Simple Customer 1.2 (contact.php id) SQL Injection Vulnerability

No description provided by source. --==+================================================================================+==-- --==+ Simple Customer 1.2 SQL Injection Vulnerabilitys +==-- --==+================================================================================+==-- Discovered By:...

Microsoft Windows DNS Stub Resolver Cache Poisoning (MS08-020)

Hello BugTraq, The Microsoft Windows DNS stub resolver the component in Windows that queries the upstream DNS server for address resolutions on behalf of most Windows programs, e.g. browsers sends predictable DNS queries with respect to DNS transaction ID and source UDP port. This allows some...

softwareindex-sql.txt

--==+================================================================================+==-- --==+ Software Index 1.1 SQL Injection Vulnerbilitys +==-- --==+================================================================================+==-- Discovered By: t0pP8uZz & xprog Discovered On: 6 April...

Affiliate Directory (cat_id) Remote SQL Injection Vulnerbility

No description provided by source. --==+================================================================================+==-- --==+ Affiliate Directory SQL Injection Vulnerbility +==-- --==+================================================================================+==-- AUTHOR: t0pP8uZz &...

Software Index 1.1 (cid) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications =========================================================== Software Index 1.1 cid Remote SQL Injection Vulnerability ===========================================================...

phpphotogal-sql.txt

--==+================================================================================+==-- --==+ PHP Photo Gallery 1.0 SQL Injection Vulnerbilitys +==-- --==+================================================================================+==-- Discovered By: t0pP8uZz & xprog Discovered On: 4 Apri...

affiliate-sql.txt

--==+================================================================================+==-- --==+ Affiliate Directory SQL Injection Vulnerbility +==-- --==+================================================================================+==-- AUTHOR: t0pP8uZz & xprog SITE: N/A DORK: altavista.com...

Affiliate Directory - 'cat_id' SQL Injection

--==+================================================================================+==-- --==+ Affiliate Directory SQL Injection Vulnerbility +==-- --==+================================================================================+==-- AUTHOR: t0pP8uZz & xprog SITE: N/A DORK: altavista.com...

MyBlog 1.x - SQL Injection Remote File Inclusion

MyBlog 1.x - SQL Injection Remote File Inclusion source: https://www.securityfocus.com/bid/28313/info MyBlog is prone to multiple input-validation vulnerabilities, including: - Multiple SQL-injection vulnerabilities - Multiple remote file-include vulnerabilities - A privilege-escalation...

Acajoom Component for Joomla! 'mailingid' Parameter SQLi

The version of the Acajoom component for Joomla! running on the remote host is affected by a SQL injection vulnerability in the class.mailing.php script due to improper sanitization of user-supplied input to the 'mailingid' parameter before using it to construct database queries in the...

MyBlog 1.x - SQL Injection / Remote File Inclusion

source: https://www.securityfocus.com/bid/28313/info MyBlog is prone to multiple input-validation vulnerabilities, including: - Multiple SQL-injection vulnerabilities - Multiple remote file-include vulnerabilities - A privilege-escalation vulnerability An attacker may exploit these issues to...

phpnukekuran-sql.txt

php-nuke Kuran SQL Injectionsurano AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 MAİL : [email protected] DORK 1 : allinurl: "modules php name Kuran"surano DORK 2 : allinurl: "modules php name Kuran" EXPLOIT : admin...

Cacti index.php/sql.php Login Action login_username Parameter SQL Injection

The remote host is running Cacti, a web-based front-end to RRDTool for network graphing. The version of Cacti installed on the remote host fails to sanitize user input to the 'loginusername' parameter before using it in the 'authlogin.php' script to perform database queries. Regardless of PHP's...

AkoGallery Component for Mambo / Joomla! 'id' Parameter SQLi

The version of the AkoGallery component for Joomla! running on the remote host is affected by a SQL injection vulnerability in the akogallery.php script due to improper sanitization of user-supplied input to the 'id' parameter before using it to construct database queries in the GalleryHeader...

CandyPress Store admin/utilities_ConfigHelp.asp helpfield Parameter SQL Injection

The remote host is running CandyPress, a commercial shopping cart script written in ASP. The version of CandyPress installed on the remote host fails to sanitize user-supplied input to the 'helpfield' parameter of the 'admin/utilitiesConfigHelp.asp' script before using it to perform database...

cpg-sql.txt

toHex$sql . ', ' . $this-toHex'bazik' . ' LIMIT 1,1/'; $b1 = 'bazik'; $a2 = $sql; $b2 = 'bazik'; $arr = array$a1 = $b1, $a2 = $b2; return $this-GLOBALS'prefix' . 'albpw=' . rawurlencodeserialize$arr; function toHex$str for $i=0; $i GLOBALS'host', 80, $errno, $errstr, 30; if!$fp die"- Can't connec...

Pixelpost index.php parent_id Parameter SQL Injection

The remote host is running Pixelpost, a photo blog application based on PHP and MySQL. The version of Pixelpost installed on the remote host fails to sanitize input to the 'parentid' parameter of the 'index.php' script before using it to perform database queries. Provided PHP's 'magicquotesgpc'...

Debian Security Advisory DSA 771-1 (pdns)

The remote host is missing an update to pdns announced via advisory DSA 771-1. Several problems have been discovered in pdns, a versatile nameserver that can lead to a denial of service. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2005-2301 Norbert...

X7 Chat index.php day Parameter SQL Injection

The remote host is running X7 Chat, a web-based chat program written in PHP. The version of X7 Chat installed on the remote host fails to sanitize input to the 'day' parameter of the 'index.php' script when 'page' is set to 'event' before using it in 'sources/infobox.php' to construct database...

Ubuntu 6.06 LTS / 6.10 / 7.04 / 7.10 : postgresql vulnerabilities (USN-568-1)

Nico Leidecker discovered that PostgreSQL did not properly restrict dblink functions. An authenticated user could exploit this flaw to access arbitrary accounts and execute arbitrary SQL queries. CVE-2007-3278, CVE-2007-6601 It was discovered that the TCL regular expression parser used by...