CVE-2008-0147: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in SmallNuke 2.0.4 and earlier, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via 1 the useremail parameter and possibly 2 username parameter in a Members action...

CVE-2008-0147

SQL injection vulnerability in index.php in SmallNuke 2.0.4 and earlier, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via 1 the useremail parameter and possibly 2 username parameter in a Members action...

Alstrasoft e-Friends 4.98 - seid Multiple SQL Injections

Alstrasoft e-Friends 4.98 - seid Multiple SQL Injections \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV85$2007 ----------------------------------------------------------------------------------------- ECHOADV85$2007 alstrasoft E-Friends = 4.98 seid...

Unfixed XSS vulnerability at www.balyayla.com

Security researcher CiCoSz, has submitted on 11/08/2007 a cross-site-scripting XSS vulnerability affecting www.balyayla.com, which at the time of submission ranked 11345283 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 21/08/2007. It is...

Vortex Portal 1.0.42 - Remote File Inclusion

Vortex Portal 1.0.42 - Remote File Inclusion Vortex Portal 1.0.42 RFI ---------- Author : ShAy6oOoN ---------- Group : PitBull Crew ---------- Script : Vortex Portal 1.0.42 ---------- Download : http://www.igamingcms.com/legacy-software/VortexPortal1.0.42.zip ---------- Vuln Type: RFI ----------...

Multi-Forums Directory.PHP SQL注入漏洞

Multi-Forums是一款基于PHP的WEB应用程序。 Multi-Forums不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞进行SQL攻击，获得敏感信息或操作数据库。 问题是由于'Directory.PHP'脚本对用户提交的WEB参数缺少过滤，提交恶意SQL查询作为参数数据，可更改原来的SQL逻辑，攻击者可以获得敏感信息或操作数据库。 Multi-Forums 目前没有详细解决方案提供： http://www.sebflipper.com/?page=scriptsmfp...

NMDeluxe 2.0.0 (id) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ====================================================== NMDeluxe 2.0.0 id Remote SQL Injection Vulnerability ====================================================== not sec group NMDeluxe 2.0.0 Class: SQL Injection Found: 30/08/2007 Remote:...

Ourspace 2.0.9 - 'uploadmedia.cgi' Arbitrary File Upload

++++++++++++++++++++++++++++++++++++ | Discovered by Breakerunit & Don | | Ourspace 2.0.9| script info: http://www.codedworld.com/download/our-space/26931.html Exploit: /cgi-bin/ourspace/newswire/uploadmedia.cgi dork: inurl:"/cgi-bin/ourspace/ Greetz to: Balcan Crew Members h4cky0u.org and my...

Micro CMS 3.5 (revert-content.php) Remote SQL Injection Vulnerability

No description provided by source. not sec group http://www.notsec.com [email protected] Micro CMS 3.5 Class: SQL Injection Found: 28/08/2007 Remote: Yes Site: http://www.impliedbydesign.com/ibd-micro-cms-static-content-manager.html Download: http://www.impliedbydesign.com/apps/microcms/microcms.zi...

prmsgid-sql.txt

--==+================================================================================+==-- --==+ Pictures Rating SQL Injection Vulnerbility +==-- --==+================================================================================+==-- AUTHOR: t0pP8uZz & xprog SITE: N/A DORK: allintext:"Latest...

joomlaexpose-rfu.txt

HHHHHHH HHHHHH HH HHHHHHHH HHHHHH HHHHHHHH IHHI HH HH HHHHHHHH HH HH HH HH HH HHHHHHHH HH IHHI HH HHH HH HHHHHHHH HH HH HH HH HH HH HH HH HH HHHH HH HH HHHHHHH HHHHHH HH HHHHHHH HHHHHH HH HH HH HH HH HHHHHHHH HH HH HH HH HH HH HH HH HH HHHH HH HH HH HH HH HHHHHHHH HH HH HH HH HHH HHHHHHHH HH HH H...

Pictures Rating (index.php msgid) Remote SQL Injection Vulnerbility

No description provided by source. --==+================================================================================+==-- --==+ Pictures Rating SQL Injection Vulnerbility +==-- --==+================================================================================+==-- AUTHOR: t0pP8uZz & xprog...

Pictures Rating (index.php msgid) Remote SQL Injection Vulnerbility

Exploit for unknown platform in category web applications =================================================================== Pictures Rating index.php msgid Remote SQL Injection Vulnerbility ===================================================================...

Pictures Rating - 'index.php?msgid' SQL Injection

--==+================================================================================+==-- --==+ Pictures Rating SQL Injection Vulnerbility +==-- --==+================================================================================+==-- AUTHOR: t0pP8uZz & xprog SITE: N/A DORK: allintext:"Latest...

Pictures Rating - index.php?msgid SQL Injection

Pictures Rating - index.php?msgid SQL Injection --==+================================================================================+==-- --==+ Pictures Rating SQL Injection Vulnerbility +==-- --==+================================================================================+==-- AUTHOR:...

eSyndiCat Directory Software - Multiple SQL Injections

eSyndiCat: Multiple SQL Injection's http://www.esyndicat.net/ ---------------------------------------------------------- Exploit coded and founded by d3v1l Date: 14.07.2007 [email protected] ----------------------------------------------------------- Greetz tO:- Security-Shell Members...

eSyndiCat Directory Software - Multiple SQL Injections

eSyndiCat Directory Software - Multiple SQL Injections eSyndiCat: Multiple SQL Injection's http://www.esyndicat.net/ ---------------------------------------------------------- Exploit coded and founded by d3v1l Date: 14.07.2007 [email protected]...

esyndicat-sql.txt

eSyndiCat: Multiple SQL Injection's http://www.esyndicat.net/ ---------------------------------------------------------- Exploit coded and founded by d3v1l Date: 14.07.2007 [email protected] ----------------------------------------------------------- Greetz tO:- Security-Shell Members...

FlashGameScript 1.7 - user SQL Injection

FlashGameScript 1.7 - user SQL Injection FlashGameScript = 1.7 member.php$user SQL-Injection Exploit Vulnrability Discovered By: Xenduer77 ---July 7th, 2007 $user Is passed straight to the query without being filtered. SQL-INJECTION: For Version 1.7: -------...

GameSiteScript <= 3.1 (profile id) Remote SQL Injection Vulnerability

No description provided by source. GameSiteScript Profile$id SQL-Injection Exploit Vulnerability Discovered By: Xenduer77 ---July 7th, 2007 $id Is passed straight to the query without being filtered. SQL-INJECTION: For Version 3.1: -------...