CVE-2009-5016

Integer overflow in the xmlutf8decode function in ext/xml/xml.c in PHP before 5.2.11 makes it easier for remote attackers to bypass cross-site scripting XSS and SQL injection protection mechanisms via a crafted string that uses overlong UTF-8 encoding, a different vulnerability than CVE-2010-3870...

Neo CMS SQL Injection vulnerability

---------------------------------------------------------------------- PT-2009-36 Positive Technologies Security Advisory Neo CMS SQL Injection vulnerability ---------------------------------------------------------------------- --- Affected Software Neo CMS Versions up to 1.777 Product Link:...

Danneo CMS 0.5.2 SQL Injection

======================================== Danneo CMS Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 0 -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-1 + Discovered By : Inj3ct0r + Site : Inj3ct0r.com + support e-mail : submitatinj3ct0r.com...

4Images 1.7.7 - Filter Bypass HTML Injection Cross-Site Scripting

4Images 1.7.7 - Filter Bypass HTML Injection Cross-Site Scripting || || | || o,7 || . o7 || q||| o\, : / / . =By: Qabandi =Email: iqaahotmail.fr From Kuwait, PEACE... =Vuln: 4images = 1.7.7 - filter bypass HTML injection/XSS =INFO: =BUY: =DORK: -=/:Conditions:=-...

DigiAffiliate <= 1.4 (Auth Bypass) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================== DigiAffiliate = 1.4 Auth Bypass SQL Injection Vulnerability ============================================================== - DigiAffiliate = V1.4 Auth bypass SQL Injection...

DigiAffiliate 1.4 - Authentication Bypass

DigiAffiliate = V1.4 Auth bypass SQL Injection Vulnerability - Discovered By : d3b4gd - Greetz : All my freind Use these information to bypass adminlogin admin : ' or ' 1=1 password: ' or ' 1=1 Live demo : http://www.digiappz.com/digiaffiliate2/login.asp...

security flaw

PostgreSQL 8.1.x before 8.1.4, 8.0.x before 8.0.8, 7.4.x before 7.4.13, 7.3.x before 7.3.15, and earlier versions allows context-dependent attackers to bypass SQL injection protection methods in applications via invalid encodings of multibyte characters, aka one variant of "Encoding-Based SQL...

CVE-2006-0908

PHP-Nuke 7.8 Patched 3.2 allows remote attackers to bypass SQL injection protection mechanisms via /%2a / sequences with the "adclick" word in the query string, as demonstrated via the kala parameter...

CVE-2006-0908

PHP-Nuke 7.8 Patched 3.2 allows remote attackers to bypass SQL injection protection mechanisms via /%2a / sequences with the "adclick" word in the query string, as demonstrated via the kala parameter...

Ubuntu 5.04 : mozilla-firefox vulnerabilities (USN-134-1)

It was discovered that a malicious website could inject arbitrary scripts into a target site by loading it into a frame and navigating back to a previous JavaScript URL that contained an eval call. This could be used to steal cookies or other confidential data from the target site. If the target...