Sql injection

SQL injection vulnerability in the awardsMembers function in Sources/Profile.php in the Member Awards component 1.0.2 for Simple Machines Forum SMF allows remote attackers to execute arbitrary SQL commands via the id parameter in a profile action to index.php. NOTE: some of these details are...

CVE-2009-2385

CVE-2009-2385 affects Simple Machines Forum (SMF) — Member Awards component 1.0.2. The vulnerability lies in the awardsMembers function in Sources/Profile.php, where the id parameter in a profile action to index.php can be exploited to perform SQL injection and execute arbitrary SQL commands. Thi...

CVE-2009-2385

SQL injection vulnerability in the awardsMembers function in Sources/Profile.php in the Member Awards component 1.0.2 for Simple Machines Forum SMF allows remote attackers to execute arbitrary SQL commands via the id parameter in a profile action to index.php. NOTE: some of these details are...

CVE-2009-2385: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the awardsMembers function in Sources/Profile.php in the Member Awards component 1.0.2 for Simple Machines Forum SMF allows remote attackers to execute arbitrary SQL commands via the id parameter in a profile action to index.php. NOTE: some of these details are...

CVE-2009-2270: Improper Control of Generation of Code

Unrestricted file upload vulnerability in member/uploadsedit.php in dedecms 5.3 allows remote attackers to execute arbitrary code by uploading a file with a double extension in the filename, then accessing this file via unspecified vectors, as demonstrated by a .jpg.php filename...

SMF Mod Member Awards 1.0.2 Blind SQL Injection Exploit

No description provided by source. ------------------------------------------------------------------------- SMF Component Member Awards Blind SQL-injection Vulnerability ------------------------------------------------------------------------- author: eLwaux thanks: mailbrush, antichat.ru,...

SMF Member Awards 1.0.2 SQL Injection

------------------------------------------------------------------------- SMF Component Member Awards Blind SQL-injection Vulnerability ------------------------------------------------------------------------- author: eLwaux thanks: mailbrush, antichat.ru, uasc.org.ua...

SMF Mod Member Awards 1.0.2 - Blind SQL Injection

SMF Mod Member Awards 1.0.2 - Blind SQL Injection ------------------------------------------------------------------------- SMF Component Member Awards Blind SQL-injection Vulnerability ------------------------------------------------------------------------- author: eLwaux thanks: mailbrush,...

SMF Mod Member Awards 1.0.2 Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ======================================================= SMF Mod Member Awards 1.0.2 Blind SQL Injection Exploit ======================================================= -----------------------------------------------------------------------...

SMF Mod Member Awards 1.0.2 - Blind SQL Injection

------------------------------------------------------------------------- SMF Component Member Awards Blind SQL-injection Vulnerability ------------------------------------------------------------------------- author: eLwaux thanks: mailbrush, antichat.ru, uasc.org.ua...

CVE-2009-2131

Cross-site scripting XSS vulnerability in 4images 1.7.7 and earlier allows remote authenticated users to inject arbitrary web script or HTML by providing a crafted userhomepage parameter to member.php, and then posting a comment associated with a picture...

CVE-2009-0899

IBM WebSphere Application Server WAS 6.1 through 6.1.0.24 and 7.0 through 7.0.0.4, IBM WebSphere Portal Server 5.1 through 6.0, and IBM Integrated Solutions Console ISC 6.0.1 do not properly set the IsSecurityEnabled security flag during migration of WebSphere Member Manager WMM to Virtual Member...

Family Connections CMS 1.9 - SQL Injection

Family Connections CMS 1.9 - SQL Injection !/usr/bin/perl || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH!...

Family Connections CMS <= 1.9 (member) SQL Injection Exploit

Exploit for unknown platform in category web applications ============================================================ Family Connections CMS WEB: http://www.familycms.com/index.php | |--DOWNLOAD: http://www.familycms.com/download.php | |--DEMO: http://www.familycms.com/demo/index.php |...

eLitius 1.0 SQL Injection

================================================================================================================== SSSSS NN N AA K K EEEEE SSSSS TTTTTTTTT EEEEE AA MM MM S N N N A A K K E S T E A A M M M M SSSSS N N N AAAAAA KKK EEEEE SSSSS T EEEEE AAAAAA M M M M S N N N A A K K E S T E A A M M M...

Unrestricted file upload

Unrestricted file upload vulnerability in editimage.php in Apartment Search Script allows remote attackers to execute arbitrary code by uploading a file with an executable extension and a GIF header, then accessing this file via a direct request to a renamed file in MemberAdmin/logo/...

kernel: memory disclosure in SO_BSDCOMPAT gsopt

The sockgetsockopt function in net/core/sock.c in the Linux kernel before 2.6.28.6 does not initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel memory via an SOBSDCOMPAT getsockopt request...

Unfixed XSS vulnerability at www.dricka.se

Security researcher Uber0n, has submitted on 21/03/2009 a cross-site-scripting XSS vulnerability affecting www.dricka.se, which at the time of submission ranked 1258492 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/01/2012. It is currently...

PhpMySport 1.4 (XSS/SQL) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ======================================================== PhpMySport 1.4 XSS/SQL Multiple Remote Vulnerabilities ======================================================== + PhpMySport v. 1.4 Multiple Remote Vulnerabilities XSS\SQL + -Product...

Design/Logic Flaw

IBM WebSphere Process Server WPS 6.1.2 before 6.1.2.3 and 6.2 before 6.2.0.1 does not properly restrict configuration data during an export of the cluster configuration file from the administrative console, which allows remote authenticated users to obtain the 1 JMSAPI, 2 ESCALATION, and 3...