gforge4519-sql.txt

Gforge = 4.5.19 Multiple Sql Injections Vendor Notified: 2008-10-06 Note: should work regardless magicquotesgpc setting. http://gforgesite.xxx/new/?groupid=&limit=50&offset=50;select 1 as id,CURRENTUSER as forumid, version as summary...

Gforge <= 4.6 rc1 (skill_edit) SQL Injection Vulnerability

No description provided by source. Gforge = 4.6 rc1 skilledit SQL injection Vendor Notified: 2008-10-06 Impact: zomg! Note: should work regardless magicquotesgpc setting. Requires: Creating an account and be logged in Vulnerable function: handlemultiedit$skillids on /www/people/skillsutils.php...

CVE-2008-4483

Directory traversal vulnerability in index.php in Crux Gallery 1.32 and earlier, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the theme parameter...

CVE-2008-4490

CVE-2008-4490 affects phpAbook 0.8.8b and earlier, where a directory traversal vulnerability in config.inc.php exists. When magic_quotes_gpc is disabled, remote attackers can cause local file inclusion and arbitrary code execution via a .. (dot dot) sequence in the userInfo cookie. The underlying...

phpAbook <= 0.8.8b (COOKIE) Local File Inclusion Vulnerability

No description provided by source. phpAbook = 0.8.8b COOKIE Local File Inclusion Vulnerability url: http://sourceforge.net/projects/phpabook/ Author: JosS mail: sys-projectathotmaildotcom site: http://spanish-hackers.com team: Spanish Hackers Team - SHT This was written for educational purpose. U...

Printlog <= 0.4: Remote File Edition Vulnerability

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Printlog = 0.4: Remote File Edition Vulnerability -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= $ Program: Printlog $ File affected: index.php $ Version: 0.4 $ Download: http://www.hardkap.net/pritlog Found by Pepelux pepeluxatenye-sec.org...

mysqlquick-lfi.txt

MySQL Quick Admin = 1.5.5 COOKIE Local File Inclusion Vulnerability url: http://www.mysqlquickadmin.com/ Author: JosS mail: sys-projectathotmaildotcom site: http://spanish-hackers.com team: Spanish Hackers Team - SHT This was written for educational purpose. Use it at your own risk. Author will b...

Pritlog 0.4 - Filename Remote File Disclosure

Pritlog 0.4 - Filename Remote File Disclosure -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Printlog eNYe-Sec - www.enye-sec.org -- Description by the author's page -- PRITLOG is an extremely simple, small and powerful blog system. It does not use or need a MYSQL database and fully works bas...

Pritlog 0.4 - 'Filename' Remote File Disclosure

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Printlog eNYe-Sec - www.enye-sec.org -- Description by the author's page -- PRITLOG is an extremely simple, small and powerful blog system. It does not use or need a MYSQL database and fully works based on flat files. The idea is derived from a...

euploader-sql.txt

E-Uploader Pro = 1.0 SQL Injection Vulnerability Author: !DoktOR! Date found: 26.08.08 Product: E-Uploader Pro Version: 1.0 Price: $49 URL: www.scriptsfrenzy.com Download script: http://rapidshare.com/files/18285945/E-UploaderPro.PHP.NULL-DGTlicense.zip Vulnerability Class: SQL Injection Conditio...

Pro Chat Rooms 3.0.3 - SQL Injection

Author: !DoktOR! Date found: 28.09.08 Product: Pro Chat Rooms Version: 3.0.3 Price: $55 URL: www.prochatrooms.com Vulnerability Class: SQL Injection Condition: magicquotesgpc = Off Exploit 1:...

212cafe Board 0.07 (view.php qID) SQL Injection Vulnerability

No description provided by source. =================================================================== 212cafe Board view.php qID Remote SQL Injection Vulnerability =================================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' ...

PromoteWeb MySQL (go.php id) Remote SQL Injection Vulnerability

No description provided by source. =================================================================== PromoteWeb MySQL go.php id Remote SQL Injection Vulnerability =================================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' ...

ultimatewebboard-sql.txt

================================================================================ Ultimate Webboard webboard.php Category Remote SQL Injection Vulnerability ================================================================================ ,--^----------,--------,-----,-------^--, | |||||||||...

Ultimate WebBoard 3.00 - 'Category' SQL Injection

================================================================================ Ultimate Webboard webboard.php Category Remote SQL Injection Vulnerability ================================================================================ ,--^----------,--------,-----,-------^--, | |||||||||...

PromoteWeb MySQL - 'id' SQL Injection

=================================================================== PromoteWeb MySQL go.php id Remote SQL Injection Vulnerability =================================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team...

PromoteWeb MySQL - id SQL Injection

PromoteWeb MySQL - id SQL Injection =================================================================== PromoteWeb MySQL go.php id Remote SQL Injection Vulnerability =================================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------'...

Ultimate WebBoard 3.00 - Category SQL Injection

Ultimate WebBoard 3.00 - Category SQL Injection ================================================================================ Ultimate Webboard webboard.php Category Remote SQL Injection Vulnerability ================================================================================...

PromoteWeb MySQL (go.php id) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications =============================================================== PromoteWeb MySQL go.php id Remote SQL Injection Vulnerability =============================================================== ,--^----------,--------,-----,-------^--, |...

212Cafe Board 0.07 - 'qID' SQL Injection

=================================================================== 212cafe Board view.php qID Remote SQL Injection Vulnerability =================================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team...