My Gaming Ladder <= 7.5 (ladderid) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================== My Gaming Ladder = 7.5 ladderid SQL Injection Vulnerability ==============================================================...

My Gaming Ladder 7.5 - 'ladderid' SQL Injection

--==+================================================================================+==-- --==+ My Gaming Ladder 7.5 AND Prior SQL Injection Vulnerbilitys +==-- --==+================================================================================+==-- AUTHOR: t0pP8uZz SITE: www.mygamingladder.co...

My Gaming Ladder 7.5 - ladderid SQL Injection

My Gaming Ladder 7.5 - ladderid SQL Injection --==+================================================================================+==-- --==+ My Gaming Ladder 7.5 AND Prior SQL Injection Vulnerbilitys +==-- --==+================================================================================+==-...

CVE-2008-1014

Apple QuickTime before 7.4.5 is affected by CVE-2008-1014 where specially crafted movies can trigger handling of external URLs, allowing remote attackers to obtain sensitive information. The vulnerability is tied to QuickTime’s processing of external URLs in movies, leading to information disclos...

DSECRG-08-022.txt

Digital Security Research Group DSecRG Advisory DSECRG-08-022 Application: BolinOS Versions Affected: 4.6.1 Vendor URL: http://www.bolinos.com Bugs: Local File Include,Multiple XSS, System information disclosure Exploits: YES Reported: 13.03.2008 Second report: 18.03.2008 Vendor response: none...

CVE-2008-1507

PEEL, possibly versions 3.x and earlier, contains default credentials: [email protected] with password admin and [email protected] with password cinema, which allows remote attackers to gain administrative access. This CVE (CVE-2008-1507) is documented with multiple sources (NVD, CVE List, PrIon, CVELIS...

e107 Plugin My_Gallery 2.3 - Arbitrary File Download

e107 Plugin MyGallery 2.3 - Arbitrary File Download e107 MyGallery Plugin Arbitrary File Download Vulnerability Release Date: 2008-03-25 Critical: Moderately critical Impact: Exposure of system information, Exposure of sensitive information Where: From remote Solution Status: Unpatched Software:...

Info-ZIP UnZip inflate_dynamic()函数堆破坏漏洞

BUGTRAQ ID: 28288 CVECAN ID: CVE-2008-0888 unzip是在Unix下对.zip文件格式进行解压的工具。 unzip的实现上存在漏洞，攻击者可能利用此漏洞通过诱使用户处理恶意文档提升权限。...

CVE-2008-1347

Multiple cross-site scripting XSS vulnerabilities in staticpages/easygallery/index.php in MyioSoft EasyGallery 5.0tr and earlier allow remote attackers to inject arbitrary web script or HTML via 1 the PATHINFO or 2 the q parameter in an about action to the help system...

Sun Java Web Console < 3.0.5 Remote File Enumeration

According to its version, the installation of Sun Java Web Console on the remote host may allow a local or remote unprivileged user to determine the existence of files or directories in access restricted directories, which could result in a loss of confidentiality. C Tenable Network Security, Inc...

koobipro-sql.txt

Koobi Pro 5.7 index.php categ Remote Sql İnj. Vuln + Cr@zyKing / [email protected] + Hack Bir Showdur. / Hackshow.us + Greatz : Eno7 & CrackersChild & Thehacker & TheBekir & Ghost61 & Tilkiandre & Edoras + Not : Alem Göt Olmuş O Götlerin Alayını Dünya Alem Siksin.Başta 2 Kişi onlar +...

Ubuntu 6.06 LTS / 6.10 / 7.04 / 7.10 : libcdio vulnerability (USN-580-1)

Devon Miller discovered that the iso-info and cd-info tools did not properly perform bounds checking. If a user were tricked into using these tools with a crafted iso image, an attacker could cause a denial of service core dump and possibly execute arbitrary code. Note that Tenable Network Securi...

Eagle Software Aeries Student Information System 3.7.2.23.8.2.8 - Comments.asp?FC SQL Injection

Eagle Software Aeries Student Information System 3.7.2.23.8.2.8 - Comments.asp?FC SQL Injection source: https://www.securityfocus.com/bid/27924/info Aeries Student Information System is prone to multiple input-validation vulnerabilities, including multiple SQL-injection issues and an HTML-injecti...

Eagle Software Aeries Student Information System 3.7.2.23.8.2.8 - Labels.asp?Term SQL Injection

Eagle Software Aeries Student Information System 3.7.2.23.8.2.8 - Labels.asp?Term SQL Injection source: https://www.securityfocus.com/bid/27924/info Aeries Student Information System is prone to multiple input-validation vulnerabilities, including multiple SQL-injection issues and an HTML-injecti...

Eagle Software Aeries Student Information System 3.7.2.23.8.2.8 - ClassList.asp?Term SQL Injection

Eagle Software Aeries Student Information System 3.7.2.23.8.2.8 - ClassList.asp?Term SQL Injection source: https://www.securityfocus.com/bid/27924/info Aeries Student Information System is prone to multiple input-validation vulnerabilities, including multiple SQL-injection issues and an...

USN-580-1: libcdio vulnerability

Devon Miller discovered that the iso-info and cd-info tools did not properly perform bounds checking. If a user were tricked into using these tools with a crafted iso image, an attacker could cause a denial of service core dump and possibly execute arbitrary code...

Unfixed XSS vulnerability at www.sha1.info

Security researcher Xbox2002, has submitted on 14/02/2008 a cross-site-scripting XSS vulnerability affecting www.sha1.info, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 31/03/2008. It is currently...

CVE-2008-0564

Multiple cross-site scripting XSS vulnerabilities in Mailman before 2.1.10b1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to 1 editing templates and 2 the list's "info attribute" in the web administrator interface, a different vulnerability than...

mailman -- script insertion vulnerability

Secunia reports: A vulnerability has been reported in Mailman, which can be exploited by malicious users to conduct script insertion attacks. Certain input when editing the list templates and the list info attribute is not properly sanitised before being stored. This can be exploited to insert...

Wordpress plugin fGallery 2.4.1 fimrss.php SQL Injection Vulnerability

Exploit for unknown platform in category web applications ====================================================================== Wordpress plugin fGallery 2.4.1 fimrss.php SQL Injection Vulnerability ======================================================================...