Sql injection

SQL injection vulnerability in login.php in Allomani Audio & Video Library Songs & Clips version 2.7.0 allows remote attackers to execute arbitrary SQL commands via the username parameter in a login action...

CVE-2009-4735

SQL injection vulnerability in login.php in Allomani Audio & Video Library Songs & Clips version 2.7.0 allows remote attackers to execute arbitrary SQL commands via the username parameter in a login action...

CVE-2009-4734: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in login.php in Allomani Movies Library Movies & Clips 2.7.0 allows remote attackers to execute arbitrary SQL commands via the username parameter in a login action...

CVE-2009-4735: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in login.php in Allomani Audio & Video Library Songs & Clips version 2.7.0 allows remote attackers to execute arbitrary SQL commands via the username parameter in a login action...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in eTek Systems Hit Counter 2.0 allow remote attackers to inject arbitrary web script or HTML via the PATHINFO to 1 index.php, 2 inc/login.php, 3 admin/index.php, and 4 admin/forgot.php...

CVE-2010-0941: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in eTek Systems Hit Counter 2.0 allow remote attackers to inject arbitrary web script or HTML via the PATHINFO to 1 index.php, 2 inc/login.php, 3 admin/index.php, and 4 admin/forgot.php...

Authentication flaw

Login.php in RoomPHPlanning 1.6 allows remote attackers to bypass authentication and obtain administrative access by setting the roomphplanning cookie to a value associated with the admin account...

Sql injection

Multiple SQL injection vulnerabilities in RoomPHPlanning 1.6 allow remote attackers to execute arbitrary SQL commands via 1 the loginus parameter to Login.php or 2 the Old Password field to changepwd.php, and allow 3 remote authenticated administrators to execute arbitrary SQL commands via the id...

CVE-2009-4671: Improper Authentication

Login.php in RoomPHPlanning 1.6 allows remote attackers to bypass authentication and obtain administrative access by setting the roomphplanning cookie to a value associated with the admin account...

CVE-2009-4669: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in RoomPHPlanning 1.6 allow remote attackers to execute arbitrary SQL commands via 1 the loginus parameter to Login.php or 2 the Old Password field to changepwd.php, and allow 3 remote authenticated administrators to execute arbitrary SQL commands via the id...

HazelPress Lite 0.0.4 SQL Injection

HazelPress Lite = 0.0.4 Auth Bypass SQL Injection Vulnerability By cr4wl3r Download: http://hazelpress.org/index.php?hazel=downloads PoC: path/login.php Username: ' or '1=1 password: ' or '1=1...

Project Man 1.0 SQL Injection

Project Man Download: http://sourceforge.net/projects/projectman1/files/ PoC: Project Manpath/login.php Username: ' or '1=1 password: ' or '1=1...

Scripts Feed Business Directory SQL Injection

============================================================================== Scripts Feed Business Directory SQL Injection Vulnerability ============================================================================== + My home http://hack-tech.com + Date Submitted: February 27 2010 + Founder: Cr...

Project Man 1.0 - Authentication Bypass

Project Man 1.0 - Authentication Bypass Project Man Download: http://sourceforge.net/projects/projectman1/files/ PoC: Project Manpath/login.php Username: ' or '1=1 password: ' or '1=1...

Scripts Feed Business Directory - SQL Injection

Scripts Feed Business Directory - SQL Injection ============================================================================== Scripts Feed Business Directory SQL Injection Vulnerability ============================================================================== + My home http://hack-tech.com ...

DeltaScripts PHP Links XSS Vulnerability

Exploit for unknown platform in category web applications ======================================== DeltaScripts PHP Links XSS Vulnerability ======================================== + Exploit Title: DeltaScripts PHP Links XSS Vulnerability + Date: January 09 2010 + Author: Crux mail:email protecte...

Killmonster <= 2.1 (Auth Bypass) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================ Killmonster Type Username Here: Type Password Here: authenticate.php $isadmin=$POST'isadmin'; $password=$POST'password'; $password=md5$password; $query = "select from kmadmins...

BoastMachine 3.1 - Arbitrary File Upload

:::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: Exploit Title : boastMachine v3.1 Remote File Upload Vulnerability Author: alnjm33 Software Link: http://boastology.com/pages/dload.php?id=bmachine-3.1.zip Software...

al3jeb script - Remote Authentication Bypass

al3jeb script - Remote Authentication Bypass '/ -.- --------------------oOO------OOo------------------- | al3jeb script Remote Login Bypass Exploit | | works only with magicquotesgpc = off | ------------------------------------------------------ ! Discovered: cr4wl3r ! Date: 19.01.2010 ! Remote:...

DeltaScripts PHP Links 1.0 Cross Site Scripting

H A C K - T E C H E X P L O I T S - by Crux + Exploit Title: DeltaScripts PHP Links XSS Vulnerability + Date: January 09 2010 + Author: Crux mail:[email protected] + Software Link: http://www.deltascripts.com/phplinks/ + Version: 1.0 + Tested on: ALL OS + Dork: NO NO NO! Vulnerable File...