166 matches found
PHP City Portal Script Software - SQL Injection
PHP City Portal Script Software - SQL Injection Exploit Title: Php City Portal Script Software SQL Injection Google Dork: Powered by PHPCityPortal.com Date: Decembar/07/2011 Author: Don BalcanCrew & BalcanHack Software Link: http://phpcityportal.com Version: 1.1 Tested on: Apache Unix An attacker...
PHP City Portal Script 1.1 SQL Injection
Exploit Title: Php City Portal Script Software SQL Injection Google Dork: Powered by PHPCityPortal.com Date: Decembar/07/2011 Author: Don BalcanCrew & BalcanHack Software Link: http://phpcityportal.com Version: 1.1 Tested on: Apache Unix An attacker may execute arbitrary SQL statements on the...
Sql injection
SQL injection vulnerability in user-profile.php in 2daybiz Video Community Portal Script allows remote attackers to execute arbitrary SQL commands via the userid parameter...
CVE-2010-2508
CVE-2010-2508 describes a SQL injection in the 2daybiz Video Community Portal Script, specifically in the file user-profile.php, where the userid parameter can be manipulated by an attacker to execute arbitrary SQL commands. The vulnerability is documented across multiple sources (NVD, Red Hat ad...
CVE-2010-2508: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in user-profile.php in 2daybiz Video Community Portal Script allows remote attackers to execute arbitrary SQL commands via the userid parameter...
2daybiz B2B Portal Script SQL Injection
Exploit Title: 2daybiz B2B Portal Script SQL injection Vulnerability Date: 24/06/2010 Author: JaMbA Script url: http://www.2daybiz.com/b2bportalscript.html Version: N/A Tested on: Windows CVE : ::::::::::::::::::::::::: ::::::::::::::::::::::::: =================Exploit====== ============ EXPL0!T...
2daybiz B2B Portal Script SQL Injection
Exploit Title: 2daybiz B2B Portal Script Sql Injection Date: 25/06/2010 Author: r45c4l Email: r45c4lathotmaildotcom Site : www.garage4hackers.com Script url: http://www.2daybiz.com/b2bportalscript.html Version: N/A Tested on: Windows CVE : ::::::::::::::::::::::::: :::::::::::::::::::::::::...
CVE-2010-2458
Cross-site scripting XSS vulnerability in video.php in 2daybiz Video Community Portal Script 1.0 allows remote attackers to inject arbitrary web script or HTML via the videoid parameter...
CVE-2010-2459
SQL injection vulnerability in video.php in 2daybiz Video Community Portal Script 1.0 allows remote attackers to execute arbitrary SQL commands via the videoid parameter...
CVE-2010-2458
CVE-2010-2458 is an XSS vulnerability in the 2daybiz Video Community Portal Script 1.0, exploitable via the videoid parameter in video.php. The root cause is unsanitized input leading to arbitrary script execution if an attacker injects HTML/script. Public references describe the vulnerability an...
CVE-2010-2459
CVE-2010-2459 describes an SQL injection in the file video.php of the product 2daybiz Video Community Portal Script 1.0 . The vulnerability is triggered via the videoid parameter, allowing remote attackers to execute arbitrary SQL commands. According to NVD, the CVSS v2 vector is AV:N/AC:L/Au:N/C...
CVE-2010-2458: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in video.php in 2daybiz Video Community Portal Script 1.0 allows remote attackers to inject arbitrary web script or HTML via the videoid parameter...
CVE-2010-2459: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in video.php in 2daybiz Video Community Portal Script 1.0 allows remote attackers to execute arbitrary SQL commands via the videoid parameter...
2DayBiz B2B Portal Script - SQL Injection
2DayBiz B2B Portal Script - SQL Injection Exploit Title: 2daybiz B2B Portal Script SQL injection Vulnerability Date: 24/06/2010 Author: JaMbA Script url: http://www.2daybiz.com/b2bportalscript.html Version: N/A Tested on: Windows CVE : =================Exploit================== EXPL0!T...
2DayBiz B2B Portal Script - SQL Injection
Exploit Title: 2daybiz B2B Portal Script SQL injection Vulnerability Date: 24/06/2010 Author: JaMbA Script url: http://www.2daybiz.com/b2bportalscript.html Version: N/A Tested on: Windows CVE : =================Exploit================== EXPL0!T http://server/path/companyinfo.php?id=83SQL...
CVE-2010-1604
Multiple SQL injection vulnerabilities in adminlogin.php in NCT Jobs Portal Script allow remote attackers to execute arbitrary SQL commands via the 1 user parameter aka login field and 2 passwd parameter aka password field. NOTE: some of these details are obtained from third party information...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in NCT Jobs Portal Script allow remote attackers to inject arbitrary web script or HTML via the 1 search, 2 Keywords, 3 Tags, or 4 Desired City field...
CVE-2010-1606
CVE-2010-1606 describes multiple cross-site scripting (XSS) vulnerabilities in the NCT Jobs Portal Script. The flaws allow remote attackers to inject arbitrary web script or HTML via the (1) search, (2) Keywords, (3) Tags, or (4) Desired City fields. Exploitation details (e.g., exploit strings, p...
CVE-2010-1605
CVE-2010-1605 affects isearch.php in the NCT Jobs Portal Script, where SQL injection is possible through the anyword and cityname parameters. The underlying issue is likely improper input handling allowing malicious SQL to be executed by remote attackers, with the NVD entry citing a base score of...
CVE-2010-1604
Multiple SQL injection vulnerabilities in adminlogin.php in NCT Jobs Portal Script allow remote attackers to execute arbitrary SQL commands via the 1 user parameter aka login field and 2 passwd parameter aka password field. NOTE: some of these details are obtained from third party information...