CVE-2009-4795: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Xlight FTP Server before 3.2.1, when ODBC authentication is enabled, allow remote attackers to execute arbitrary SQL commands via the 1 USER aka username or 2 PASS aka password command...

Istgah for Centerhost - Multiple Vulnerabilities

Istgah for Centerhost - Multiple Vulnerabilities ======================================================================================== | Title : Istgah for Centerhost Mullti Vulnerability | Author : indoushka | email : [email protected] | Home : www.iqs3cur1ty.com | Web Site :...

Istgah for Centerhost - Multiple Vulnerabilities

======================================================================================== | Title : Istgah for Centerhost Mullti Vulnerability | Author : indoushka | email : [email protected] | Home : www.iqs3cur1ty.com | Web Site : http://dl.p30vel.ir/scripts/IstgahforCenterhostp30vel.ir.zip ...

Istgah for Centerhost Mullti Vulnerability

Exploit for php platform in category web applications ========================================== Istgah for Centerhost Mullti Vulnerability ========================================== ======================================================================================== | Title : Istgah for...

Faweb_2 - Multiple Vulnerabilities

======================================================================================== | Title : Faweb2 Mullti Vulnerability | Author : indoushka | email : [email protected] | Home : www.iqs3cur1ty.com | Web Site : | Tested on: windows SP2 Français V.Pnx2 2.0 + Lunix Français v.9.4 Ubuntu |...

httpdx 1.5.3b Pre-Auth Crash

Title: httpdx v1.5.3b Multiple - Remote Pre-Authentication DoS PoC crash From: The eh?-Team || The Great White Fuzz we're not sure yet Found by: loneferret Hat's off to dookie2000ca Date: 13/03/2010 Software link: http://httpdx.sourceforge.net/downloads/ Tested on: Windows XP SP3 Professional Nod...

Ac4p.com Gallery 1.0 Cross Site Scripting / Shell Upload / Bypass / Disclosure

======================================================================================== | Title : Ac4p.com Gallery v1.0 Mullti Vulnerability | Author : indoushka | email : [email protected] | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria -00213771818860 | Web Site : www.iq-ty.com |...

Coupons By Pass Admin Vulnerability

Exploit for unknown platform in category web applications =================================== Coupons By Pass Admin Vulnerability =================================== ======================================================================================== | Title : Coupons By Pass Admin...

Man in the Browser: Inside the Zeus Trojan

Man in the Browser a.k.a MITB is a new breed of attacks whose primary objective is to spy on browser sessions mostly banking and in that process intercept and modify the web page contents transparently in the background. In a classic MITB attack, it’s very likely that what the user is seeing on...

Blog Ink Setting Bypass

======================================================================================== | Title : blog ink By Pass Setting Vulnerability | Author : indoushka | email : [email protected] | Home : www.iq-ty.com/vb | Script Home : powered by blog ink | Dork : Powered by PHP Melody 1.5.3 | Teste...

CVE-2009-4597: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in index.php in PHP Inventory 1.2 allow 1 remote authenticated users to execute arbitrary SQL commands via the userid parameter in a users details action, and allow remote attackers to execute arbitrary SQL commands via the 2 user username and 3 pass passwor...

VP-ASP Shopping Cart 7.0 DB Download Vulnerability

Exploit for asp platform in category web applications ================================================== VP-ASP Shopping Cart 7.0 DB Download Vulnerability ================================================== ======================================================================================== |...

SendStudio 4.0.1 Cross Site Scripting

======================================================================================== | Title : SendStudio v4.0.1 Mullti Vulnerability | Author : indoushka | email : [email protected] | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria -00213771818860 | Total alerts found : 2 | High :...

SendStudio v4.0.1 Mullti Vulnerabilities

No description provided by source. ======================================================================================== | Title : SendStudio v4.0.1 Mullti Vulnerability | Author : indoushka | email : [email protected] | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria -0021377181886...

TomatoCart Backup Disclosure

======================================================================================== | Title : TomatoCart Backup Vulnerability | | Author : indoushka | | email : [email protected] | | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria -00213771818860 | | EDB-ID : | | CVE-ID : | |...

WordPress Plugin Pyrmont 2.x - SQL Injection

WordPress Plugin Pyrmont 2.x - SQL Injection WordPress and Pyrmont V2. SQL Injection Vulnerability Plugin Home: http://wordpress.org/extend/themes/pyrmont-v2 Author: Gamoscu Site: www.1923turk.biz Site: http://gamoscu.wordpress.com/ Exploit:...

Pre Job Board 1.0 - Authentication Bypass

Pre Job Board 1.0 - Authentication Bypass Title: Pre Job Board 1.0 SQL Bypass Vulnerability Date: 17/12/2009 Author: bi0 Software Link: http://www.preprojects.com/jobs.asp Version : 1.0 CVE : /\ == \ /\ \ /\ \ \ \ \ \ \ \ \ /\ \ \ \ \ \ \ \ // // // 01000010 01101001 01001111...

IRAN N.E.T E-commerce Group SQL Injection Vulnerability

Exploit for unknown platform in category web applications ======================================================= IRAN N.E.T E-commerce Group SQL Injection Vulnerability ======================================================= / Software Information + Vendor : http://iranmc.org + script : IRAN N.E...

Robert Zimmerman PHP / MySQL Scripts - Authentication Bypass

--------------------------------------------------- - Robert Zimmerman PHP / MYSQL SCRIPTS ADMIN BYPASS - --------------------------------------------------- EXPLOIT : Login : '-' Pass : '-' And u Got admin acces ; / hakerzy ze szkocji ; ------------------------------ ---- DUNDEE ----- POLISH ---...

Oracle 9i XDB FTP PASS Overflow (win32)

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Oracle 9i XD...