Netartmedia iBoutique.MALL - SQL Injection

Netartmedia iBoutique.MALL - SQL Injection Name : Netartmedia iBoutique.MALL SQLi Vulnerability Date : june, 28 2010 Critical Level : HIGH Vendor Url : http://www.netartmedia.net/mall/ Author : Sid3^effects aKa HaRi special thanks to : r0073r inj3ct0r.com,L0rd...

VU Case Manager Authentication Bypass

Exploit for asp platform in category web applications ===================================== VU Case Manager Authentication Bypass ===================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /...

VU Case Manager - Authentication Bypass

VU Case Manager - Authentication Bypass 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site :...

PGAUTOPro - SQL Injection / Cross-Site Scripting (1)

======================================= PGAUTOPro SQLi and XSS Vulnerability ======================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database...

PGAUTOPro XSS / SQL Injection Vulnerability

Exploit for php platform in category web applications =========================================== PGAUTOPro XSS / SQL Injection Vulnerability =========================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\...

PGAUTOPro - SQL Injection Cross-Site Scripting (1)

PGAUTOPro - SQL Injection Cross-Site Scripting 1 ======================================= PGAUTOPro SQLi and XSS Vulnerability ======================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 ...

OCS Inventory NG < 1.02.3 Multiple SQLi Vulnerabilities

OCS Inventory NG is prone to multiple SQL injection SQLi vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

OCS Inventory NG Multiple SQL Injection Vulnerabilities

This host is running OCS Inventory NG and is prone to multiple SQL injection vulnerabilities. OpenVAS Vulnerability Test $Id: secpodocsinventoryngmultsqlinjvulnmay10.nasl 5394 2017-02-22 09:22:42Z teissa $ OCS Inventory NG Multiple SQL Injection Vulnerabilities Authors: Madhuri D Copyright:...

OCS Inventory Detection (HTTP)

HTTP based detection of OCS Inventory. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.902058";...

Open-AudIT - Multiple Vulnerabilities

GVI-2010-02 : Multiple vulnerabilities in Open-AudIT ==================================================== 1 Overview ---------- Excerpt from http://www.open-audit.org : "Open-AudIT is an application to tell you exactly what is on your network, how it is configured and when it changes. Open-AudIT...

OCS Inventory NG Server 1.3.1 Authentication Bypass

OCS Inventory NG function $id return document.getElementByIdid; function $$id return $id.options$id.options.selectedIndex.value; function bypass $'log'.action = $'ocsreports'.value + $$'meth' + '?lang=' + $$'lang'; if $$'type' == 0 $'login'.value = "' UNION SELECT id, accesslvl, '' FROM operators...

CVE-2010-1733

Multiple SQL injection vulnerabilities in OCS Inventory NG before 1.02.3 allow remote attackers to execute arbitrary SQL commands via 1 multiple inventory fields to the search form, reachable through index.php; or 2 the "Software name" field to the "All softwares" search form, reachable through...

DEBIAN-CVE-2010-1733

Multiple SQL injection vulnerabilities in OCS Inventory NG before 1.02.3 allow remote attackers to execute arbitrary SQL commands via 1 multiple inventory fields to the search form, reachable through index.php; or 2 the "Software name" field to the "All softwares" search form, reachable through...

CVE-2010-1733

Multiple SQL injection vulnerabilities in OCS Inventory NG before 1.02.3 allow remote attackers to execute arbitrary SQL commands via 1 multiple inventory fields to the search form, reachable through index.php; or 2 the "Software name" field to the "All softwares" search form, reachable through...

Sql injection

Multiple SQL injection vulnerabilities in OCS Inventory NG before 1.02.3 allow remote attackers to execute arbitrary SQL commands via 1 multiple inventory fields to the search form, reachable through index.php; or 2 the "Software name" field to the "All softwares" search form, reachable through...

CVE-2010-1733

Multiple SQL injection vulnerabilities in OCS Inventory NG before 1.02.3 allow remote attackers to execute arbitrary SQL commands via 1 multiple inventory fields to the search form, reachable through index.php; or 2 the "Software name" field to the "All softwares" search form, reachable through...

OCS Inventory NG Server <= 1.3.1 (login) Remote Authentication Bypass

Exploit for php platform in category web applications ===================================================================== OCS Inventory NG Server OCS Inventory NG function $id return document.getElementByIdid; function $$id return $id.options$id.options.selectedIndex.value; function bypass...

OCS Inventory NG Server 1.3.1 - 'LOGIN' Remote Authentication Bypass

OCS Inventory NG = 1.3.1 login Remote Authentication Bypass function $id return document.getElementByIdid; function $$id return $id.options$id.options.selectedIndex.value; function bypass $'log'.action = $'ocsreports'.value + $$'meth' + '?lang=' + $$'lang'; if $$'type' == 0 $'login'.value = "'...

OCS Inventory NG Server 1.3.1 - LOGIN Remote Authentication Bypass

OCS Inventory NG Server 1.3.1 - LOGIN Remote Authentication Bypass OCS Inventory NG = 1.3.1 login Remote Authentication Bypass function $id return document.getElementByIdid; function $$id return $id.options$id.options.selectedIndex.value; function bypass $'log'.action = $'ocsreports'.value +...

CVE-2010-1733

Multiple SQL injection vulnerabilities in OCS Inventory NG before 1.02.3 allow remote attackers to execute arbitrary SQL commands via 1 multiple inventory fields to the search form, reachable through index.php; or 2 the "Software name" field to the "All softwares" search form, reachable through...