CVE-2014-1618: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in UAEPD Shopping Cart Script allow remote attackers to execute arbitrary SQL commands via the 1 catid or 2 pid parameter to products.php or id parameter to 3 page.php or 4 news.php...

HOA Online Resource <= Remote (news.php) SQLi Vulnerability

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

Influence Design <= Remote (news.php) Based SQL Injection

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

BlackNova Traders SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: BlackNova Traders SQL Injection Vulnerability Date : 2/14/2013 Author : ITTIHACK Home : http://ittihack.com Vendor : http://blacknova.net/ Download : http://sourceforge.net/projects/blacknova/ Version : 0.663 Category : webapps...

BlackNova Traders SQL Injection

BlackNova Traders SQL Injection Vulnerability Software : BlackNova Date : 2/12/2013 Vendor : http://blacknova.net/ Download : http://sourceforge.net/projects/blacknova/ Language : PHP Tested on: Windows OS + Apache Server Author : ITTIHACK Home : http://ittihack.com Description BlackNova Traders ...

CVE-2012-1414: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in manager/news.php in Plume CMS 1.2.4 and earlier allows remote attackers to hijack the authentication of administrators for requests that create News pages via a publish action...

cgCraft LLC SQL Injection

---------------------------------------------------------------- cgCraft llc SQL Injection Vulnerability ---------------------------------------------------------------- Exploit Title : cgCraft llc SQL Injection Vulnerability Author : Hack Center Security Team Discovered By : Net.W0lf Software Li...

CVE-2012-4868

The vulnerability CVE-2012-4868 affects Kunena component for Joomla! (Kunena 1.7.2). It is a SQL injection in news.php exploitable via the id parameter, enabling remote attackers to execute arbitrary SQL commands. CVSS2 base score 7.5 (HIGH) indicates potential impact to confidentiality, integrit...

CVE-2012-4868: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in news.php in the Kunena component 1.7.2 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter...

BJMaster Design SQL Injection

Exploit Title: BJMaster Design SQL Injection Vulnerability Date: 03/03/2012 Author: 3spi0n Software Website: http://www.bjmaster.com/ Tested On: BackTrack 5 - Win7 Ultimate Platform: Php $ Vulnerable File: news.php $ Demo ; www.tigella.it/news.php?ID=29' MySQLi Dar bi Koridor Benimki, Kendimi...

Unfixed XSS vulnerability at www.avem.fr

Security researcher Atmon3r, has submitted on 13/12/2011 a cross-site-scripting XSS vulnerability affecting www.avem.fr, which at the time of submission ranked 382141 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 16/12/2011. It is currently...

Admin Bot - 'news.php' SQL Injection

source: https://www.securityfocus.com/bid/50562/info Admin Bot is prone to an SQL Injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify dat...

e107 0.7.25 - news.php SQL Injection

e107 0.7.25 - news.php SQL Injection source: https://www.securityfocus.com/bid/47750/info e107 is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

ShelTec Inc. (news.php & news_*.php) => SQL Injection Vulnerability

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

parsclick portal Sql Injection Vulnerability

Exploit for php platform in category web applications + parsclick portal sql injection Vulnerability + Portal Name : parsclick + software : http://www.parsclick.com/webdev.asp + Author : d3c0der + Contact : email protected + special tnx : attackerz.ir , phc.ir...

Gloves In A Bottle Local File Inclusion

Gloves In A Bottle Local File Inclusion + Google dork : Gloves In A Bottle, Inc. All rights reserved + Contact : [email protected] - d3c0der.blogspot.com + special tnx : attackerz.ir , phc.ir --------------------------------------------------------------------------- + Vulnerability + path...

spidaNews 1.0 news.php (id) SQL Injection Vulnerability

Exploit for php platform in category web applications ----------------------------Information------------------------------------------------ +Name : spidaNews V.1.0 SQL injection Vulnerability news.php id +Autor : Easy Laster +Date : 02.04.2011 +Script : spidaNews V.1.0 +Download :...

spidaNews 1.0 SQL Injection

----------------------------Information------------------------------------------------ +Name : spidaNews V.1.0 SQL injection Vulnerability news.php id +Autor : Easy Laster +Date : 02.04.2011 +Script : spidaNews V.1.0 +Download : http://www.spidanet.de/webmaster/download/spidaNews.zip +Price : fr...

spidaNews 1.0 - news.php?id SQL Injection

spidaNews 1.0 - news.php?id SQL Injection ----------------------------Information------------------------------------------------ +Name : spidaNews V.1.0 SQL injection Vulnerability news.php id +Autor : Easy Laster +Date : 02.04.2011 +Script : spidaNews V.1.0 +Download :...

spidaNews 1.0 - 'news.php?id' SQL Injection

----------------------------Information------------------------------------------------ +Name : spidaNews V.1.0 SQL injection Vulnerability news.php id +Autor : Easy Laster +Date : 02.04.2011 +Script : spidaNews V.1.0 +Download : http://www.spidanet.de/webmaster/download/spidaNews.zip +Price : fr...