3639 matches found
CVE-2008-4901: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in admin/admin.php in Article Publisher Pro 1.5 allows remote attackers to execute arbitrary SQL commands via the username parameter...
CVE-2008-4902
CVE-2008-4902 is an SQL injection vulnerability in Article Publisher Pro 1.5 ’s file contact_author.php , exploitable via the userid parameter to execute arbitrary SQL commands remotely. The NVD entry lists a NETWORK attack vector with LOW complexity and no authentication, yielding Partial impact...
CVE-2008-4901
The CVE-2008-4901 entry documents a SQL injection in Article Publisher Pro 1.5. Affected component: admin/admin.php, parameter username. Root cause is improper handling of user-supplied input enabling arbitrary SQL execution by remote attackers. Impact is partial confidentiality, integrity, and a...
Article Publisher PRO 1.5 Insecure Cookie Handling Vulnerability
No description provided by source. Article Publisher PRO Insecure Cookie Handling Vulnerability version: 1.5 ---------------------------------------------------------- Discovered By: ZoRLu Date: 01.11.2008 Home: www.z0rlu.blogspot.com contact: [email protected] N0T: YALNIZLIK, YiTiRDi ANLAMINI...
Article Publisher PRO (userid) Remote SQL Injection Exploit
No description provided by source. Kira has decide be back after halloween Discovered by : Mountassif Moad Type Gap : Blind Sql Injection Script : Article Publisher Pro : http://www.phparticlescript.com/ Greetz : Allah , All my freind P0c : http://localhost/contactauthor.php?userid=1+and+1=1 true...
articlepro-sql.txt
Kira has decide be back after halloween Discovered by : Mountassif Moad Type Gap : Blind Sql Injection Script : Article Publisher Pro : http://www.phparticlescript.com/ Greetz : Allah , All my freind P0c : http://localhost/contactauthor.php?userid=1+and+1=1 true...
Article Publisher PRO 1.5 Insecure Cookie Handling Vulnerability
Exploit for unknown platform in category web applications ================================================================ Article Publisher PRO 1.5 Insecure Cookie Handling Vulnerability ================================================================ Article Publisher PRO Insecure Cookie Handli...
Graugon PHP Article Publisher Pro 1.5 - Insecure Cookie Handling
Article Publisher PRO Insecure Cookie Handling Vulnerability version: 1.5 ---------------------------------------------------------- Discovered By: ZoRLu Date: 01.11.2008 Home: www.z0rlu.blogspot.com contact: [email protected] N0T: YALNIZLIK, YiTiRDi ANLAMINI YALNIZLIGIMDA : N0T: a.q kpss :...
articlepublisher-sql.txt
/ / \ / / / / / / / / / / / /\ / / / / / / / / / / / / / / \ / // // / / / / // // / // / / / / / / / // / / / / / / //, / // //,/// // // /,// // // // Discovered by : Hakxer Type Gap : Bybass Login Script : Article Publisher Pro : http://www.phparticlescript.com/ Greetz : Allah ,...
Article Publisher PRO 1.5 (SQL Injection) Auth Bypass Vulnerability
No description provided by source. / / \ / / / / / / / / / / / /\ / / / / / / / / / / / / / / \ / // // / / / / // // / // / / / / / / / // / / / / / / //, / // //,/// // // /,// // // // Discovered by : Hakxer Type Gap : Bybass Login Script : Article Publisher Pro :...
Article Publisher PRO 1.5 (SQL Injection) Auth Bypass Vulnerability
Exploit for unknown platform in category web applications =================================================================== Article Publisher PRO 1.5 SQL Injection Auth Bypass Vulnerability =================================================================== Discovered by : Hakxer Type Gap :...
Article Publisher PRO - 'userid' SQL Injection
Kira has decide be back after halloween Discovered by : Mountassif Moad Type Gap : Blind Sql Injection Script : Article Publisher Pro : http://www.phparticlescript.com/ Greetz : Allah , All my freind P0c : http://localhost/contactauthor.php?userid=1+and+1=1 true...
Article Publisher PRO (userid) Remote SQL Injection Exploit
Exploit for unknown platform in category web applications =========================================================== Article Publisher PRO userid Remote SQL Injection Exploit =========================================================== Kira has decide be back after halloween Discovered by :...
Article Publisher PRO 1.5 - Authentication Bypass
Article Publisher PRO 1.5 - Authentication Bypass / / \ / / / / / / / / / / / /\ / / / / / / / / / / / / / / \ / // // / / / / // // / // / / / / / / / // / / / / / / //, / // //,/// // // /,// // // // Discovered by : Hakxer Type Gap : Bybass Login Script : Article Publisher Pro :...
Article Publisher PRO - userid SQL Injection
Article Publisher PRO - userid SQL Injection Kira has decide be back after halloween Discovered by : Mountassif Moad Type Gap : Blind Sql Injection Script : Article Publisher Pro : http://www.phparticlescript.com/ Greetz : Allah , All my freind P0c :...
Article Publisher PRO 1.5 - Authentication Bypass
/ / \ / / / / / / / / / / / /\ / / / / / / / / / / / / / / \ / // // / / / / // // / // / / / / / / / // / / / / / / //, / // //,/// // // /,// // // // Discovered by : Hakxer Type Gap : Bybass Login Script : Article Publisher Pro : http://www.phparticlescript.com/ Greetz : Allah ,...
Gentoo Security Advisory GLSA 200502-14 (mod_python)
The remote host is missing updates announced in advisory GLSA 200502-14. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
Microsoft Word无序列表处理远程内存破坏漏洞
BUGTRAQ ID: 29769 CNCAN ID：CNCAN-2008061908 Microsoft Word是一款流行的文字处理程序。 Microsoft Word无序列表处理存在内存破坏问题，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击，可能以应用程序权限执行任意指令。 目前没有详细漏洞细节提供。 Microsoft Word 2003 SP3 Microsoft Word 2003 SP2 + Microsoft Office 2003 SP1 + Microsoft Office 2003 SP1 + Microsoft Office 2003 0 + Microsof...
Microsoft Publisher对象处理器验证漏洞(MS08-027)
BUGTRAQ ID: 29158 CVECAN ID: CVE-2008-0119 Publisher是微软Office办公软件套件中用于创建、个性化和共享各种出版物和营销材料的工具。 Publisher验证对象头数据的方式中存在一个远程执行代码漏洞，攻击者可能通过发送特制的Publisher文件来利用该漏洞，该文件可能作为电子邮件附件提供或者宿主在特制的或被入侵的网站上。...
