Joomla QPersonal SQL Injection

Exploit Title: Joomla Component QPersonel SQL Injection Vulnerability Date: 13.04.2010 Author: Valentin Category: webapps/0day Version: XSS security fix from 31.12.2009, 1.02 and before Tested on: CVE : Code : :::::::::::::::::::::::::::::::::::::: 0x1 :::::::::::::::::::::::::::::::::::::: |::...

Joomla Component QPersonel SQL Injection Vulnerability

No description provided by source. Exploit Title: Joomla Component QPersonel SQL Injection Vulnerability Date: 13.04.2010 Author: Valentin Category: webapps/0day Version: XSS security fix from 31.12.2009, 1.02 and before Tested on: Debian Lenny, MySQL 5 CVE : Code :...

Joomla! Component QPersonel 1.0.2 - SQL Injection

Joomla! Component QPersonel 1.0.2 - SQL Injection Exploit Title: Joomla Component QPersonel SQL Injection Vulnerability Date: 13.04.2010 Author: Valentin Category: webapps/0day Version: XSS security fix from 31.12.2009, 1.02 and before Tested on: Debian Lenny, MySQL 5 CVE : Code :...

Joomla! Component QPersonel 1.0.2 - SQL Injection

Exploit Title: Joomla Component QPersonel SQL Injection Vulnerability Date: 13.04.2010 Author: Valentin Category: webapps/0day Version: XSS security fix from 31.12.2009, 1.02 and before Tested on: Debian Lenny, MySQL 5 CVE : Code : :::::::::::::::::::::::::::::::::::::: 0x1...

CVE-2010-1072

Cross-site scripting XSS vulnerability in search.php in Sniggabo CMS 2.21 allows remote attackers to inject arbitrary web script or HTML via the q parameter...

CVE-2009-4736

Cross-site scripting XSS vulnerability in search.php in CommonSense CMS 5.0 allows remote attackers to inject arbitrary web script or HTML via the q parameter...

CVE-2009-4736: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in search.php in CommonSense CMS 5.0 allows remote attackers to inject arbitrary web script or HTML via the q parameter...

CVE-2010-1072: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in search.php in Sniggabo CMS 2.21 allows remote attackers to inject arbitrary web script or HTML via the q parameter...

CVE-2010-0699: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in index.php in VideoSearchScript Pro 3.5 allows remote attackers to inject arbitrary web script or HTML via the q parameter...

Dan Geer, In-Q-Tel

Anyone who has ever had a single conversation with Dan, or even seen him speak, will understand immediately why he’s on this list. Dan’s as smart as they come he has a Ph.D. in biostatistics! and his widely varied background gives him a truly unique perspective on security issues. His talks and...

CVE-2009-4575

Cross-site scripting XSS vulnerability in the Q-Personel comqpersonel component 1.0.2 RC2 for Joomla! allows remote attackers to inject arbitrary web script or HTML via the personelsira parameter in a sirala action to index.php...

Cross site scripting

Cross-site scripting XSS vulnerability in the Q-Personel comqpersonel component 1.0.2 RC2 for Joomla! allows remote attackers to inject arbitrary web script or HTML via the personelsira parameter in a sirala action to index.php...

CVE-2009-4575

Cross-site scripting XSS vulnerability in the Q-Personel comqpersonel component 1.0.2 RC2 for Joomla! allows remote attackers to inject arbitrary web script or HTML via the personelsira parameter in a sirala action to index.php...

CVE-2009-4575: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Q-Personel comqpersonel component 1.0.2 RC2 for Joomla! allows remote attackers to inject arbitrary web script or HTML via the personelsira parameter in a sirala action to index.php...

Sql injection

SQL injection vulnerability in the Q-Proje Siirler Bileseni comsiirler component 1.2 RC for Joomla! allows remote attackers to execute arbitrary SQL commands via the sid parameter in an sdetay action to index.php...

CVE-2009-3972

CVE-2009-3972 describes an SQL injection in the Q-Proje Siirler Bileseni (com_siirler) component for Joomla! version 1.2 RC, allowing remote attackers to inject arbitrary SQL via the sid parameter in the sdetay action of index.php. Affected software: com_siirler 1.2 RC on Joomla!. Root cause: imp...

CVE-2009-3972

SQL injection vulnerability in the Q-Proje Siirler Bileseni comsiirler component 1.2 RC for Joomla! allows remote attackers to execute arbitrary SQL commands via the sid parameter in an sdetay action to index.php...

CVE-2009-3972: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Q-Proje Siirler Bileseni comsiirler component 1.2 RC for Joomla! allows remote attackers to execute arbitrary SQL commands via the sid parameter in an sdetay action to index.php...

Q&A: Bruce Schneier

CNet’s Elinor Mills has produced an interesting Q&A interview with security guru Bruce Schneier where the cryptographer pokes fun at the National Cyber Security Month, talks about his background in crypto and working for the U.S. Defense Department, and says he fears privacy invasion more from...

AdaptBB <= 1.0 xss

Exploit for unknown platform in category web applications ================== AdaptBB = 1.0 xss ================== | D R U N K E N | || || || D A N I S H | || || |' R E D N E C K S '--''--''--' RESEARCH AND FUCKING HACKING: | DRUNKEN DANISH REDNECKS | || || || !!!!!!! | || || |' '--''--''--' =...