Unfixed XSS vulnerability at www.jogjahacking.org

Security researcher SPYRO KiD, has submitted on 05/06/2009 a cross-site-scripting XSS vulnerability affecting www.jogjahacking.org, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/12/2011. It is...

Unfixed XSS vulnerability at sms.unikom.ac.id

Security researcher SPYRO KiD, has submitted on 28/03/2009 a cross-site-scripting XSS vulnerability affecting sms.unikom.ac.id, which at the time of submission ranked 162692 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 27/05/2009. It is...

Unfixed XSS vulnerability at www.atk.ac.id

Security researcher SPYRO KiD, has submitted on 27/03/2009 a cross-site-scripting XSS vulnerability affecting www.atk.ac.id, which at the time of submission ranked 1165578 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 27/05/2009. It is...

PT-2009-1550 · Bahar · Bahar Download Script

Name of the Vulnerable Software and Affected Versions: Bahar Download Script version 2.0 Description: The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the kid parameter in the aspkat.asp file. Recommendations: For Bahar Download Script version 2.0, conside...

CVE-2008-6075: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in aspkat.asp in Bahar Download Script 2.0 allows remote attackers to execute arbitrary SQL commands via the kid parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

Sql injection

SQL injection vulnerability in kategori.asp in Pcshey Portal allows remote attackers to execute arbitrary SQL commands via the kid parameter...

CVE-2008-3495: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in kategori.asp in Pcshey Portal allows remote attackers to execute arbitrary SQL commands via the kid parameter...

CVE-2008-2448: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Meto Forum 1.1 allow remote attackers to execute arbitrary SQL commands via the 1 id parameter to a admin/duzenle.asp and b adminoku.asp; the 2 kid parameter to c kategori.asp and d adminkategori.asp; and unspecified parameters to e uye.asp and f oku.asp...

CVE-2008-1404: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in the Viso Industry Book 2.04 and 2.03 module for eXV2 allows remote attackers to execute arbitrary SQL commands via the kid parameter...

eXV2 Module Viso 2.0.4.3 - kid SQL Injection

eXV2 Module Viso 2.0.4.3 - kid SQL Injection Powered by eXV2 Viso 2.03 SQL Injection AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 MAÄ°L : [email protected] DORKS 1 : allinurl :"modules/viso" EXPLOIT 1 :...

PT-2008-2812 · Kutubisitte · Kutub-I Sitte

Name of the Vulnerable Software and Affected Versions: Kutub-i Sitte KutubiSitte version 1.1 Description: The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the kid parameter in a hadisgoster action to modules.php. Recommendations: For Kutub-i Sitt...

CVE-2008-1219: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Kutub-i Sitte KutubiSitte 1.1 module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the kid parameter in a hadisgoster action to modules.php...

CVE-2007-1016: Undefined Security Weakness

SQL injection vulnerability in Aktueldownload Haber script allows remote attackers to execute arbitrary SQL commands via certain vectors related to the HaberDetay.asp and rss.asp components, and the id and kid parameters. NOTE: the provenance of this information is unknown; the details are obtain...

CVE-2006-6672: Undefined Security Weakness

Multiple SQL injection vulnerabilities in Burak Yylmaz Download Portal allow remote attackers to execute arbitrary SQL commands via the 1 kid or possibly 2 id parameter to a HABERLER.ASP and b ASPKAT.ASP. NOTE: The provenance of this information is unknown; the details are obtained solely from...