396 matches found
Public Media Manager SQLi vulns
Exploit for unknown platform in category web applications =============================== Public Media Manager SQLi vulns ================================ Product name: Public Media Manager This product, an online NEWS CMS, suffers from SQL injection in login so that we can bypass the login syste...
BlogWorx Blog Cross Site Scripting
BlogWorx Blog Xss Vulnerability Author : Cyber945 Home : Ar-ge.Org Greetz : D3xer and All Ar-ge.Org Members Not3 : Ar-ge.Org Online Name : BlogWorx Blog Xss Bug Type : Xss Infection : Adminin bilgileri alinabilir. Dork : "© 2008 DevWorx - devworx.somee.com"...
Apple iPhone Apple iPod Touch 2.0 - Multiple Remote Vulnerabilities
Apple iPhone Apple iPod Touch 2.0 - Multiple Remote Vulnerabilities source: https://www.securityfocus.com/bid/30186/info Apple iPhone and iPod touch are prone to multiple remote vulnerabilities: 1. A vulnerability that may allow users to spoof websites. 2. An information-disclosure vulnerability...
easynetforum-sql.txt
--==+================================================================================+==-- --==+ Easynet Forum Host SQL Injection Vulnerbilitys +==-- --==+================================================================================+==-- Discovered By: t0pP8uZz & xprog Discovered On: 5 April...
Easynet Forum Host - forum.php SQL Injection
Easynet Forum Host - forum.php SQL Injection --==+================================================================================+==-- --==+ Easynet Forum Host SQL Injection Vulnerbilitys +==-- --==+================================================================================+==-- Discovered...
CVE-2008-1111
modcgi in lighttpd 1.4.18 sends the source code of CGI scripts instead of a 500 error when a fork failure occurs, which might allow remote attackers to obtain sensitive information...
eazyportal-sql.txt
!/usr/bin/perl Vendor url: http://www.eazyportal.com/ by Iron - http://www.randombase.com exploit goes through $COOKIE use LWP::UserAgent; use MIME::Base64; print " EazyPortal ; if$target ! /^http:/// $target = "http://".$target; if$target ! //$/ $target .= "/"; print "User id to retrieve...
OpenBiblio 0.x - 'theme_preview.php?themeName' Cross-Site Scripting
source: https://www.securityfocus.com/bid/27053/info OpenBiblio is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied data. The issues include SQL-injection, cross-site scripting, HTML-injection, and local file-include vulnerabilities...
KwsPHP 1.0 Member_Space Module - SQL Injection
!/usr/bin/perl use LWP::UserAgent; use HTTP::Cookies; $host = $ARGV0; $User = $ARGV1; $passwd = $ARGV2; $url = "http://".$host; $port = "80"; print q Script....................: KwsPHP v1.0 MemberSpace Module Script Site...............: http://kws.koogar.org/ Vulnerability.............: Remote SQ...
Wordpress Multiple Versions Pwnpress Exploitation Tookit
No description provided by source. !/usr/bin/env ruby .---. .---. : : o : happy antiblogging, dear kids! ..-: 0 : :-.. / .-'' ' ---' ---' " -. Copyright c Lance M. Havok .' " ' " . " . ' " . lmh at info-pull.com : '.---.,,.,...,.,.,.,..---. ' ; . " . .' " .' ----- All rights reserved.  ...
phpnukesearch-xss.txt
PHP-Nuke ALL versions Search Module multiple XSS and HTML injection ------------------------------------------------------------------- The well-known PHP-Nuke CMS is vulnerable to multiple XSS attacks and HTML injections through the Search Module. The request is made using POST, but the whole...
RevokeBB <= 1.0 RC4 Blind SQL Injection / Hash Retrieve Exploit
No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo " ------------------------------------------------------------- RevokeBB = 1.0 RC4 Blind SQL Injection / Hash Retrieve Exploit Site: http://www.revokesoft.net by BlackHawk [email protected]...
CVE-2007-1116
The CheckLoadURI function in Mozilla Firefox 1.8 lists the about: URI as a ChromeProtocol and can be loaded via JavaScript, which allows remote attackers to obtain sensitive information by querying the browser's session history...
Vizayn Haber (haberdetay.asp id variable) SQL Injection Vulnerability
Exploit for unknown platform in category web applications ===================================================================== Vizayn Haber haberdetay.asp id variable SQL Injection Vulnerability ===================================================================== Vizayn Haber tr == tr SQL...
CVE-2006-5681
QuickTime for Java on Mac OS X 10.4 through 10.4.8, when used with Quartz Composer, allows remote attackers to obtain sensitive information screen images via a Java applet that accesses images that are being rendered by other embedded QuickTime objects...
NX5Linkx 1.0 - Multiple SQL Injections
NX5Linkx 1.0 - Multiple SQL Injections source: https://www.securityfocus.com/bid/20010/info NX5Linkx is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. An attacker may be able to exploit these...
Comersus Backoffice 4.x/5.0/6.0 - '/comersus/database/comersus.mdb' Direct Request Database Disclosure
source: https://www.securityfocus.com/bid/15251/info Comersus BackOfficePlus and BackOfficeLite are prone to multiple input validation and information disclosure vulnerabilities. The applications are prone to SQL injection attacks, information disclosure and multiple cross-site scripting attacks...
Land Down Under 800/801 - 'forums.php' Multiple SQL Injections
source: https://www.securityfocus.com/bid/14618/info Land Down Under is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in SQL queries. Successful exploitation may allow the attacker to compromise the...
Land Down Under 800/801 - 'links.php?w' SQL Injection
source: https://www.securityfocus.com/bid/14618/info Land Down Under is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in SQL queries. Successful exploitation may allow the attacker to compromise the...
Land Down Under 800801 - list.php Multiple SQL Injections
Land Down Under 800801 - list.php Multiple SQL Injections source: https://www.securityfocus.com/bid/14618/info Land Down Under is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in SQL queries. Successful...