PHP Property Rental Script SQL Injection / Cross Site Scripting

Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title:PHP Property Rental Script SQLi & XSS Vulnerability Version:3.0 Price:600$ Vendor url:http://www.zincksoft.com/ Published: 2010-06-09 Greetz to:Sid3^effects, MaYur, M4n0j, Dark Blue™®, S1ayer,d3c0d3r and to all ICW members PHP...

PHP Property Rental Script - SQL Injection Cross-Site Scripting

PHP Property Rental Script - SQL Injection Cross-Site Scripting Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title:PHP Property Rental Script SQLi & XSS Vulnerability Version:3.0 Price:600$ Vendor url:http://www.zincksoft.com/ Published: 2010-06-09 Greetz to:Sid3^effects, MaYur,...

PHP Property Rental Script XSS/ SQL Injection Vulnerability

Exploit for php platform in category web applications =========================================================== PHP Property Rental Script XSS/ SQL Injection Vulnerability =========================================================== Author: L0rd CrusAd3r aka VSN email protected Exploit Title:PHP...

PHP Property Rental Script - SQL Injection / Cross-Site Scripting

Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title:PHP Property Rental Script SQLi & XSS Vulnerability Version:3.0 Price:600$ Vendor url:http://www.zincksoft.com/ Published: 2010-06-09 Greetz to:Sid3^effects, MaYur, M4n0j, Dark Blue™®, S1ayer,d3c0d3r and to all ICW members PHP...

CafeEngine CMS V2.3 SQL Injection Vulnerability

Exploit for php platform in category web applications =============================================== CafeEngine CMS V2.3 SQL Injection Vulnerability =============================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 ...

CafeEngine 2.3 - SQL Injection

CafeEngine 2.3 - SQL Injection ========================================================== CafeEngine CMS V2.3 SQLI Vulnerability ========================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, ...

CafeEngine 2.3 - SQL Injection

========================================================== CafeEngine CMS V2.3 SQLI Vulnerability ========================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //...

CVE-2010-1953

Directory traversal vulnerability in the iNetLanka Multiple Map commultimap component 1.0 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php...

CVE-2010-1953

CVE-2010-1953 affects the Joomla! extension iNetLanka Multiple Map (com_multimap) 1.0 with a Local File Inclusion via directory traversal in the controller parameter to index.php. The root cause is improper validation of the .. traversal in user input, allowing remote attackers to read arbitrary ...

CVE-2010-1953

Directory traversal vulnerability in the iNetLanka Multiple Map commultimap component 1.0 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php...

iDefense Security Advisory 05.11.10: Abobe Shockwave Player Heap Memory Indexing Vulnerability

iDefense Security Advisory 05.11.10 http://labs.idefense.com/intelligence/vulnerabilities/ May 11, 2010 I. BACKGROUND Adobe Shockwave Player is a popular Web browser plugin. It is available for multiple Web browsers and platforms, including Windows, and MacOS. Shockwave Player enables Web browser...

DEBIAN-CVE-2010-0406

OpenTTD before 1.0.1 allows remote attackers to cause a denial of service file-descriptor exhaustion and daemon crash by performing incomplete downloads of the map...

CVE-2010-0406

OpenTTD before 1.0.1 allows remote attackers to cause a denial of service file-descriptor exhaustion and daemon crash by performing incomplete downloads of the map...

CVE-2010-1723

Directory traversal vulnerability in the iNetLanka Contact Us Draw Root Map comdrawroot component 1.1 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. dot dot in the controller parameter to index.php...

Directory traversal

Directory traversal vulnerability in the iNetLanka Contact Us Draw Root Map comdrawroot component 1.1 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. dot dot in the controller parameter to index.php...

CVE-2010-1723

Joomla! Component iNetLanka Contact Us Draw Root Map (com_drawroot) version 1.1 is affected by a Local File Inclusion (directory traversal) vulnerability. The issue arises from passing a .. sequence in the controller parameter to index.php, enabling remote attackers to read arbitrary server files...

CVE-2010-1723

Directory traversal vulnerability in the iNetLanka Contact Us Draw Root Map comdrawroot component 1.1 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. dot dot in the controller parameter to index.php...

CVE-2009-4768

Unspecified vulnerability in the JASS script interpreter in Warcraft III: The Frozen Throne 1.24b and earlier allows user-assisted remote attackers to execute arbitrary code via a crafted custom map. NOTE: some of these details are obtained from third party information...

CVE-2009-4768

CVE-2009-4768 affects Blizzard Warcraft III: The Frozen Throne (versions 1.24b and earlier). The vulnerability resides in the JASS script interpreter, enabling a crafted custom map to trigger arbitrary code execution by user-assisted remote attackers. This is described as an unspecified vulnerabi...

CVE-2009-4768

Unspecified vulnerability in the JASS script interpreter in Warcraft III: The Frozen Throne 1.24b and earlier allows user-assisted remote attackers to execute arbitrary code via a crafted custom map. NOTE: some of these details are obtained from third party information...