CORELAN-10-008 - Multiple vulnerabilities found in evalmsi 2.1.03

|------------------------------------------------------------------| | | | / / / / | | / / / / / / / / / / / | | / // // / / / / / // / / / / / // / // / / / / / / | | /// //,// // //,// // // | | | | http://www.corelan.be:8800 | | [email protected] | | |...

Interspire Knowledgebase Manager 5.1.3 Cross Site Scripting / SQL Injection

!/bin/sh - Interspire Knowledge Manager - ====================================================================== Table of Contents Affected Software....................................................1 Severity.............................................................2 Vendor's Description of...

Sql injection

SQL injection vulnerability in rating.php in New 5 star Rating 1.0 allows remote attackers to execute arbitrary SQL commands via the det parameter...

CVE-2009-3965

SQL injection vulnerability in rating.php in New 5 star Rating 1.0 allows remote attackers to execute arbitrary SQL commands via the det parameter...

CVE-2009-3965

CVE-2009-3965 describes an SQL injection in rating.php of the application “New 5 star Rating” version 1.0, learnable via the det parameter. The underlying flaw enables remote attackers to execute arbitrary SQL commands, with the NVD noting a base score of 7.5 (HIGH) and network-exposed, low-compl...

CVE-2009-3965

SQL injection vulnerability in rating.php in New 5 star Rating 1.0 allows remote attackers to execute arbitrary SQL commands via the det parameter...

Ka edge talent cms injection vulnerability-vulnerability warning-the black bar safety net

Vulnerability author: magic springsB. S. N. Vulnerability source: http://www.hacker.com.cn Source code download: do it yourself clothed in. Program version: Ka edge talent CMS system V6. 0 2I only tested on a 6. 0 2, The old version we test it. Vulnerability rating: high Vulnerability description...

Sites using revoked intermediate certificates might be shown as secure

Opera does not check the revocation status for intermediate certificates not served by the server. If the intermediate is revoked, this might not impact the security rating in Opera, and the site might be shown as secure...

CA20090818-01: Security Notice for CA Host-Based Intrusion Prevention System

CA20090818-01: Security Notice for CA Host-Based Intrusion Prevention System Issued: August 18, 2009 CA's technical support is alerting customers to a security risk with CA Host-Based Intrusion Prevention System. A vulnerability exists that can allow a remote attacker to cause a denial of service...

Programs Rating - 'rate.php?id' Cross-Site Scripting

source: https://www.securityfocus.com/bid/35746/info Programs Rating Script is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser of an...

CVE-2009-1661

SQL injection vulnerability in admin/utopic.php in uTopic 1.0, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the rating parameter to index.php...

microTopic 1 - Rating Blind SQL Injection

microTopic 1 - Rating Blind SQL Injection !/usr/bin/perl || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH!...

5 star Rating 1.2 (Auth Bypass) SQL Injection Vulnerability

No description provided by source. @@@@@@@@ @@@@@@@@ @@@@@@@ @@@@@@@@ @@@@@@@ @@@@@@ @@@ @@@ @@@@@@@@ @@@@@@@@ @@@@@@@@ @@@@@@@@@@ @@@@@@@@ @@@@@@@@ @@@ @@@ @@! @@! @@! @@@ @@! @@@@ @@! @@@ @@! @@@ @@! !@@ !@! !@! !@! @!@ !@! @!@!@ !@! @!@ !@! @!@ !@! @!! @!! @!!!:! @!@!!@! @!@ @! !@! @!@ !@!...

5 star Rating 1.2 - Authentication Bypass

5 star Rating 1.2 - Authentication Bypass @@@@@@@@ @@@@@@@@ @@@@@@@ @@@@@@@@ @@@@@@@ @@@@@@ @@@ @@@ @@@@@@@@ @@@@@@@@ @@@@@@@@ @@@@@@@@@@ @@@@@@@@ @@@@@@@@ @@@ @@@ @@! @@! @@! @@@ @@! @@@@ @@! @@@ @@! @@@ @@! !@@ !@! !@! !@! @!@ !@! @!@!@ !@! @!@ !@! @!@ !@! @!! @!! @!!!:! @!@!!@! @!@ @! !@! @!@...

5 star Rating 1.2 - Authentication Bypass

@@@@@@@@ @@@@@@@@ @@@@@@@ @@@@@@@@ @@@@@@@ @@@@@@ @@@ @@@ @@@@@@@@ @@@@@@@@ @@@@@@@@ @@@@@@@@@@ @@@@@@@@ @@@@@@@@ @@@ @@@ @@! @@! @@! @@@ @@! @@@@ @@! @@@ @@! @@@ @@! !@@ !@! !@! !@! @!@ !@! @!@!@ !@! @!@ !@! @!@ !@! @!! @!! @!!!:! @!@!!@! @!@ @! !@! @!@ !@! @!@!@!@! !@!@! !!! !!!!!: !!@!@! !@!!!...

5Star Rating 1.0 SQL Injection

@@@@@@@@ @@@@@@@@ @@@@@@@ @@@@@@@@ @@@@@@@ @@@@@@ @@@ @@@ @@@@@@@@ @@@@@@@@ @@@@@@@@ @@@@@@@@@@ @@@@@@@@ @@@@@@@@ @@@ @@@ @@! @@! @@! @@@ @@! @@@@ @@! @@@ @@! @@@ @@! !@@ !@! !@! !@! @!@ !@! @!@!@ !@! @!@ !@! @!@ !@! @!! @!! @!!!:! @!@!!@! @!@ @! !@! @!@ !@! @!@!@!@! !@!@! !!! !!!!!: !!@!@! !@!!!...

I-Rater Pro/Plantinum v4 (Auth Bypass) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================== I-Rater Pro/Plantinum v4 Auth Bypass SQL Injection Vulnerability ================================================================== I-Rater Platinum V4 By : Hakxer I-Rater...

I-Rater ProPlantinum 4.0 - Authentication Bypass

I-Rater ProPlantinum 4.0 - Authentication Bypass I-Rater Platinum V4 By : Hakxer Greetz : ExH , ProViDoR , Error Code , Bright D@rk , Stealth , Kof2002 , Datafr34ck3r , HcJ , Virushima I-Rater Platinum V4 Auth bypass Sql injection poc : http://www.i-rater.com/platinumadmin.html in username : admi...

I-Rater Platinum SQL Injection

I-Rater Platinum V4 By : Hakxer Greetz : ExH , ProViDoR , Error Code , Bright D@rk , Stealth , Kof2002 , Datafr34ck3r , HcJ , Virushima I-Rater Platinum V4 Auth bypass Sql injection poc : http://www.i-rater.com/platinumadmin.html in username : admin 'or' 1=1 in password : Photo Rating Script Pro ...

I-Rater Pro/Plantinum v4 (Auth Bypass) SQL Injection Vulnerability

No description provided by source. I-Rater Platinum V4 By : Hakxer Greetz : ExH , ProViDoR , Error Code , Bright D@rk , Stealth , Kof2002 , Datafr34ck3r , HcJ , Virushima I-Rater Platinum V4 Auth bypass Sql injection poc : http://www.i-rater.com/platinumadmin.html in username : admin 'or' 1=1 in...