159 matches found
Love garden(lovers blog version) v3. 6 vulnerability-vulnerability warning-the black bar safety net
Code by Link /Reprint please indicate the/ Originally wanted to get this when was a Christmas gift for so and so. Ever since the download of the erection. The results found that there are a few holes in the cave. I thought this 0day no commercial value when it is an academic discussion lost out...
DEDECMS XDAY-vulnerability warning-the black bar safety net
Author: st0p In this record look, Hey, this hole but Jack crash two found. Quite a YD., but also to help me find the two ROOT privileges.。 This vulnerability to st0p and Jack found that copyright did not, welcome to reprint! Why call XDAY not called 0DAY, because this hole relatively chaotic, the...
KnowledgeQuest 2.6 SQL Injection Vulnerabilities
No description provided by source. ...:::::KnowledgeQuest 2.6 SQL Injection Vulnerabilities ::::.... Virangar Security Team www.virangar.org www.virangar.net -------- Discoverd By :virangar security teamhadihadi special tnx to:MR.nosrati,black.shadowes,MR.hesy,Zahra & all virangar members & all...
CVE-2006-5980
admlgnadmin.asp in Renasoft NetJetServer 2.5.3.939, and possibly earlier, does not properly perform login authentication, which allows remote attackers to obtain administrative privileges. NOTE: the provenance of this information is unknown; details are obtained from third party sources...
CVE-2006-1683
SQL injection vulnerability in admin/login.php in Chipmunk Guestbook allows remote attackers to execute arbitrary SQL commands and bypass login authentication via the User name...
Sql injection
SQL injection vulnerability in admin/login.php in Chipmunk Guestbook allows remote attackers to execute arbitrary SQL commands and bypass login authentication via the User name...
CVE-2006-1683
SQL injection vulnerability in admin/login.php in Chipmunk Guestbook allows remote attackers to execute arbitrary SQL commands and bypass login authentication via the User name...
Sql injection
Multiple SQL injection vulnerabilities in rbauth.php in Roberto Butti CALimba 0.99.2 beta and earlier allow remote attackers to execute arbitrary SQL commands and bypass login authentication via the 1 login and 2 password parameters...
CVE-2006-0490
SQL injection vulnerability in login.asp in ASPThai.Net ASPThai Forums 8.0 and earlier allows remote attackers to execute arbitrary SQL commands and bypass login authentication via the password field...
CVE-2005-4653
CVE-2005-4653 affects AL-Caricatier 2.5 and earlier. The vulnerability is in ss.php and allows an unauthenticated attacker to bypass login by a sequence: request view_caricatier.php, then request any file in the admin directory with a cookie_username=admin. Impact: partial confidentiality (per CV...
Sql injection
SQL injection vulnerability in login.php in TheWebForum twf 1.2.1 allows remote attackers to execute arbitrary SQL commands and bypass login authentication via the username parameter aka the u variable...
CVE-2006-0135
SQL injection vulnerability in login.php in TheWebForum twf 1.2.1 allows remote attackers to execute arbitrary SQL commands and bypass login authentication via the username parameter aka the u variable...
CVE-2005-4653
Unspecified vulnerability in ss.php in AL-Caricatier 2.5 and earlier allows remote attackers to bypass login authentication by requesting viewcaricatier.php, and then requesting any file in the admin directory with a cookieusername=admin argument...
Henan mobile network client server system code defect analysis and use-vulnerability and early warning-the black bar safety net
Declare Oh herein no technical content---just to prove that java can also be made hack tool China Mobile's online customer service system everyone should be very familiar, because I was moving faithful henna user, naturally from Henan mobile speaking． In the mobile Hall handled the business users...
CVE-2004-2542
Technical specifics (affected product versions, exact attack vectors, exploit details, or remediation) are not provided in the supplied documents. Monitor for updates.
CVE-2004-2542
Multiple SQL injection vulnerabilities in Dynix formerly known as epixtech WebPAC allow remote attackers to execute arbitrary SQL commands via unknown attack vectors, resulting in an ability to execute stored procedures, bypass login authentication, and cause an unspecified denial of service to...
CVE-2000-0542
Tigris remote access server before 11.5.4.22 does not properly record Radius accounting information when a user fails the initial login authentication but subsequently succeeds...