iLister Listing Software - Local File Inclusion

1 1 0 I'm Sid3^effects member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 Name : iLister listing script LFi Vulnerability Date : july 4,2010 Critical Level : HIGH vendor URL :http://www.worksforweb.com/ Author : Sid3^effects aKa HaRi special...

SweetRice 0.6.4 - FCKeditor Arbitrary File Upload

SweetRice 0.6.4 - FCKeditor Arbitrary File Upload Title: SweetRice 0.6.4 fckeditor Remote File Upload Vendor: http://www.basic-cms.org Dork: "Powered By Basic CMS SweetRice" AUTHOR: ITSecTeam Email: [email protected] Website: http://www.itsecteam.com Forum : http://forum.ITSecTeam.com Original...

SweetRice <= 0.6.4 (fckeditor) Remote File Upload

Exploit for php platform in category web applications ================================================= SweetRice = 0.6.4 fckeditor Remote File Upload ================================================= Title: SweetRice 0.6.4 fckeditor Remote File Upload Vendor: http://www.basic-cms.org Dork:...

CVE-2010-2626

index.pl in Miyabi CGI Tools SEO Links 1.02 allows remote attackers to execute arbitrary commands via shell metacharacters in the fn command. NOTE: some of these details are obtained from third party information...

Information disclosure

index.pl in Miyabi CGI Tools SEO Links 1.02 allows remote attackers to execute arbitrary commands via shell metacharacters in the fn command. NOTE: some of these details are obtained from third party information...

CVE-2010-2626

index.pl in Miyabi CGI Tools SEO Links 1.02 allows remote attackers to execute arbitrary commands via shell metacharacters in the fn command. NOTE: some of these details are obtained from third party information...

CVE-2010-2626

CVE-2010-2626 affects Miyabi CGI Tools SEO Links 1.02. The flaw is in index.pl where the fn parameter can be exploited with shell metacharacters to execute remote commands, enabling arbitrary command execution. This is a remote, unauthenticated risk with network access and impacts confidentiality...

CVE-2010-2626: Improper Control of Generation of Code

index.pl in Miyabi CGI Tools SEO Links 1.02 allows remote attackers to execute arbitrary commands via shell metacharacters in the fn command. NOTE: some of these details are obtained from third party information...

'Twilight' Fans Targeted in SEO Scareware Scams

Scareware purveyors’ top target for today: Twilight fans using Google to search for show times, sound tracks and all things related to latest movie about young vampire lovers. Read the full article. The Last Watchdog...

Scareware, Black Hat SEO and You

The scareware and rogue AV problem that initially appeared a few years ago and has since found its way onto thousands and thousands of legitimate Web sites, including The New York Times home page, has now reached epidemic levels. The scams are mostly boilerplate and well-understood, but it’s not...

Site for Real Estate - Brokers SQL Injection

Vendor url:http://www.mformula.com.br/ Greetz to:Sid3^effects, MaYur, M4n0j, Dark Blue, S1ayer,d3c0d3r,KD and to all ICW & AH members. Spl Greetz to:inj3ct0r.com Team Description: Site for Real Estate - Brokers SQL Injection Vulnerability Resources and Advantages Better cost-benefit of the market...

Development Site Professional Liberal Company Institutional SQL Injection

Exploit for php platform in category web applications ======================================================================================= Development Site Professional Liberal Company Institutional SQL Injection Vulnerability...

Development Site Professional Liberal - Company Institutional SQL Injection

Vendor url:http://www.mformula.com.br/ Greetz to:Sid3^effects, MaYur, M4n0j, Dark Blue, S1ayer,d3c0d3r,KD and to all ICW & AH members. Spl Greetz to:inj3ct0r.com Team Description: Development Site Professional Liberal - Company Institutional SQL Injection Vulnerability Resources and Advantages...

Hotel / Resort Site Script SQL Injection

Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title:Hotel / Resort Site Script with OnLine Reservation System SQLi Vulnerable Published: 2010-06-08 Vendor url:http://www.mformula.com.br Greetz to:Sid3^effects, aaNumb, M4n0j and to all ICW members DESCRIPTION: Internal system for tot...

iRealty PHP Real Estate Script SQL Injection

Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title: iRealty PHP Real Estate Script PHP Script SQLi Vulnerable Published: 2010-06-08 Vendor url:http://www.worksforweb.com Greetz to:Sid3^effects, MaYur, M4n0j and to all ICW members DESCRIPTION: iRealty Real Estate Script is a...

CafeEngine CMS V2.3 SQL Injection Vulnerability

Exploit for php platform in category web applications =============================================== CafeEngine CMS V2.3 SQL Injection Vulnerability =============================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 ...

CafeEngine 2.3 - SQL Injection

CafeEngine 2.3 - SQL Injection ========================================================== CafeEngine CMS V2.3 SQLI Vulnerability ========================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, ...

Hotel / Resort Site Script with OnLine Reservation System SQL Injection

Exploit for php platform in category web applications ======================================================================= Hotel / Resort Site Script with OnLine Reservation System SQL Injection ======================================================================= Author: L0rd CrusAd3r aka V...

CafeEngine 2.3 - SQL Injection

========================================================== CafeEngine CMS V2.3 SQLI Vulnerability ========================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //...

PT-2010-3056 · Xt:Commerce · Xt:Commerce

Name of the Vulnerable Software and Affected Versions: xt:Commerce affected versions not specified Description: The issue allows remote attackers to execute arbitrary SQL commands via the coID parameter in the Direct URL module, specifically in the bluegate seo.inc.php file, when magic quotes gpc...