DSECRG-08-034.txt

Digital Security Research Group DSecRG Advisory DSECRG-08-034 Application: Minishowcase Image Gallery Versions Affected: v09b136 Vendor URL: http://minishowcase.frwrd.net Bug: Local File Include Exploits: YES Reported: 14.07.2008 Second report: 22.07.2008 Vendor response: NONE Solution: NONE Date...

PixelPost 1.7.1 - 'language_full' Local File Inclusion

Digital Security Research Group DSecRG Advisory DSECRG-08-033 Application: Pixelpost photoblog Versions Affected: 1.7.1 Vendor URL: http://www.pixelpost.org/ Bug: Local File Include Exploits: YES Reported: 22.07.2008 Vendor response: 23.07.2008 Solution: YES Date of Public Advisory: 28.07.2008...

PixelPost 1.7.1 (language_full) Local File Inclusion Vulnerability

Exploit for unknown platform in category web applications ================================================================== PixelPost 1.7.1 languagefull Local File Inclusion Vulnerability ================================================================== Digital Security Research Group DSecRG...

XRms 1.99.2 - Remote File Inclusion / Cross-Site Scripting / Information Gathering

XMRS Multiple Vulnerabilities ZeroDay at 25-07-2008 Author: AzzCoder [email protected] Product: http://www.xrms.org/ Product Type: CRM Thanks: coresecurity.com Remote File Inclusion File: activities/workflow-activities.php Variable: $includedirectory Required registerglobals: Yes XSS Multiple...

Sql injection

SQL injection vulnerability in the DT Register comdtregister 2.2.3 component for Joomla! allows remote attackers to execute arbitrary SQL commands via the eventId parameter in a payoptions action to index.php...

CVE-2008-3265

SQL injection vulnerability in the DT Register comdtregister 2.2.3 component for Joomla! allows remote attackers to execute arbitrary SQL commands via the eventId parameter in a payoptions action to index.php...

CVE-2008-3265

SQL injection vulnerability in the DT Register comdtregister 2.2.3 component for Joomla! allows remote attackers to execute arbitrary SQL commands via the eventId parameter in a payoptions action to index.php...

CVE-2008-3265

CVE-2008-3265 describes a SQL injection in the Joomla! DT Register component (com_dtregister) 2.2.3. The issue arises in the pay_options action to index.php, where the eventId parameter can be exploited by a remote attacker to execute arbitrary SQL commands. The vulnerability is caused by unsafe ...

CVE-2008-3265: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the DT Register comdtregister 2.2.3 component for Joomla! allows remote attackers to execute arbitrary SQL commands via the eventId parameter in a payoptions action to index.php...

Joomla Component DT Register Remote SQL injection Vulnerability

No description provided by source. /---------------------------------------------------------------\ \ / / Joomla Component DT Register Remote SQL injection \ \ / ---------------------------------------------------------------/ Author : His0k4 ALGERIAN HaCkeR Dork : inurl:comDTRegister eventId...

Joomla! Component DT Register - SQL Injection

Joomla! Component DT Register - SQL Injection /---------------------------------------------------------------\ \ / / Joomla Component DT Register Remote SQL injection \ \ / ---------------------------------------------------------------/ Author : His0k4 ALGERIAN HaCkeR Dork : inurl:comDTRegister...

pSys 0.7.0 Alpha Multiple Remote File Inclusion Vulnerability

No description provided by source. ==================================================== | pSys v0.7.0 Alpha Multiple Remote File Include | works only with registerglobals = on | Founded By rXh RoMaNTiC-TeaM ==================================================== ! Discovered.: RoMaNcYxHaCkEr !...

joomladtr-sql.txt

/---------------------------------------------------------------\ \ / / Joomla Component DT Register Remote SQL injection \ \ / ---------------------------------------------------------------/ Author : His0k4 ALGERIAN HaCkeR Dork : inurl:comDTRegister eventId Vendor :...

Pragyan CMS 2.6.2 (sourceFolder) Remote File Inclusion Vulnerability

No description provided by source. In The Name Of GOD ------------------------------------------------------------- - Persian Boys Hacking Team -:- 2008 - - discovered by N3TR00T3R at Y! dot com - pragyan 2.6.2 Remote File Includion - download...

Joomla Component com_dtregister SQL injection Vulnerability

Exploit for php platform in category web applications =============================================================== Joomla Component DT Register Remote SQL injection Vulnerability ===============================================================...

WinZIP MIME Parsing Overflow Proof of Concept Exploit

No description provided by source. / Author: snooq Date: 14 April 2004 This is a PoC exploit for WinZip32 MIME Parsing Overflow bug reported by iDefense on 27 February 2004. The original advisory is found here: http://www.idefense.com/application/poi/display?id=76 This version is SP dependent bec...

Joomla! Component DT Register - SQL Injection

/---------------------------------------------------------------\ \ / / Joomla Component DT Register Remote SQL injection \ \ / ---------------------------------------------------------------/ Author : His0k4 ALGERIAN HaCkeR Dork : inurl:comDTRegister eventId Vendor :...

Bilboblog 2.1 Multiple Remote Vulnerabilities

No description provided by source. ------------------------------------------------------------------ Name : Bilboblog 2.1 Multiples Vulnerabilities Description : Bilboblog is a small application of micro-blogging in Php / MySQL Link :...

bilboblog-multi.txt

------------------------------------------------------------------ Name : Bilboblog 2.1 Multiples Vulnerabilities Description : Bilboblog is a small application of micro-blogging in Php / MySQL Link : http://www.tux-planet.fr/bilboblog-version-021-english-translation/ Vuln. types : Login Bypass -...

bilboblog 2.1 - Multiple Vulnerabilities

------------------------------------------------------------------ Name : Bilboblog 2.1 Multiples Vulnerabilities Description : Bilboblog is a small application of micro-blogging in Php / MySQL Link : http://www.tux-planet.fr/bilboblog-version-021-english-translation/ Vuln. types : Login Bypass -...