CVE-2008-5634

CVE-2008-5634 describes an SQL injection vulnerability in Active Force Matrix 2.0, specifically in account.asp. The vulnerability allows remote attackers to execute arbitrary SQL commands through the username and password parameters (potentially related to start.asp). The CVSS 2.0 base score is 7...

activeforce-sql.txt

----------------------------بسم الله الرحمن الرحيم------------------------------ Tybe:Auth Bypass Remote SQL Injection Vulnerability Vendor:www.activewebsoftwares.com Software: Active Force Matrix v 2 author: я3d D3v!L Date: 28.11.2008 Home: www.ahacker.biz contact: N/A...

Active Force Matrix v2 (Auth Bypass) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ======================================================================= Active Force Matrix v2 Auth Bypass Remote SQL Injection Vulnerability ======================================================================= Tybe:Auth Bypass Remote S...

Active Force Matrix 2 - Authentication Bypass

Active Force Matrix 2 - Authentication Bypass ----------------------------بسم الله الرحمن الرحيم------------------------------ Tybe:Auth Bypass Remote SQL Injection Vulnerability Vendor:www.activewebsoftwares.com Software: Active Force Matrix v 2 author: я3d D3v!L Date:...

Active Force Matrix 2 - Authentication Bypass

----------------------------بسم الله الرحمن الرحيم------------------------------ Tybe:Auth Bypass Remote SQL Injection Vulnerability Vendor:www.activewebsoftwares.com Software: Active Force Matrix v 2 author: я3d D3v!L Date: 28.11.2008 Home: www.ahacker.biz contact: N/A...

YourFreeWorld Forced Matrix Script - SQL Injection

YourFreeWorld Forced Matrix Script - SQL Injection Forced Matrix Script id Remote SQL Injection Vulnerability Author: Hussin X Home : www.IQ-TY.com & www.TrYaG.cc script : http://www.yourfreeworld.com/script/subscriptionforcedmatrix.php DorK : inurl:"tr1.php?id=" Forced Matrix Exploit :...

YourFreeWorld Forced Matrix Script (id) SQL Injection Vulnerability

Exploit for unknown platform in category web applications =================================================================== YourFreeWorld Forced Matrix Script id SQL Injection Vulnerability =================================================================== Forced Matrix Script id Remote SQL...

YourFreeWorld Forced Matrix Script (id) SQL Injection Vulnerability

No description provided by source. Forced Matrix Script id Remote SQL Injection Vulnerability Author: Hussin X Home : www.IQ-TY.com & www.TrYaG.cc script : http://www.yourfreeworld.com/script/subscriptionforcedmatrix.php DorK : inurl:"tr1.php?id=" Forced Matrix Exploit :...

YourFreeWorld Forced Matrix Script - SQL Injection

Forced Matrix Script id Remote SQL Injection Vulnerability Author: Hussin X Home : www.IQ-TY.com & www.TrYaG.cc script : http://www.yourfreeworld.com/script/subscriptionforcedmatrix.php DorK : inurl:"tr1.php?id=" Forced Matrix Exploit :...

ajrss-sql.txt

================================================================================================================== SSSSS NN N AA K K EEEEE SSSSS TTTTTTTTT EEEEE AA MM MM S N N N A A K K E S T E A A M M M M SSSSS N N N AAAAAA KKK EEEEE SSSSS T EEEEE AAAAAA M M M M S N N N A A K K E S T E A A M M M...

Aj RSS Reader - 'url' SQL Injection

================================================================================================================== SSSSS NN N AA K K EEEEE SSSSS TTTTTTTTT EEEEE AA MM MM S N N N A A K K E S T E A A M M M M SSSSS N N N AAAAAA KKK EEEEE SSSSS T EEEEE AAAAAA M M M M S N N N A A K K E S T E A A M M M...

CVE-2008-3757

SQL injection vulnerability in tr1.php in YourFreeWorld Forced Matrix Script allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

SQL injection vulnerability in tr1.php in YourFreeWorld Forced Matrix Script allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-3757

CVE-2008-3757 concerns a SQL injection in the file tr1.php of the YourFreeWorld Forced Matrix Script. The vulnerability is triggered via the id parameter, enabling remote attackers to execute arbitrary SQL commands. This is documented across multiple sources in the connected documents, confirming...

CVE-2008-3757

SQL injection vulnerability in tr1.php in YourFreeWorld Forced Matrix Script allows remote attackers to execute arbitrary SQL commands via the id parameter...

forcedmatrix-sql.txt

|| | | Forced Matrix Script id Remote SQL Injection Vulnerability | | |---------------------Hussin X----------------------| | | Author: Hussin X | | Home : www.tryag.cc/cc | | email: darkangelg85atYahooDoTcom | | | | | | | script :http://www.yourfreeworld.com/script/subscriptionforcedmatrix.php |...

rsync <= 2.5.7 Local stack overflow Root Exploit

No description provided by source. / rsync = 2.5.7 Local Exploit Saved EIP on stack is overwritten with address of shellcode in memory Generally rsync is not setuid or setgid so just a local shell is of no use So i used a portbinding shellcode as a PoC of a different attack vector. RET is...

PrecisionID Data Matrix ActiveX控件远程栈溢出漏洞

PrecisionID Data Matrix是用于生成二维条码的工具。 PrecisionID.Datamatrix.1 ActiveX控件（PrecisionIDDataMatrix.dll）在处理SaveBarCode方式时存在栈溢出漏洞，远程攻击者可能利用此漏洞导致浏览器崩溃。 如果用户受骗访问了恶意站点并向其传送了超长参数，就可能触发这个溢出，导致拒绝服务。 PrecisionID Data Matrix ActiveX 1.3.0.0 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...

Debian DSA-882-1 : openssl095 - cryptographic weakness

Yutaka Oiwa discovered a vulnerability in the Open Secure Socket Layer OpenSSL library that can allow an attacker to perform active protocol-version rollback attacks that could lead to the use of the weaker SSL 2.0 protocol even though both ends support SSL 3.0 or TLS 1.0. The following matrix...

CVE-2006-5036

MySource Matrix 3.8 and earlier, and MySource 2.x, allow remote attackers to use the application as an HTTP proxy server via the sqremotepageurl parameter to access arbitrary sites with the server's IP address and conduct cross-site scripting XSS attacks. NOTE: the researcher reports that "The...