BosNews 4.0 - article SQL Injection

BosNews 4.0 - article SQL Injection By CrackersChild [email protected] BosNews v4.0 Remote Sql injection Exploit Script website:http://www.bosdev.com Exploit : " site.com/path/news.php?news=more&article=248+union%20select%200,1,username,password,4%20from%20bosdevUUS/ milw0rm.com 2008-04-14...

Unfixed XSS vulnerability at www.wiltronics.com.au

Security researcher zyrus, has submitted on 21/03/2008 a cross-site-scripting XSS vulnerability affecting www.wiltronics.com.au, which at the time of submission ranked 2283867 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 26/03/2008. It is...

Sql injection

SQL injection vulnerability in news.php in beContent 0.3.1 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-0921

SQL injection vulnerability in news.php in beContent 0.3.1 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-0921

SQL injection vulnerability in news.php in beContent 0.3.1 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-0921: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in news.php in beContent 0.3.1 allows remote attackers to execute arbitrary SQL commands via the id parameter...

BeContent v.031 (id) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ======================================================= BeContent v.031 id Remote SQL Injection Vulnerability ======================================================= Founder By email protectedKing BeContent v.031 id Remote Sql Vuln. Exploi...

BeContent 031 - 'id' SQL Injection

Founder By Cr@zyKing HackShow.Us BeContent v.031 id Remote Sql Vuln. Down : http://code.google.com/p/becontent/downloads/list?idmenu=9 Exploit: news.php?id=-3+union+select+1,concatws0x3a,username,password,3,4+from+users Greatz : Barakuda GraBBerZ team & CrackersChild & Eno7 & DreamTurk & Gencturk...

CVE-2007-6584: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in 1024 CMS 1.3.1 allow remote attackers to include and execute arbitrary local files via a .. dot dot in 1 the lang parameter to pages/print/default/ops/news.php or 2 the themedir parameter to pages/download/default/ops/search.php; or the adminthemedi...

Unfixed XSS vulnerability at www.esatmuhtaroglu.com

Security researcher Narcoticxs, has submitted on 12/08/2007 a cross-site-scripting XSS vulnerability affecting www.esatmuhtaroglu.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 21/08/2007. It is...

Unfixed XSS vulnerability at polinas.com

Security researcher Narcoticxs, has submitted on 12/08/2007 a cross-site-scripting XSS vulnerability affecting polinas.com, which at the time of submission ranked 1341376 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 21/08/2007. It is current...

Unfixed XSS vulnerability at www.oyababygift.com

Security researcher Narcoticxs, has submitted on 12/08/2007 a cross-site-scripting XSS vulnerability affecting www.oyababygift.com, which at the time of submission ranked 6062113 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 21/08/2007. It is...

Sql injection

SQL injection vulnerability in news.php in Content Injector 1.52 allows remote attackers to execute arbitrary SQL commands via the cat parameter to index.php. NOTE: some of these details are obtained from third party information...

CVE-2007-6137: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in news.php in Content Injector 1.52 allows remote attackers to execute arbitrary SQL commands via the cat parameter to index.php. NOTE: some of these details are obtained from third party information...

Code injection

Direct static code injection vulnerability in acp/savenews.php in Sciurus Hosting Panel, possibly 2.0.3, allows remote attackers to inject arbitrary PHP code via the filecontents parameter, which can be executed by accessing includes/news.php...

CVE-2007-6082

Direct static code injection vulnerability in acp/savenews.php in Sciurus Hosting Panel, possibly 2.0.3, allows remote attackers to inject arbitrary PHP code via the filecontents parameter, which can be executed by accessing includes/news.php...

CVE-2007-4861

SAXON 5.4, with displayerrors enabled, allows remote attackers to obtain sensitive information via 1 a direct request for news.php, 2 an invalid use of a newsid array parameter to admin/edit-item.php, and possibly unspecified vectors related to additional scripts in 3 admin/, 4 rss/, and 5 the ro...

Design/Logic Flaw

SAXON 5.4, with displayerrors enabled, allows remote attackers to obtain sensitive information via 1 a direct request for news.php, 2 an invalid use of a newsid array parameter to admin/edit-item.php, and possibly unspecified vectors related to additional scripts in 3 admin/, 4 rss/, and 5 the ro...

CVE-2007-4861

SAXON 5.4 is affected by multiple path disclosure flaws when display_errors is enabled. Exploitation vectors include direct requests to news.php, improper handling of newsid in admin/edit-item.php, and other scripts under admin/, rss/, and the installation root, which reveal server paths in error...

CVE-2007-4861

SAXON 5.4, with displayerrors enabled, allows remote attackers to obtain sensitive information via 1 a direct request for news.php, 2 an invalid use of a newsid array parameter to admin/edit-item.php, and possibly unspecified vectors related to additional scripts in 3 admin/, 4 rss/, and 5 the ro...