Classified Ultra ScriptsGenie Cross Site Scripting / SQL Injection

Exploit Title; Classified Ultra ScriptsGenie Multiple Vulnerabilities Date; 20/1/13 Author; 3spi0n Script Vendor or Software Link; http://www.hotscripts.com/listing/classified-ultra-scriptsgenie/ Category; Webapps Type; SQL Injection MySQLi Tested on; Ubuntu 12.10 / Win7 / Backtrack 5 Demo...

City Directory Review And Rating Script SQL Injection

Exploit Title: City Directory Review and Rating Script SQL Injection Vulnerability Date: 22.12.2012 Author: 3spi0n Script Vendor or Software Link: http://b-scripts.com/en/18-city-reviewer-yelp-clone.html Category: WebApps Type: SQL Injection MySQLi Tested On: Ubuntu 12.10 - Win7...

City Directory Review and Rating Script SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: City Directory Review and Rating Script SQL Injection Vulnerability Date: 22.12.2012 Author: 3spi0n Script Vendor or Software Link: http://b-scripts.com/en/18-city-reviewer-yelp-clone.html Category: WebApps Type: SQL Injection...

City Directory Review and Rating Script - search.php SQL Injection

City Directory Review and Rating Script - search.php SQL Injection Exploit Title: City Directory Review and Rating Script SQL Injection Vulnerability Date: 22.12.2012 Author: 3spi0n Script Vendor or Software Link: http://b-scripts.com/en/18-city-reviewer-yelp-clone.html Category: WebApps Type: SQ...

City Directory Review and Rating Script - 'search.php' SQL Injection

Exploit Title: City Directory Review and Rating Script SQL Injection Vulnerability Date: 22.12.2012 Author: 3spi0n Script Vendor or Software Link: http://b-scripts.com/en/18-city-reviewer-yelp-clone.html Category: WebApps Type: SQL Injection MySQLi Tested On: Ubuntu 12.10 - Win7...

Marketing Development Script SQL Injection Vulnerability

Marketing Development Script suffers from a remote SQL injection vulnerability. Note that this finding houses site-specific data. Exploit Title; Marketing Development Script SQL Injection Vulnerability Date; 3/12/12 Author; 3spi0n Script Vendor or Software Link; http://www.marketingdev.com/...

Marketing Development Script SQL Injection

Exploit Title; Marketing Development Script SQL Injection Vulnerability Date; 3/12/12 Author; 3spi0n Script Vendor or Software Link; http://www.marketingdev.com/ Category; Webapps Type; SQL Injection MySQLi Tested on; Ubuntu 12.10 / Win7 / Backtrack 5 Demo Analyzing ;...

YT-Videos Script SQL Injection

Exploit Title; YT-Videos Script SQL Injection Vulnerability Date ; 6/8/12 Author ; 3spi0n Script Vendor or Software Link ; http://www.hotscripts.com/listing/yt-videos-script/ - http://www.webtoolsin.com/products-3-yt-videos-script.html Category ; Webapps Type ; SQL Injection MySQLi Tested on ;...

Chiangrai Enter Soft Design SQL Injection

Exploit Title; Chiangrai Enter Soft Design SQL Injection Vulnerability Date ; 28/6/12 Author ; 3spi0n Script Vendor or Software Link ; http://www.chiangraientersoft.com/ Category ; Webapps Type ; SQL Injection MySQLi Tested on ; Ubuntu / Win7 / Backtrack Demo Analyzing ;...

Voila Web Design SQL Injection

Exploit Title; Voila Web Design SQL Injection Vulnerability Date ; 24/6/12 Author ; 3spi0n Script Vendor or Software Link ; http://www.voilasyria.com/ Category ; Webapps Type ; SQL Injection MySQLi Tested on ; Ubuntu / Win7 / Backtrack Demo Analyzing ;...

QuickBlog v0.8 CMS - Multiple Web Vulnerabilities

Exploit for php platform in category web applications Title: ====== QuickBlog v0.8 CMS - Multiple Web Vulnerabilities Introduction: ============= QuickBlog est un gestionnaire de weblog ecrit en PHP4 compatible PHP5 et MySQL compatible MySQLi multi utilisateur multi langue multi theme Il est tres...

Sihebs Technologies SQL Injection

Exploit Title: Sihebs Technologies SQL Injection Vulnerability Date: 12/03/2012 Author: 3spi0n Software Website: www.sihebs.co.tz Tested On: BackTrack 5 - Win7 Ultimate Platform: Php $ Vulnerable File: changer $ Demo ; www.marineparks.go.tz/parksinfo.php?id=1' MySQLi Dar bi Koridor Benimki, Kendi...

Longtail E-Media Design SQL Injection

Exploit Title: Longtail E-media Design SQL Injection Vulnerability Date: 07/03/2012 Author: 3spi0n Software Website: http://www.longtail.info/ Tested On: BackTrack 5 - Win7 Ultimate Platform: Php $ Vulnerable File: inners.php $ Demo ; www.nast.org.np/inner.php?page=newsdetail&id=2' MySQLi Dar bi...

Web Net Marketing Design SQL Injection

Exploit Title: web net marketing Design SQL Injection Vulnerability Date: 03/03/2012 Author: 3spi0n Software Website: http://www.webnetmarketing.ltd.uk/ Tested On: BackTrack 5 - Win7 Ultimate Platform: Php $ Vulnerable File: news-detail.php $ Demo ;...

Duru Design SQL Injection

Exploit Title: Duru Design SQL Injection Vulnerability Date: 03/03/2012 Author: 3spi0n Software Website: http://www.muratduru.com.tr/ Tested On: BackTrack 5 - Win7 Ultimate Platform: Php $ Vulnerable File: details.php $ Demo ; www.sariogluemlak.com.tr/details.php?masterid=SG-000155' MySQLi Dar bi...

vBSkinWorks SQL Injection

Exploit Title: vBSkinWorks "VCPanel" Sql Injection Vulnerability member.php Date: 17/02/2012 - 19:18 Author: 3spi0n Software Website: http://www.forumflux.com/ Tested On: BackTrack 5 - Win7 Ultimate Platform: Php $ Vulnerable File: members.php $ Demo ; ibh.vcp.ir/forum/members.php?member=1' MySQL...

codeigniter -- SQL injection vulnerability

The CodeIgniter changelog reports: An improvement was made to the MySQL and MySQLi drivers to prevent exposing a potential vector for SQL injection on sites using multi-byte character sets in the database client connection. An incompatibility in PHP versions 5.0.7 with mysqlsetcharset creates a...

PHP 5.3.2 <= 5.3.3 SQLi Vulnerability

PHP is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:php:php"; ifdescription...

PHP 5.3.2, 5.3.3 Security Bypass Vulnerability

PHP is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:php:php"; ifdescription...

CVE-2010-4700

The setmagicquotesruntime function in PHP 5.3.2 and 5.3.3, when the MySQLi extension is used, does not properly interact with use of the mysqlifetchassoc function, which might make it easier for context-dependent attackers to conduct SQL injection attacks via crafted input that had been properly...