I-Rater Pro/Plantinum 4.0 - Authentication Bypass

I-Rater Platinum V4 By : Hakxer Greetz : ExH , ProViDoR , Error Code , Bright D@rk , Stealth , Kof2002 , Datafr34ck3r , HcJ , Virushima I-Rater Platinum V4 Auth bypass Sql injection poc : http://www.i-rater.com/platinumadmin.html in username : admin 'or' 1=1 in password : Photo Rating Script Pro ...

rPSA-2009-0061-1 cups

rPath Security Advisory: 2009-0061-1 Published: 2009-04-17 Products: rPath Linux 1 rPath Linux 2 Rating: Severe Exposure Level Classification: Remote System User Deterministic Privilege Escalation Updated Versions: cups=conary.rpath.com@rpl:1/1.1.23-14.10-1 cups=conary.rpath.com@rpl:2/1.3.9-1.1-1...

Gravy Media CMS 1.07 SQL Injection

0x01 Informations: Name : Gravy Media Cms 1.07 Download : http://www.gravy-media.com/downloads.php Vulnerability : Multiple Sql Injections & Arbitrary File Download Author : x0r Contact : [email protected] Notes : Proud To Be Italian Greetz : // 0x02 Bug: Bugged file is /path/login.php...

[Bkis-04-2009] GOM Encoder Heap-based Buffer Overflow

GOM Encoder Heap-based Buffer Overflow 1. General Information GOM Encoder is a video transcoder that can work with a lot of video formats. One of its functions is embedding subtitles to the video, which means you can see subtitles on the resulting video even if your device doesn't support subtitl...

Built2Go PHP Rate My Photo 1.46.4 - Arbitrary File Upload

Built2Go PHP Rate My Photo 1.46.4 - Arbitrary File Upload Built2Go PHP Rate My Photo v1.46.4 RFU ---------------------------------------------------------- Discovered By: ZoRLu msn: [email protected] Date: 22.11.2008 Home: z0rlu.blogspot.com / www.experl.com N0T: YALNIZLIK, YiTiRDi ANLAMINI...

CARateMySite Database Disclosure

--------------------------------------------------------- Portal Name: CARateMySite Download : http://www.truecontent.info/codeavalanche/asp-rating-script.php Author : PouyaServer , [email protected] Vulnerability : DD --------------------------------------------------------- DD:...

[SVRT-07-08] Vulnerability in Face Recognition Authentication Mechanism of Lenovo-Asus-Toshiba Laptops

VULNERABILITY IN FACE RECOGNITION AUTHENTICATION MECHANISM LENOVO-ASUS-TOSHIBA LAPTOPS 1. General Information Face Recognition feature is provided by Asus, Lenovo and Toshiba as specialized software that is issued together with their laptops. This feature is embedded into all laptop families havi...

MemHT Portal 4.0.1 - SQL Injection / Code Execution

!/usr/bin/perl =about MemHT 4.0.1 Perl exploit AUTHOR discovered & written by Ams ax330d doggy gmail dot com VULN. DESCRIPTION: Due to weak params filtering we are able to make SQL-Injection. So, 1. Look at 'inc/ajax/ajaxrating.php', line 29. It is not enough to check whether script has been...

YourFreeWorld Programs Rating (details.php id) SQL Injection Vulnerability

No description provided by source. ||| Programs Rating details.php id Remote SQL Injection Vulnerability || Author: Hussin X || Home : WwW.IQ-TY.CoM || email: darkangelg85atYahooDoTcom ||| script :http://www.yourfreeworld.com/script/rating.php ||| DorK : ^ Exploit...

YourFreeWorld Programs Rating (details.php id) SQL Injection Vuln

Exploit for unknown platform in category web applications ================================================================= YourFreeWorld Programs Rating details.php id SQL Injection Vuln ================================================================= ||| Programs Rating details.php id Remote S...

YourFreeWorld Programs Rating - SQL Injection

||| Programs Rating details.php id Remote SQL Injection Vulnerability || Author: Hussin X || Home : WwW.IQ-TY.CoM || email: darkangelg85atYahooDoTcom ||| script :http://www.yourfreeworld.com/script/rating.php ||| DorK : ^ Exploit...

Google Chrome Browser 0.2.149.27 (SaveAs) Remote BOF Exploit

Exploit for unknown platform in category remote exploits ============================================================ Google Chrome Browser 0.2.149.27 SaveAs Remote BOF Exploit ============================================================ PoC Code is in Attach file because this file is saved in...

krate-sqlxss.txt

================================================================================ || K-Rate SQL-INJECTION, XSS ================================================================================ Application: K-Rate ------------ Website: http://turn-k.net/k-rate -------- Demo: http://kratedemo.com ---...

Unfixed Frame Redirect vulnerability at www.turkiyat.gazi.edu.tr

Security researcher st@rext, has submitted on 26/08/2008 a Frame Redirect vulnerability affecting www.turkiyat.gazi.edu.tr, which at the time of submission ranked 16098 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/07/2009. It is currently...

k-rate - SQL Injection Cross-Site Scripting

k-rate - SQL Injection Cross-Site Scripting ================================================================================ || K-Rate SQL-INJECTION, XSS ================================================================================ Application: K-Rate ------------ Website:...

CVE-2008-3753

SQL injection vulnerability in details.php in YourFreeWorld Programs Rating Script allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

SQL injection vulnerability in details.php in YourFreeWorld Programs Rating Script allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-3753

SQL injection vulnerability in details.php in YourFreeWorld Programs Rating Script allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-3753

The CVE-2008-3753 entry affects the YourFreeWorld Programs Rating Script, with a vulnerability in details.php that allows SQL injection through the id parameter. This is described as a remote SQL command execution vulnerability. Connected documents also reference this CVE under various feeds (NVD...

prograte-sql.txt

|| | | Programs Rating details.php id Remote SQL Injection Vulnerability | | |---------------------Hussin X----------------------| | | Author: Hussin X | | Home : www.tryag.cc/cc | | email: darkangelg85atYahooDoTcom | | | | | | | script :http://www.yourfreeworld.com/script/rating.php | | DorK : ^...