Sql injection

Advance Online Learning Management Script 3.1 has SQL Injection via the courselist.php subcatid or popcourseid parameter...

CVE-2017-17599: Improper Neutralization of Special Elements used in an SQL Command

Advance Online Learning Management Script 3.1 has SQL Injection via the courselist.php subcatid or popcourseid parameter...

Schools Alert Management Script 2.01 - 'list_id' SQL Injection

Exploit Title: Schools Alert Management Script v2.01 - SQL Injection Google Dork: N/A Date: 06.03.2017 Vendor Homepage: http://www.phpscriptsmall.com/ Software : http://www.phpscriptsmall.com/product/schools-alert-management-system/ Demo: http://www.schoolcollageerp.com/schoolalert/ Version: 2.01...

iBill Management Script Weak Hard-Coded Password Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/3476/info iBill is an Internet billing company that provides secure payment processing for e-commerce. A vulnerability exists in iBill's CGI password management script called ibillpm.pl. The default password is the client...

Banner Management Script SQL Injection

No description provided by source. Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title:Banner Management Script SQL Injection Vendor url:http://www.yourfreeworld.com Version:n/a Price:59$ Published: 2010-06-19 Greetz to:Sid3^effects, MaYur, M4n0j, Dark Blue, S1ayer,d3c0d3r,KD and to...

PHP Weby Directory Software 1.2 SQL Injection / CSRF Vulnerabilities

PHP Weby Directory Software version 1.2 suffers from cross site request forgery and remote blind SQL injection vulnerabilities. =========================================== Vulnerable Software: PHP Weby directory software version 1.2 Vendor: http://phpweby.com Download:...

Clipbucket 2.5 Blind SQL Injection

Author: loneferret of Offensive Security Product: ClipBucket Version: 2.5 and maybe older versions Vendor Site: http://clip-bucket.com/ Software Download: http://sourceforge.net/projects/clipbucket/ Software description: ClipBucket is an OpenSource Multimedia Management Script Provided Free to th...

Clipbucket 2.5 - Blind SQL Injection

Clipbucket 2.5 - Blind SQL Injection Author: loneferret of Offensive Security Product: ClipBucket Version: 2.5 and maybe older versions Vendor Site: http://clip-bucket.com/ Software Download: http://sourceforge.net/projects/clipbucket/ Software description: ClipBucket is an OpenSource Multimedia...

DornCMS 1.4 'add_page.php'任意文件上传漏洞

DornCMS是一套不需要任何数据库的CMS系统，采用flat-file作为数据存储。 DornCMS 'addpage.php'不正确处理用户上传的文件数据，攻击者可以利用漏洞无需验证上传恶意PHP文件并以WEB权限执行。 0 DornCMS 1.4 厂商解决方案 目前没有详细解决方案提供： http://sourceforge.net/p/dorncms/home/DornCMS/ require 'msf/core' class Metasploit3 Msf::Exploit::Remote Rank = ExcellentRanking include...

I-net Enquiry Management Script SQL Injection

Name : I-net Enquiry mannagement Script SQLi Vulnerability Date : july 13, 2010 Critical Level : HIGH Vendor Url : http://www.i-netsolution.com/ Author : D4rk357 D4rk357atyahoodotin special thanks to : b0nd, Fbih2s,rockey killer,The empty, punter,eberly,prashant greetz to...

Codefixer Membership Remote Database Disclosure Vulnerability

Exploit for unknown platform in category web applications ============================================================= Codefixer Membership Remote Database Disclosure Vulnerability =============================================================...

Sql injection

SQL injection vulnerability in image.php in Softbiz Banner Ad Management Script allows remote attackers to execute arbitrary SQL commands via the sizeid parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2009-2232

SQL injection vulnerability in image.php in Softbiz Banner Ad Management Script allows remote attackers to execute arbitrary SQL commands via the sizeid parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2009-2232: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in image.php in Softbiz Banner Ad Management Script allows remote attackers to execute arbitrary SQL commands via the sizeid parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2008-6739

CVE-2008-6739 affects Todd Woolums ASP Download management script 1.03. The issue is that setupdownload.asp does not require authentication, allowing a remote attacker to obtain administrator privileges via a direct request. The documented impact is elevation to administrator access, with exploit...

CVE-2008-6739: Improper Authentication

Todd Woolums ASP Download management script 1.03 does not require authentication for setupdownload.asp, which allows remote attackers to gain administrator privileges via a direct request...

CVE-2008-4743

CVE-2008-4743 is an SQL injection vulnerability in QuidaScript’s FAQ Management Script, specifically in index.php where the catid parameter is used unsafely. The affected component is the index.php handler within the QuidaScript FAQ Management Script, with the underlying cause being improper hand...

CVE-2008-4743: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in QuidaScript FAQ Management Script allows remote attackers to execute arbitrary SQL commands via the catid parameter...

FAQ Management Script - catid SQL Injection

FAQ Management Script - catid SQL Injection || | | FAQ Management catid Remote SQL Injection Vulnerability | | |-------------------- Hussin X -------------------| | | Author: Hussin X | | Home : WwW.IQ-ty.CoM | | email: darkangelg85atYahooDoTcom | | | | | | | | script :...

FAQ Management Script (catid) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================ FAQ Management Script catid Remote SQL Injection Vulnerability ================================================================ || | | FAQ Management catid Remote SQL Injecti...