CVE-2008-6484

SQL injection vulnerability in login.php in Mole Group Taxi Map Script aka Taxi Calc Dist Script allows remote attackers to execute arbitrary SQL commands via the user field...

CVE-2008-6484

SQL injection vulnerability in login.php in Mole Group Taxi Map Script aka Taxi Calc Dist Script allows remote attackers to execute arbitrary SQL commands via the user field...

CVE-2008-6484: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in login.php in Mole Group Taxi Map Script aka Taxi Calc Dist Script allows remote attackers to execute arbitrary SQL commands via the user field...

Kim Websites 1.0 (Auth Bypass) SQL Injection Vulnerability

No description provided by source. Kim Websites 1.0 SQL Injection Vulnerability Authentication bypass Virangar Security Team www.virangar.net -------- Discoverd By : Virangar Security Teamhadihadi special tnx to:MR.nosrati,black.shadowes,MR.hesy,Zahra & all virangar members & Ariasecurity team &...

CVE-2008-6465

Multiple cross-site scripting XSS vulnerabilities in login.php in webshell4 in Parallels H-Sphere 3.0.0 P9 and 3.1 P1 allow remote attackers to inject arbitrary web script or HTML via the 1 err, 2 errorcode, and 3 login parameters...

CVE-2008-6465

CVE-2008-6465 affects Parallels H-Sphere 3.0.0 P9 and 3.1 P1. The NUCLEI template documents multiple cross-site scripting (XSS) flaws in login.php within webshell4, allowing an attacker to inject arbitrary script/HTML via the parameters (err, errorcode, login). Potential impact includes theft of ...

CVE-2008-6465

Multiple cross-site scripting XSS vulnerabilities in login.php in webshell4 in Parallels H-Sphere 3.0.0 P9 and 3.1 P1 allow remote attackers to inject arbitrary web script or HTML via the 1 err, 2 errorcode, and 3 login parameters...

CVE-2008-6465: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in login.php in webshell4 in Parallels H-Sphere 3.0.0 P9 and 3.1 P1 allow remote attackers to inject arbitrary web script or HTML via the 1 err, 2 errorcode, and 3 login parameters...

Kim Websites 1.0 - Authentication Bypass

Kim Websites 1.0 SQL Injection Vulnerability Authentication bypass Virangar Security Team www.virangar.net -------- Discoverd By : Virangar Security Teamhadihadi special tnx to:MR.nosrati,black.shadowes,MR.hesy,Zahra & all virangar members & Ariasecurity team & all hackerz greetz:to my best frien...

Kim Websites 1.0 (Auth Bypass) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ========================================================== Kim Websites 1.0 Auth Bypass SQL Injection Vulnerability ==========================================================...

CVE-2009-0886

Directory traversal vulnerability in login.php in OneOrZero Helpdesk 1.6.5.7 and earlier allows remote attackers to read arbitrary files via a .. dot dot in the defaultlanguage parameter...

CVE-2009-0886: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in login.php in OneOrZero Helpdesk 1.6.5.7 and earlier allows remote attackers to read arbitrary files via a .. dot dot in the defaultlanguage parameter...

CVE-2009-0853: Improper Authentication

login.php in CelerBB 0.0.2, when magicquotesgpc is disabled, allows remote attackers to bypass authentication and obtain administrative access via special characters in the Username parameter, as demonstrated by an admin' parameter value...

OneOrZero Helpdesk 1.6.5.7 - Local File Inclusion

OneOrZero Helpdesk 1.6.5.7 - Local File Inclusion :::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ dunatstrcpy.pl OneOrZero Helpdesk = 1.6.5.7 Local File Inclusion Vulnerability Script: "OneOrZer...

OneOrZero Helpdesk 1.6.5.7 Local File Inclusion

:::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ dunatstrcpy.pl OneOrZero Helpdesk = 1.6.5.7 Local File Inclusion Vulnerability Script: "OneOrZero Helpdesk and Task Management System is a powerfu...

OneOrZero Helpdesk <= 1.6.5.7 Local File Inclusion Vulnerability

No description provided by source. :::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ dunatstrcpy.pl OneOrZero Helpdesk = 1.6.5.7 Local File Inclusion Vulnerability Script: "OneOrZero Helpdesk and...

celerbb 0.0.2 - Multiple Vulnerabilities

Salvatore "drosophila" Fresta + Application: CelerBB + Version: 0.0.2 + Website: http://celerbb.sourceforge.net/ + Bugs: A Multiple SQL Injection B Information Disclosure C Authenticaion Bypass + Exploitation: Remote + Date: 05 Mar 2009 + Discovered by: Salvatore "drosophila" Fresta + Author:...

Sql injection

SQL injection vulnerability in login.php in xGuestbook 2.0 allows remote attackers to execute arbitrary SQL commands via the user parameter...

CVE-2009-0810

The vulnerability CVE-2009-0810 affects xGuestbook 2.0, specifically the login.php component where the user parameter is used in a way that permits SQL injection. The advisory states that remote attackers can cause arbitrary SQL commands to execute, indicating a classic injection in authenticatio...

CVE-2009-0810: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in login.php in xGuestbook 2.0 allows remote attackers to execute arbitrary SQL commands via the user parameter...