Siestta 2.0 Cross Site Scripting / Local File Inclusion

SIESTTA 2.0 LFI/XSS Multiple Vulnerabilities download: http://ramoncastro.es/siesttaold/ Author: Jose Luis Gongora Fernandez 'aka' JosS mail: sys-projectathotmaildotcom site: http://www.hack0wn.com/ team: Spanish Hackers Team - SHT Hack0wn Security Project!! This was written for educational...

CVE-2010-1346: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in admin/login.php in Mini CMS RibaFS 1.0, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the login parameter. NOTE: some of these details are obtained from third party information...

CVE-2010-0988: Improper Control of Generation of Code

Multiple unspecified vulnerabilities in Pulse CMS before 1.2.3 allow 1 remote attackers to write to arbitrary files and execute arbitrary PHP code via vectors related to improper handling of login failures by includes/login.php; and allow remote authenticated users to write to arbitrary files and...

CVE-2010-1092

Multiple SQL injection vulnerabilities in login.php in ScriptsFeed Business Directory Software allow remote attackers to execute arbitrary SQL commands via the 1 us and 2 ps parameters...

Sql injection

Multiple SQL injection vulnerabilities in login.php in ScriptsFeed Business Directory Software allow remote attackers to execute arbitrary SQL commands via the 1 us and 2 ps parameters...

CVE-2010-1092

Multiple SQL injection vulnerabilities in login.php in ScriptsFeed Business Directory Software allow remote attackers to execute arbitrary SQL commands via the 1 us and 2 ps parameters...

CVE-2010-1092

CVE-2010-1092 affects ScriptsFeed Business Directory Software, specifically login.php. The vulnerability is SQL injection in the login routine via the us and ps parameters, allowing remote attackers to execute arbitrary SQL. Public references indicate there are exploits available (e.g., Exploit-D...

CVE-2010-1092: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in login.php in ScriptsFeed Business Directory Software allow remote attackers to execute arbitrary SQL commands via the 1 us and 2 ps parameters...

CVE-2009-4735

SQL injection vulnerability in login.php in Allomani Audio & Video Library Songs & Clips version 2.7.0 allows remote attackers to execute arbitrary SQL commands via the username parameter in a login action...

Sql injection

SQL injection vulnerability in login.php in Allomani Audio & Video Library Songs & Clips version 2.7.0 allows remote attackers to execute arbitrary SQL commands via the username parameter in a login action...

CVE-2009-4734: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in login.php in Allomani Movies Library Movies & Clips 2.7.0 allows remote attackers to execute arbitrary SQL commands via the username parameter in a login action...

CVE-2009-4735: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in login.php in Allomani Audio & Video Library Songs & Clips version 2.7.0 allows remote attackers to execute arbitrary SQL commands via the username parameter in a login action...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in eTek Systems Hit Counter 2.0 allow remote attackers to inject arbitrary web script or HTML via the PATHINFO to 1 index.php, 2 inc/login.php, 3 admin/index.php, and 4 admin/forgot.php...

CVE-2010-0941: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in eTek Systems Hit Counter 2.0 allow remote attackers to inject arbitrary web script or HTML via the PATHINFO to 1 index.php, 2 inc/login.php, 3 admin/index.php, and 4 admin/forgot.php...

Authentication flaw

Login.php in RoomPHPlanning 1.6 allows remote attackers to bypass authentication and obtain administrative access by setting the roomphplanning cookie to a value associated with the admin account...

Sql injection

Multiple SQL injection vulnerabilities in RoomPHPlanning 1.6 allow remote attackers to execute arbitrary SQL commands via 1 the loginus parameter to Login.php or 2 the Old Password field to changepwd.php, and allow 3 remote authenticated administrators to execute arbitrary SQL commands via the id...

CVE-2009-4671: Improper Authentication

Login.php in RoomPHPlanning 1.6 allows remote attackers to bypass authentication and obtain administrative access by setting the roomphplanning cookie to a value associated with the admin account...

CVE-2009-4669: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in RoomPHPlanning 1.6 allow remote attackers to execute arbitrary SQL commands via 1 the loginus parameter to Login.php or 2 the Old Password field to changepwd.php, and allow 3 remote authenticated administrators to execute arbitrary SQL commands via the id...

Scripts Feed Business Directory SQL Injection

============================================================================== Scripts Feed Business Directory SQL Injection Vulnerability ============================================================================== + My home http://hack-tech.com + Date Submitted: February 27 2010 + Founder: Cr...

HazelPress Lite 0.0.4 SQL Injection

HazelPress Lite = 0.0.4 Auth Bypass SQL Injection Vulnerability By cr4wl3r Download: http://hazelpress.org/index.php?hazel=downloads PoC: path/login.php Username: ' or '1=1 password: ' or '1=1...