DHS Warns ICS, SCADA Owners About Increase in Malicious Activity

An alert from the Department of Homeland Security late last week urges private- and public-sector industrial control system ICS owners to be proactive in auditing the security, particularly, authentication controls of their systems. The alert is in response to a growing concern over the number of...

Schneider Modicon Ladder Logic Upload/Download

The Schneider Modicon with Unity series of PLCs use Modbus function code 90 0x5a to send and receive ladder logic. The protocol is unauthenticated, and allows a rogue host to retrieve the existing logic and to upload new logic. Two modes are supported: "SEND" and "RECV," which behave as one might...

Ladder logic

The devices tested by the Basecamp Project included the D20 PLC by GE, The Modicon Quantum by Schneider Electric, Rockwell and Koyo Electronics. Each device was tested using a number of additional attack vectors. Researchers attempted to upload custom firmware or so-called “ladder logic” for the...

CVE-2010-5014

SQL injection vulnerability in standings.php in Elite Gaming Ladders 3.5 allows remote attackers to execute arbitrary SQL commands via the ladderid parameter...

Elite Gaming Ladder 3.6 Blind SQL Injection

--- - Script - Elite Gaming Ladder - Version - 3.6 - Link - http://www.elitegamingladder.com --- - Author - ro0t --- - Exploit - http://site/ladders.php?platform=Blind Inj - Example - /ladders.php?platform=1 and 1=1 TRUE /ladders.php?platform=1 and 1=2 FALSE ---...

CVE-2008-1791

SQL injection vulnerability in ladder.php in My Gaming Ladder 7.5 and earlier allows remote attackers to execute arbitrary SQL commands via the ladderid parameter...

Sql injection

SQL injection vulnerability in ladder.php in My Gaming Ladder 7.5 and earlier allows remote attackers to execute arbitrary SQL commands via the ladderid parameter...

CVE-2008-1791

SQL injection vulnerability in ladder.php in My Gaming Ladder 7.5 and earlier allows remote attackers to execute arbitrary SQL commands via the ladderid parameter...

CVE-2008-1791

CVE-2008-1791 is an SQL injection in ladder.php of My Gaming Ladder 7.5 and earlier . The vulnerability is triggered via the ladderid parameter , allowing remote attackers to execute arbitrary SQL commands. The NVD entry lists a NETWORK attack vector, LOW complexity, with no authentication, and i...

My Gaming Ladder <= 7.5 (ladderid) SQL Injection Vulnerability

No description provided by source. --==+================================================================================+==-- --==+ My Gaming Ladder 7.5 AND Prior SQL Injection Vulnerbilitys +==-- --==+================================================================================+==-- AUTHOR:...

mgl-sql.txt

--==+================================================================================+==-- --==+ My Gaming Ladder 7.5 AND Prior SQL Injection Vulnerbilitys +==-- --==+================================================================================+==-- AUTHOR: t0pP8uZz SITE: www.mygamingladder.co...

My Gaming Ladder <= 7.5 (ladderid) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================== My Gaming Ladder = 7.5 ladderid SQL Injection Vulnerability ==============================================================...

My Gaming Ladder 7.5 - 'ladderid' SQL Injection

--==+================================================================================+==-- --==+ My Gaming Ladder 7.5 AND Prior SQL Injection Vulnerbilitys +==-- --==+================================================================================+==-- AUTHOR: t0pP8uZz SITE: www.mygamingladder.co...

My Gaming Ladder Combo System 7.0 - Remote Code Execution

My Gaming Ladder Combo System 7.0 - Remote Code Execution !/usr/bin/perl Method found & Exploit scripted by nukedx Contacts ICQ: 10072 MSN/Main: [email protected] web: www.nukedx.com Original advisory: http://www.nukedx.com/?viewdoc=28 Usage: ladder.pl Dork: "Ladder Scripts by...

My Gaming Ladder Combo System <= 7.0 Remote Code Execution Exploit

Exploit for unknown platform in category web applications ================================================================== My Gaming Ladder Combo System ICQ: 10072 MSN/Main: email protected web: www.nukedx.com Original advisory: http://www.nukedx.com/?viewdoc=28 Usage: ladder.pl Dork: "Ladder...