Wapiti 3.0.0 - The Web-Application Vulnerability Scanner

Wapiti allows you to audit the security of your websites or web applications. It performs "black-box" scans it does not study the source code of the web application by crawling the webpages of the deployed webapp, looking for scripts and forms where it can inject data. Once it gets the list of...

74cms has an override access vulnerability

74cms knight cms is a PHP-based open source professional talent system. 74cms has an override access vulnerability. The vulnerability is caused by the failure to limit the userid of the user , an attacker can use the vulnerability to delete the resume...

PageAdmin设计缺陷导致简历遍历

简要描述： 泄露信息了 详细说明： 系统默认设置，游客可以查看用户简历 导致信息泄露 简历模块参数是默认的 默认是68和635 找demo站进行测试吧 直接访问 http://demo.pageadmin.net/index.aspx?lanmuid=68&sublanmuid=635&id=1 http://demo.pageadmin.net/index.aspx?lanmuid=68&sublanmuid=635&id=2 .... //遍历id 就可以查看每个人投递的简历了 用户信息还是挺敏感的...

Team Ghostshell Allegedly Spills 2.5 M Russian Records

As part of what it’s calling “Project Blackstar,” the hacking collective Team Ghostshell posted approximately 2.5 million records it claims belong to Russian individuals who work across the political, educational and law enforcement spectrum online earlier this morning. With the project, detailed...

CVE-2010-4830

SQL injection vulnerability in Resumes/TDRESUMEIndlist.asp in Techno Dreams T-Dreams Job Career Package 3.0 allows remote attackers to execute arbitrary SQL commands via the zResidency parameter...

Sql injection

SQL injection vulnerability in Resumes/TDRESUMEIndlist.asp in Techno Dreams T-Dreams Job Career Package 3.0 allows remote attackers to execute arbitrary SQL commands via the zResidency parameter...

CVE-2010-4830

The CVE-2010-4830 entry concerns Techno Dreams (T-Dreams) Job Career Package 3.0. It describes an SQL injection in Resumes/TD_RESUME_Indlist.asp that can be exploited via the z_Residency parameter to execute arbitrary SQL commands. The NVD entry provides a CVSS2 base score of 7.5 (HIGH) with netw...

CVE-2010-4830

SQL injection vulnerability in Resumes/TDRESUMEIndlist.asp in Techno Dreams T-Dreams Job Career Package 3.0 allows remote attackers to execute arbitrary SQL commands via the zResidency parameter...

Final Fantasy maker Square Enix hacked, 25,000 email addresses Stolen !

Final Fantasy maker Square Enix hacked, 25,000 email addresses Stolen ! Square Enix has confirmed that personal data has been compromised after hackers accessed the Eidos Montreal website. The Deus Ex website was also accessed by the attack from hackers. It's thought that it took place on...

T-Dreams Job Seekers Package 3.0 - SQL Injection

Author: R4dc0re Exploit Title: T-Dreams Job Seekers Package SQL injection Vulnerability Date: 04-12-2010 Vendor or Software Link:http://t-dreams.com Category:WebApp Version:3.0 Price:279$ Contact: [email protected] Website: www.1337db.com Greetings to: R0073r1337db.com, L0rd CrusAd3r,Sid3^effects...

T-Dreams Job Seekers Package 3.0 SQL Injection

Author: R4dc0re Exploit Title: T-Dreams Job Seekers Package SQL injection Vulnerability Date: 04-12-2010 Vendor or Software Link:http://t-dreams.com Category:WebApp Demo Link:http://t-dreams.com/demo/jobcareerV3 Version:3.0 Price:279$ Contact: [email protected] Website: www.1337db.com Greetings to...

T-Dreams Job Seekers Package 3.0 - SQL Injection

T-Dreams Job Seekers Package 3.0 - SQL Injection Author: R4dc0re Exploit Title: T-Dreams Job Seekers Package SQL injection Vulnerability Date: 04-12-2010 Vendor or Software Link:http://t-dreams.com Category:WebApp Version:3.0 Price:279$ Contact: [email protected] Website: www.1337db.com Greetings...

Joomla Jobs Pro Blind SQL Injection Vulnerability

No description provided by source. Name : Joomla Jobs Pro BSqli Vulnerability Date : july 6,2010 Critical Level : HIGH vendor URL :http://www.instantphp.com/ Price:$105.00 Author : Sid3^effects aKa HaRi special thanks to : r0073r inj3ct0r.com,L0rd CruSad3r,MaYur,MA1201,KeDar,Sonic,gunslinger gree...

Joomla Jobs Pro Blind SQL Injection

Name : Joomla Jobs Pro BSqli Vulnerability Date : july 6,2010 Critical Level : HIGH vendor URL :http://www.instantphp.com/ Price:$105.00 Author : Sid3^effects aKa HaRi special thanks to : r0073r inj3ct0r.com,L0rd CruSad3r,MaYur,MA1201,KeDar,Sonic,gunslinger greetz to :www.topsecure.net ,All ICW...

Job Search Script - SQL Injection

Job Search Script - SQL Injection 1 1 0 I'm L0rd CrusAd3r member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=1 Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title:Job Search SQL Injection Vendor url:http://getaphpsite.com Version:1...

Guardian Jobs Site Hacked, Data Stolen

In what is being described as a “deliberate and sophisticated crime,” the Guardian newspaper in the U.K. says the careers section of its Web site was hacked, exposing sensitive data belonging to about half a million users. According to a note posted online by the Guardian: The police remain anxio...