CVE-2009-0831

CVE-2009-0831 affects PHP-Fusion's Members CV (job) module 1.0. The vulnerability is an SQL injection in members.php via the sortby parameter when magic_quotes_gpc is disabled, exploitable by remote authenticated users. NVD reports a base score of 6.0 (Medium) with AV:N/AC:M/Au:S/C:P/I:P/A:P.

CVE-2009-0831

SQL injection vulnerability in members.php in the Members CV job module 1.0 for PHP-Fusion, when magicquotesgpc is disabled, allows remote authenticated users to execute arbitrary SQL commands via the sortby parameter...

Osmodia Bulletin Board Info Disclosure

--------------------------------------------------------- Portal Name: Osmodia Bulletin Board Version : All Version Author : PouyaServer , [email protected] Website: http://Pouya-Server.ir --------------------------------------------------------- Xpl: http://site/Path/members/admin.txt...

WholeHogSoftware Password Protect SQL Injection

----C4TEAM.ORG---ByALBAYX----C4TEAM.ORG---- Author : ByALBAYX Website : WWW.C4TEAM.ORG Script :Password Protect Site :http://wholehogsoftware.com Price :$20.00 Detay :http://www.wholehogsoftware.com/index.php/page/passwordprotectenhanced .... Admin Path :http://c4team.org / Password ProtectPATH...

WholeHogSoftware Ware Support SQL Injection

----C4TEAM.ORG---ByALBAYX----C4TEAM.ORG---- Author : ByALBAYX Website : WWW.C4TEAM.ORG Script :Ware Support Site :http://wholehogsoftware.com Price :$20.00 Detay :http://wholehogsoftware.com/index.php/page/waresupport .... Admin Path :http://c4team.org / Ware SupportPATH /admin/ Username : ' or...

Orca 2.0.2 (Topic) Remote XSS Vulnerability

No description provided by source. --------------------------------------------------------------------------\ + Script : Orca-v.2.0.2 + Bug: Xss + By: J-Hacker || Jerusalem Hacker || From : soqor.net + Email : [email protected] + Download : http://www.boonex.com/thankyou.php?p=Orca-v.2.0 + D0rk...

Star Articles 6.0 (admin.manage) Remote Contents Change Vulnerability

No description provided by source. ----C4TEAM.ORG---ByALBAYX----C4TEAM.ORG---- Author : ByALBAYX Website : WWW.C4TEAM.ORG Script :Star Articles 6.0 Site :http://www.stararticles.com Download :http://cmsnx.com/psf/order.php?id=5 $ :175$ http://www.c4team.org/ PATH...

Star Articles 6.0 - Remote Contents Change

----C4TEAM.ORG---ByALBAYX----C4TEAM.ORG---- Author : ByALBAYX Website : WWW.C4TEAM.ORG Script :Star Articles 6.0 Site :http://www.stararticles.com Download :http://cmsnx.com/psf/order.php?id=5 $ :175$ http://www.c4team.org/ PATH /stararticle/user.modify.profile.php?userid=1 Add...

Unfixed XSS vulnerability at www.ha-an.be

Security researcher Uber0n, has submitted on 25/01/2009 a cross-site-scripting XSS vulnerability affecting www.ha-an.be, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 03/02/2009. It is currently unfixe...

Joomla! Component com_news - SQL Injection

Joomla! Component comnews - SQL Injection ================================================================================================================== = SSSSS NN N AA K K EEEEE SSSSS TTTTTTTTT EEEEE AA MM MM = = S N N N A A K K E S T E A A M M M M = + SSSSS N N N AAAAAA KKK EEEEE SSSSS T...

eFAQ SQL Injection

------C4TEAM.ORG---ByALBAYX----C4TEAM.ORG---- Author : ByALBAYX Website : WWW.C4TEAM.ORG eFAQ Auth Bypass SQL Injection Vulnerability Script : eFAQ Price : $49.95 save $50.00 : Demo : http://faq.enthrallweb.us/ eFAQ details : http://enthrallweb.com/detail.asp?productID=7 username : ' or '1=1...

eReservations SQL Injection

----C4TEAM.ORG---ByALBAYX----C4TEAM.ORG---- Author : ByALBAYX Website : WWW.C4TEAM.ORG eReservations Auth Bypass Script : eReservations Price : $249.95 save $50.00 : Demo : http://reservations.enthrallweb.us/Login.asp Details : http://enthrallweb.com/detail.asp?productID=16 username : ' or '1...

Ping IP SQL Injection

----C4TEAM.ORG---ByALBAYX----C4TEAM.ORG---- Author : ByALBAYX Website : WWW.C4TEAM.ORG Ping IP Auth Bypass SQL Script : Ping IP Price : $59 : Demo : http://warhound.com/ASP/ping/admin.aspx Details : http://warhound.com/asp/products.htm Admin : PATH /ping/admin.aspx username : ' or '1 password : '...

eReservations (Auth Bypass) SQL Injection Vulnerability

No description provided by source. ----C4TEAM.ORG---ByALBAYX----C4TEAM.ORG---- Author : ByALBAYX Website : WWW.C4TEAM.ORG eReservations Auth Bypass Script : eReservations Price : $249.95 save $50.00 : Demo : http://reservations.enthrallweb.us/Login.asp Details :...

The Walking Club - Authentication Bypass

----C4TEAM.ORG---ByALBAYX----C4TEAM.ORG---- Author : ByALBAYX Website : WWW.C4TEAM.ORG The Walking Club Auth Bypass Script : The Walking Club Price : $39 : Demo : http://warhound.com/ASP/walking/login.aspx Details : http://warhound.com/asp/products.htm Admin : PATH /walking/login.aspx username : ...

eReservations - Authentication Bypass

eReservations - Authentication Bypass ----C4TEAM.ORG---ByALBAYX----C4TEAM.ORG---- Author : ByALBAYX Website : WWW.C4TEAM.ORG eReservations Auth Bypass Script : eReservations Price : $249.95 save $50.00 : Demo : http://reservations.enthrallweb.us/Login.asp Details :...

DMXReady Members Area Manager 1.2 SQL Injection

Title : DMXReady Members Area Manager http://target/path/applications/MembersAreaManager/incmembersareamanager.asp Edit - http://target/path/admin/MembersAreaManager/components/SecurityLevelManager/uploadimagesecuritylevel.asp?cid=SQL Inject Example: USERNAME-...

DMXReady Members Area Manager 1.2 - SQL Injection

Title : DMXReady Members Area Manager http://target/path/applications/MembersAreaManager/incmembersareamanager.asp Edit - http://target/path/admin/MembersAreaManager/components/SecurityLevelManager/uploadimagesecuritylevel.asp?cid=SQL Inject Example: USERNAME-...

DMXReady Members Area Manager <= 1.2 SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================ DMXReady Members Area Manager http://target/path/applications/MembersAreaManager/incmembersareamanager.asp Edit -...

DMXReady Members Area Manager &lt;= 1.2 SQL Injection Vulnerability

No description provided by source. Title : DMXReady Members Area Manager = 1.2 SQL Injection Vulnerability Author : ajann Contact : : S.Page : http://www.dmxready.com $$ : 149.97 $ Dork : inurl:incmembersareamanager.asp DorkEx :...