EFS Easy Chat Server 2.2 - Cross-Site Request Forgery (Change Admin Password)

EFS Easy Chat Server XSRF Change Admin Pass Vulnerability Booom!! Username: Password: Confirm Password: Email: chi le3ba...

EFS Easy Chat Server (XSRF) Change Admin Pass Vulnerability

Exploit for unknown platform in category remote exploits =========================================================== EFS Easy Chat Server XSRF Change Admin Pass Vulnerability =========================================================== EFS Easy Chat Server XSRF Change Admin Pass Vulnerability...

CVE-2008-6364: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in logonprocess.jsp in Ad Server Solutions Banner Exchange Solution Java allows remote attackers to execute arbitrary SQL commands via the 1 username uname parameter and 2 password pass parameter. NOTE: some of these details are obtained from third party information...

CVE-2008-6365: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in logon.jsp in Ad Server Solutions Ad Management Software Java allows remote attackers to execute arbitrary SQL commands via the 1 username and 2 password, related to the uname or pass parameters to logon.jsp or logonprocessing.jsp. NOTE: some of these details are...

CVE-2008-6376: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in main.asp in Jbook allows remote attackers to execute arbitrary SQL commands via the password pass parameter...

Sql injection

SQL injection vulnerability in admin/index.php in Dragan Mitic Apoll 0.7 beta and 0.7.5 allows remote attackers to execute arbitrary SQL command via the pass parameter...

CVE-2008-6272: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in admin/index.php in Dragan Mitic Apoll 0.7 beta and 0.7.5 allows remote attackers to execute arbitrary SQL command via the pass parameter...

NoticeWare Email Server NG PASS命令远程拒绝服务漏洞

BUGTRAQ ID: 31697 CVECAN ID: CVE-2008-6185 NoticeWare Email Server是用于Windows平台上的多线程电子邮件服务器，支持POP3和SMTP协议。 NoticeWare Email Server没有正确地处理多个POP3连接，远程攻击者可以通过发布登录请求的大量POP3连接导致邮件服务器崩溃。 NoticeWare Corporation NoticeWare E-mail Sever 5.1.2.2 厂商补丁： NoticeWare Corporation ----------------------...

CVE-2008-6220: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in login.php in Simple Document Management System SDMS 1.1.5 and 1.1.4, and possibly earlier, allows remote attackers to execute arbitrary SQL commands via the pass parameter...

CVE-2008-6185: Improper Input Validation

NoticeWare Email Server NG 5.1.2.2 allows remote attackers to cause a denial of service crash via multiple POP3 requests with a long PASS command...

CVE-2009-0447: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in default.asp in MyDesign Sayac 2.0 allow remote attackers to execute arbitrary SQL commands via 1 the user parameter aka UserName field or 2 the pass parameter aka Pass field to a admin/admin.asp or b the default URI under admin/. NOTE: some of these detai...

CVE-2009-0452: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in parents/login.php in Online Grades 3.2.4, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 uname or 2 pass parameter...

E-ShopSystem Auth Bypass / SQL Injection Multiple Vulnerabilities

Exploit for unknown platform in category web applications ================================================================= E-ShopSystem Auth Bypass / SQL Injection Multiple Vulnerabilities =================================================================...

CVE-2008-5926

Multiple SQL injection vulnerabilities in login.asp in ASP-DEv Internal E-Mail System allow remote attackers to execute arbitrary SQL commands via the 1 login parameter aka user field or the 2 password parameter aka pass field. NOTE: some of these details are obtained from third party information...

CVE-2009-0177

vmwarebase.dll, as used in the vmware-authd service aka vmware-authd.exe, in VMware Workstation 6.5.1 build 126130, 6.5.1 and earlier; VMware Player 2.5.1 build 126130, 2.5.1 and earlier; VMware ACE 2.5.1 and earlier; VMware Server 2.0.x before 2.0.1 build 156745; and VMware Fusion before 2.0.2...

Comersus Shopping Cart <= v6 Remote User Pass Exploit

No description provided by source. Title : Comersus Shopping Cart = v6 Remote User Pass Exploit Author : "ajann" from Turkey Contact : : S.Page : http://www.comersus.com/ $$ : Free Dork : Powered by Comersus v6 Shopping Cart DorkEx :...

Comersus Shopping Cart <= v6 Remote User Pass Exploit

Title : Comersus Shopping Cart = v6 Remote User Pass Exploit Author : "ajann" from Turkey Contact : : S.Page : http://www.comersus.com/ $$ : Free Dork : Powered by Comersus v6 Shopping Cart DorkEx : http://www.google.com.tr/search?hl=tr&q=Powered+by+Comersus+v6+Shopping+Cart&btnG=Ara&meta=...

Comersus Shopping Cart 6.0 - Remote User Pass

Comersus Shopping Cart 6.0 - Remote User Pass Title : Comersus Shopping Cart Name Last Name Company Phone Email...

Pizzis CMS <= 1.5.1 (visualizza.php idvar) Blind SQL Injection Exploit

No description provided by source. --+++=============================================================+++-- --+++====== Pizzis CMS = 1.5.1 Blind SQL Injection Exploit ======+++-- --+++=============================================================+++-- !/usr/bin/perl use strict; use warnings; use...

Pizzis CMS 1.5.1 - Blind SQL Injection

Pizzis CMS 1.5.1 - Blind SQL Injection --+++=============================================================+++-- --+++====== Pizzis CMS ". "\n+ Ex. : perl $0 localhost /pizziscms admin". "\n+ Greetz: my girlfriend, she has no idea about what is it $hostname, PeerPort = 80, Proto = "tcp", or die $!;...