=view&id=1 + Greetzz to: Back2hack.cc + Contact: [email protected] + -- Vuln Code -- $this-ipsclass-DB-buildquery...

Sql injection

SQL injection vulnerability in the indianpulse Game Server comgameserver component 1.2 for Joomla! allows remote attackers to execute arbitrary SQL commands via the grp parameter in a gameserver action to index.php...

Sql injection

Multiple SQL injection vulnerabilities in NetArt Media Blog System 1.5 allow remote attackers to execute arbitrary SQL commands via the 1 cat parameter to index.php and the 2 note parameter to blog.php...

Novaboard 1.1.2 - SQL Injection

Novaboard 1.1.2 - SQL Injection NovaBoard v1.1.2 SQL Injection Vulnerability Plugin Home: http://www.novaboard.net/ Author: Delibey Site: www.1923turk.com Download Script : http://novaboard.googlecode.com/files/NovaBoard1.1.2.zip Exploit:...

CVE-2010-0461: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the casino comcasino component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a 1 category or 2 player action to index.php...

CVE-2010-0459: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Mochigames commochigames component 0.51 and possibly other versions for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php...

Novaboard 1.1.2 - SQL Injection

NovaBoard v1.1.2 SQL Injection Vulnerability Plugin Home: http://www.novaboard.net/ Author: Delibey Site: www.1923turk.com Download Script : http://novaboard.googlecode.com/files/NovaBoard1.1.2.zip Exploit: index.php?page=search&topic=1&pf=1&search=xek&authorid=1&forums1923Turk=SQL-inj...

CVE-2010-0456: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the indianpulse Game Server comgameserver component 1.2 for Joomla! allows remote attackers to execute arbitrary SQL commands via the grp parameter in a gameserver action to index.php...

CVE-2010-0458: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in NetArt Media Blog System 1.5 allow remote attackers to execute arbitrary SQL commands via the 1 cat parameter to index.php and the 2 note parameter to blog.php...

CVE-2010-0460: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in staff/index.php in Kayako SupportSuite 3.60.04 and earlier allow remote authenticated users to inject arbitrary web script or HTML via the 1 subject parameter and 2 contents parameter aka body in an insertquestion action. NOTE: some of these...

CVE-2010-0390: Undefined Security Weakness

Unrestricted file upload vulnerability in maxImageUpload/index.php in PHP F1 Max's Image Uploader 1.0, when Apache is not configured to handle the mime-type for files with pjpeg or jpeg extensions, allows remote attackers to execute arbitrary code by uploading a file with a pjpeg or jpeg extensio...