Affiliate Market Ver.0.1 BETA XSS / SQL Injection Exploit

No description provided by source. !/usr/bin/perl Affiliate Market Ver.0.1 BETA Multiple Remote Vulnerabilities SQL Injection Exploit/XSS AUTHOR : IRCRASH Discovered by : Dr.Crash Exploited By : Dr.Crash IRCRASH Team Members : Dr.Crash - Malc0de - R3d.w0rm Script Download :...

Affiliate Market 0.1 Beta - Cross-Site Scripting SQL Injection

Affiliate Market 0.1 Beta - Cross-Site Scripting SQL Injection !/usr/bin/perl Affiliate Market Ver.0.1 BETA Multiple Remote Vulnerabilities SQL Injection Exploit/XSS AUTHOR : IRCRASH Discovered by : Dr.Crash Exploited By : Dr.Crash IRCRASH Team Members : Dr.Crash - Malc0de - R3d.w0rm Script...

Affiliate Market 0.1 Beta - Cross-Site Scripting / SQL Injection

!/usr/bin/perl Affiliate Market Ver.0.1 BETA Multiple Remote Vulnerabilities SQL Injection Exploit/XSS AUTHOR : IRCRASH Discovered by : Dr.Crash Exploited By : Dr.Crash IRCRASH Team Members : Dr.Crash - Malc0de - R3d.w0rm Script Download :...

A-Blog V.2 (id) XSS / Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl A-Blog V.2 Multiple Remote Vulnerabilities SQL Injection Exploit/XSS AUTHOR : IRCRASH &...

blogphp-sql.txt

!/usr/bin/perl BlogPHP V.2 Multiple Remote Vulnerabilities SQL Injection Exploit/XSS AUTHOR : IRCRASH Discovered by : Dr.Crash Exploited By : Dr.Crash IRCRASH Team Members : Dr.Crash - Malc0de - R3d.w0rm Script Download : http://puzzle.dl.sourceforge.net/sourceforge/blogphpscript/BlogPHPv2.zip XS...

BlogPHP v.2 (id) XSS / Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl BlogPHP V.2 Multiple Remote Vulnerabilities SQL Injection Exploit/XSS AUTHOR : IRCRASH...

Joomla! Component com_Marketplace 1.1.1 - SQL Injection

Joomla! Component comMarketplace 1.1.1 - SQL Injection Joomla Component Markplace 1.1.1 Remote Sql Injection Exploit AUTHOR:SoSo H H Iraqi-Cracker Tested on: Markplace Version 1.1.1 and 1.1.1-pl1 Dork:"Marketplace Version 1.1.1" "Marketplace Version 1.1.1-pl1" inurl:index.php?option=commarketplac...

ASPired2Protect bypass

Aria-Security Team http://aria-security.net -------------------------------------- Vendor :http://thenetguys.us Script/Portal: ASPired2Protect discover by:TLOTD You can bypass the login page with: ' or ' Shouts :theoutl4w all of the aria security members...

Tiger PHP News System 1.0b build 39 - SQL Injection

Tiger PHP News System 1.0b build 39 - SQL Injection / Tiger PHP News System SQL Injection Bug found bY 0in from DaRk-Coders Group! Homepage: http://dark-coders.4rh.eu or http://dark-coders.prv.pl IRC:dark-coders at irc.freenode.org Email: 0indotemailatgmaildotcom / Script home: http://tpns.k-na.s...

Tiger PHP News System SQL Injection

/ Tiger PHP News System SQL Injection Bug found bY 0in from DaRk-Coders Group! Homepage: http://dark-coders.4rh.eu or http://dark-coders.prv.pl IRC:dark-coders at irc.freenode.org Email: 0indotemailatgmaildotcom / Script home: http://tpns.k-na.se/ Exploit:...

Invision Gallery 2.0.7 - SQL Injection

Invision Gallery 2.0.7 - SQL Injection !/usr/bin/perl Invision Gallery version "r57ig207" ; $mw-geometry '420x510' ; $mw-resizable0,0; $mw-Label-text = '!', -font = 'Webdings 22'-pack; $mw-Label-text = 'Invision Gallery 'Verdana 7 bold',-foreground='red'-pack; $mw-Label-text = ''-pack;...

aflog 1.01 comments.php XSS / SQL Injection Vulnerability

Exploit for unknown platform in category web applications ========================================================= aflog 1.01 comments.php XSS / SQL Injection Vulnerability ========================================================= Name: aflog 1.01 and possibly earlier Webiste: http://aflog.org/...

Members Area System 1.7 - 'view_func.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/27244/info Members Area System is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to include an arbitrary remote file containing malicious PHP code and execute it i...

Sql injection

SQL injection vulnerability in index.php in SmallNuke 2.0.4 and earlier, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via 1 the useremail parameter and possibly 2 username parameter in a Members action...

CVE-2008-0147

SQL injection vulnerability in index.php in SmallNuke 2.0.4 and earlier, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via 1 the useremail parameter and possibly 2 username parameter in a Members action...

CVE-2008-0147: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in SmallNuke 2.0.4 and earlier, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via 1 the useremail parameter and possibly 2 username parameter in a Members action...

Alstrasoft e-Friends 4.98 - seid Multiple SQL Injections

Alstrasoft e-Friends 4.98 - seid Multiple SQL Injections \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV85$2007 ----------------------------------------------------------------------------------------- ECHOADV85$2007 alstrasoft E-Friends = 4.98 seid...

Unfixed XSS vulnerability at www.balyayla.com

Security researcher CiCoSz, has submitted on 11/08/2007 a cross-site-scripting XSS vulnerability affecting www.balyayla.com, which at the time of submission ranked 11345283 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 21/08/2007. It is...

Vortex Portal 1.0.42 - Remote File Inclusion

Vortex Portal 1.0.42 - Remote File Inclusion Vortex Portal 1.0.42 RFI ---------- Author : ShAy6oOoN ---------- Group : PitBull Crew ---------- Script : Vortex Portal 1.0.42 ---------- Download : http://www.igamingcms.com/legacy-software/VortexPortal1.0.42.zip ---------- Vuln Type: RFI ----------...

Multi-Forums Directory.PHP SQL注入漏洞

Multi-Forums是一款基于PHP的WEB应用程序。 Multi-Forums不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞进行SQL攻击，获得敏感信息或操作数据库。 问题是由于'Directory.PHP'脚本对用户提交的WEB参数缺少过滤，提交恶意SQL查询作为参数数据，可更改原来的SQL逻辑，攻击者可以获得敏感信息或操作数据库。 Multi-Forums 目前没有详细解决方案提供： http://www.sebflipper.com/?page=scriptsmfp...