07 GameSiteScript <= 3.1 (profile id) Remote SQL Injection Vulnerability

No description provided by source. GameSiteScript Profile$id SQL-Injection Exploit Vulnerability Discovered By: Xenduer77 ---July 7th, 2007 $id Is passed straight to the query without being filtered. SQL-INJECTION: For Version 3.1: -------...

[SECURITY] [DSA 1331-1] New php4 packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 1331-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff July 7th, 2007 http://www.debian.org/security/faq -...

GameSiteScript <= 3.1 (profile id) Remote SQL Injection Vulnerability

No description provided by source. GameSiteScript Profile$id SQL-Injection Exploit Vulnerability Discovered By: Xenduer77 ---July 7th, 2007 $id Is passed straight to the query without being filtered. SQL-INJECTION: For Version 3.1: -------...

Girlserv ads 1.5 - details_news.php SQL Injection

Girlserv ads 1.5 - detailsnews.php SQL Injection Girlserv ads = 1.5 Remote SQL Injection Vulnerability Found By : Cold z3ro , [email protected] Homepages : http://hackteach.org , http://h4ps.com Script : http://www.girlserv-demo.com/girlserv-ads1.5.zip For Admin :...

AV Arcade 2.1b (index.php id) Remote SQL Injection Vulnerability

No description provided by source. Web: AV Arcade 2.1b Site : www.avscripts.net Dork : "Powered By AV Arcade" Author: Kw3rLn tehlostbyteatYaHoOd0tCom Romanian Security Team Ethical Hacking - hTTp://RSTZONE.nET Description: SQL injection in $id of includes/viewpage.php Exploit:...

PHPDirector <= 0.21 (videos.php id) Remote SQL Injection Vulnerability

No description provided by source. PHPDirector = 0.21 SQL injection/Upload SHELL Remote Vulnerabilities WEB APP: PHPDirector 0.21 SITE: http://www.phpdirector.co.uk/site/ DORK: "Powered by PHP Director" AUTHOR: Kw3rLn tehlostbyteatYaHoOd0tCom Romanian Security Team Ethical Hacking -...

PHPDirector <= 0.21 (videos.php id) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ====================================================================== PHPDirector = 0.21 videos.php id Remote SQL Injection Vulnerability ====================================================================== PHPDirector = 0.21 SQL...

ArcadeBuilder Game Portal Manager 1.7 Remote SQL Injection Vuln

No description provided by source. --==+================================================================================+==-- --==+ Game Portal Manager v1.7 SQL Injection Vulnerability +==-- --==+================================================================================+==-- AUTHOR: t0pP8uZ...

Ingres Unauthenticated Pointer Overwrite 1

======= Summary ======= Name: Ingres remote unauthenticated pointer overwrite 1 Release Date: 25 June 2007 Reference: NGS00391 Discover: Chris Anley [email protected] Vendor: Ingres Vendor Reference: Ingres bug 115927, CVE-2007-3336, CAID 35450 Systems Affected: Ingres 2006 9.0.4 and prior...

elkagroup Image Gallery 1.0 Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================== elkagroup Image Gallery 1.0 Remote SQL Injection Vulnerability ==============================================================...

LiteWEB Web Server 2.7 - Invalid Page Remote Denial of Service

source: https://www.securityfocus.com/bid/24628/info LiteWeb webserver is prone to a remote denial-of-service vulnerability because the application fails to handle exceptional conditions. An attacker can exploit this issue to crash the affected application, denying further service to legitimate...

W1L3D4 WEBmarket 0.1 Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ======================================================= W1L3D4 WEBmarket 0.1 Remote SQL Injection Vulnerability ======================================================= /////////////////////////////////////////////////////////////////////...

CVE-2007-3166

Buffer overflow in Qualcomm Eudora 7.1.0.9 allows user-assisted, remote IMAP servers to execute arbitrary code via a long FLAGS response to a SELECT INBOX command...

movieplay-overflow.txt

!/usr/bin/env ruby MoviePlay 4.76 .lst file Local buffer over-flow. Credit to n00b for writing poc code..Pmsl Tested on :Win xp sp2 eng. Vendor web site: Netfarer.com MoviePlay 4.76 Buffer-over flow reported : Jan 02 2007 12:00AM Credit goes to Parvez Anwar for finding the bug. MoviePlay is prone...

Comicsense 0.2 (index.php epi) Remote SQL Injection Vulnerability

No description provided by source. Comicsense SQL Injection Advisory/Exploit by s0cratex [email protected] http://plexinium.net - ComicSense is a script using php / mySQL. It allows you to easily host an Online Comic or Image shack. You can download it from www.gayadesign.nl/comicsense/ - The...

[SECURITY] [DSA 1297-1] New gforge-plugin-scmcvs packages fix arbitrary shell command execution

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 1297-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff May 24th, 2007 http://www.debian.org/security/faq -...

Ol Bookmarks Manager 0.7.4 Remote SQL Injection Vulnerability

No description provided by source. ========================================================================== Ol Bookmarks Manager 0.7.4 root Remote SQL Injection Vulnerabilities ========================================================================== Found by: Cyber-Security...

CVE-2007-2715

Admin/users.php in Snaps! Gallery 1.4.4 allows remote attackers to change arbitrary usernames and passwords via the 1 username, or the 2 password and password2 parameters in an edit action...

DeWizardX - DEWizardAX.ocx Arbitrary File Overwrite

DeWizardX - DEWizardAX.ocx Arbitrary File Overwrite 2007/05/15 ----------------------------------------------------------------------------------- DB Software Laboratory DeWizardX DEWizardAX.ocx Remote Arbitrary File Overwrite url: http://www.dbsoftlab.com price: $100 author: shinnai mail:...

iG Shop 1.4 (page.php) Remote SQL Injection Vulnerability

No description provided by source. Discovered by: gsy & kerem125 Website: www.kerem125.com Script Download: http://www.igeneric.co.uk/ig-shopping-cart.html exploit:/shop/page.php?pagetype=catalognavigate&typeid=-99%20union//select//password//from//users/...