3166 matches found
Hotel / Resort Site Script SQL Injection
Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title:Hotel / Resort Site Script with OnLine Reservation System SQLi Vulnerable Published: 2010-06-08 Vendor url:http://www.mformula.com.br Greetz to:Sid3^effects, aaNumb, M4n0j and to all ICW members DESCRIPTION: Internal system for tot...
CafeEngine CMS V2.3 SQL Injection Vulnerability
Exploit for php platform in category web applications =============================================== CafeEngine CMS V2.3 SQL Injection Vulnerability =============================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 ...
CafeEngine 2.3 - SQL Injection
CafeEngine 2.3 - SQL Injection ========================================================== CafeEngine CMS V2.3 SQLI Vulnerability ========================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, ...
Hotel / Resort Site Script with OnLine Reservation System SQL Injection
Exploit for php platform in category web applications ======================================================================= Hotel / Resort Site Script with OnLine Reservation System SQL Injection ======================================================================= Author: L0rd CrusAd3r aka V...
CafeEngine 2.3 - SQL Injection
========================================================== CafeEngine CMS V2.3 SQLI Vulnerability ========================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //...
PT-2010-3056 · Xt:Commerce · Xt:Commerce
Name of the Vulnerable Software and Affected Versions: xt:Commerce affected versions not specified Description: The issue allows remote attackers to execute arbitrary SQL commands via the coID parameter in the Direct URL module, specifically in the bluegate seo.inc.php file, when magic quotes gpc...
Researchers Do Deep Dive on SEO Poison Kits
The techniques used by unloveable rogues who automate search engine manipulation attacks themed around breaking news to sling scareware have been unpicked by new research. Read the full article. The Register...
Moscow Bombings, TJX Hacker Spur Black Hat Campaigns
Spammers and malware writers have wasted no time in taking advantage of Monday’s bombings in Moscow, opening up a campaign on Twitter to point users to malicious sites. The pair of suicide bombings that hit the Metro system in Moscow Monday morning inevitably led to a flood of messages on Twitter...
Attackers Targeting .Edu Sites in SEO Poisoning Campaigns
Having mastered the art of poisoning search engine results for .com sites, attackers are now turning their attention to .edu sites, linking their keyword campaigns to educational institutions as a way of lending their malicious sites more credence in the eyes of Google. The goal of these attacks ...
SEO Scareware Campaign Compromises 200K Websites
Security researchers have detected a massive blackhat SEO search engine optimization campaign consisting of over 200,000 compromised web sites, all redirecting to fake security software Inst58s6.exe, commonly referred to as scareware. The massive blackat SEO campaign has been launched by the same...
Inside the Pay-Per-Install Malware Economy
Stevens provides considerable details on the methods and tools used by cyber-criminals, the seedboxes and crypters that are used to get around anti-malware detection and the clever black hat SEO Search Engine Optimization techniques used in social engineering attacks. An example of one affiliate...
SEO-CMS 1.3 (body.php) Remote File Inclusion Vulnerability
Exploit for unknown platform in category web applications ========================================================== SEO-CMS 1.3 body.php Remote File Inclusion Vulnerability ========================================================== @ Basic PHP Events Lister 2 Reset Admin Pass\ Add Admin Vul @...
e-Soft24 Jokes Portal Script Seo 1.0 - Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/43303/info e-Soft24 Jokes Portal Script Seo is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an...
Jokes Portal Script Seo 1.0 XSS
0000000000000000000000000000000000 000000000000000000000 00000000000000000000000000000000000 0000000000000000 00000000000000000000000000000000 + Jokes Portal Script Seo 1.0 Search Remote XSS Vulnerabilities + Software : Jokes Portal Script Seo + Author : 599eme Man + Contact : [email protected] +...
Article Directory Script Seo 2.5 XSS
0000000000000000000000000000000000 000000000000000000000 00000000000000000000000000000000000 0000000000000000 00000000000000000000000000000000 + Article Directory Script Seo 2.5 Search Remote XSS Vulnerability + Software : Article Directory Script Seo + Author : 599eme Man + Contact : Flouf@live....
URL Spoofing vulnerability in GoogleBot, Yahoo! Slurp, Mozilla and Internet Explorer #2
Hello 3APA3A! I already wrote you about URL Spoofing vulnerability in GoogleBot, Yahoo! Slurp, Mozilla and Internet Explorer http://websecurity.com.ua/3079/, which also can exists in bots of other search engines. As I mentioned, with this vulnerability it's possible to spoof URL and conduct fishi...
URL Spoofing vulnerability in GoogleBot, Yahoo! Slurp, Mozilla and Internet Explorer
Hello 3APA3A! I want to warn you about URL Spoofing vulnerability in GoogleBot, Yahoo! Slurp, Mozilla and Internet Explorer. If vulnerabilities in browsers I found often, than it's first time when I found vulnerability in search engine's bot spider. Bots of other search engines also can be...
PHPWIND & DISCUZ! CSRF vulnerability-vulnerability warning-the black bar safety net
PHPWIND & DISCUZ! CSRF vulnerability affects versions: Discuz! 6.0.0 & 6.1.0 & 7.0.0 PHPWIND 6.0 & 6.3 & 7.0 Vulnerability description: PHPWIND & DISCUZ! The presence of CSRF vulnerabilities, triggering PHPWIND & DISCUZ! CSRF WORM! ... d/b31e4d2e6270c384 reference ... d/b31e4d2e6270c384 Safety...
Remote file inclusion
PHP remote file inclusion vulnerability in include/global.php in Multi SEO phpBB 1.1.0 allows remote attackers to execute arbitrary PHP code via a URL in the pfad parameter...
