1313 matches found
Joomla! Component com_jbpublishdownfp - SQL Injection
...BEGIN ADVISORY... !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! TITLE: Joomla comjbpublishdownfp SQL Injection Vulnerability LANGUAGE: PHP DORK: N/A RESEARCHER: B-HUNT3|2 CONTACT: bhunt3ratnospamgmaildotnospamcom TESTED ON: LocalHost PRE-REQUERIMENTS: Privileg...
Joomla Component (com_casino) SQL Injection Vulnerabilities
Exploit for unknown platform in category web applications =========================================================== Joomla Component comcasino SQL Injection Vulnerabilities =========================================================== ...BEGIN ADVISORY...
Joomla Component com_gameserver SQL Injection Vulnerability
Exploit for unknown platform in category web applications =========================================================== Joomla Component comgameserver SQL Injection Vulnerability =========================================================== Exploit Title: Joomla comgameserver SQL Injection...
Joomla! Component com_gameserver - SQL Injection
Exploit Title: Joomla comgameserver SQL Injection Vulnerability Date: 2010-01-22 Author: B-Hunt3|2 Software Link: http://joomlacode.org/gf/project/gameserver/frs/ Version: 1.2 CVE : N/A ...BEGIN ADVISORY... !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! TITLE:...
Joomla Gameserver 1.2 SQL Injection
Exploit Title: Joomla comgameserver SQL Injection Vulnerability Date: 2010-01-22 Author: B-Hunt3|2 Software Link: http://joomlacode.org/gf/project/gameserver/frs/ Version: 1.2 CVE : N/A ...BEGIN ADVISORY... !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! TITLE:...
SQL injection in FreePBX 2.5.1
Exploit for unknown platform in category web applications ============================== SQL injection in FreePBX 2.5.1 ============================== Advisory Name: SQL injection in FreePBX 2.5.1 Internal Cybsec Advisory Id: 2010-0103 Vulnerability Class: SQL injection Release Date: 15/01/2010...
SQL-Ledger Multiple Vulnerabilities
This host is running SQL-Ledger and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodsqlledgermultvuln.nasl 5122 2017-01-27 12:16:00Z teissa $ SQL-Ledger Multiple Vulnerabilities Authors: Sharath S Copyright: Copyright c 2009 SecPod, http://www.secpod.com This program i...
QuickEStore 7.9 SQL Injection
======================================================================================== | Title : QuickEStore v.7.9 SQLInjection and Path Diclosure Download Vulnerability| | Author : indoushka | | email : [email protected] | | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria...
QuickEStore v.7.9 SQL Injection and Path Diclosure Download Vulnerability
No description provided by source. ======================================================================================== | Title : QuickEStore v.7.9 SQLInjection and Path Diclosure Download Vulnerability| | Author : indoushka | | email : [email protected] | | Home : Souk Naamane - 04325 -...
iGaming CMS v1.5 CSRF Vulnerability
No description provided by source. NeX of the HackTalk team has found a CSRF Vulnerability in iGaming CMS v 1.5 that allows an attacker to make new administrative account, and run SQL queries. Pentest Information: ============ NeX has discovered a Cross Site Request ForgeryCSRF vulnerability in...
iGaming CMS 1.5 - Cross-Site Request Forgery
iGaming CMS 1.5 - Cross-Site Request Forgery NeX of the HackTalk team has found a CSRF Vulnerability in iGaming CMS v 1.5 that allows an attacker to make new administrative account, and run SQL queries. Pentest Information: ============ NeX has discovered a Cross Site Request ForgeryCSRF...
iGaming CMS 1.5 - Cross-Site Request Forgery
NeX of the HackTalk team has found a CSRF Vulnerability in iGaming CMS v 1.5 that allows an attacker to make new administrative account, and run SQL queries. Pentest Information: ============ NeX has discovered a Cross Site Request ForgeryCSRF vulnerability in iGaming CMS 1.5 Details ============...
Flashlight Free Edition <= 1.0 SQLi and Directory Traversal Vulnerability
Flashlight Free Edition is prone to SQL injection SQLi and directory traversal vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Invision Power Board <= 3.0.4 LFI and <=3.0.4 and <=2.3.6 SQL Injection
No description provided by source. ============================================= - Severity: Moderately High ============================================= I. VULNERABILITY ------------------------- Invision Power Board = 3.0.4 Local PHP File Inclusion and SQL Injection Invision Power Board = 2.3....
Invision Power Board 2.3.6/3.0.4 - Local File Inclusion / SQL Injection
============================================= - Severity: Moderately High ============================================= I. VULNERABILITY ------------------------- Invision Power Board = 3.0.4 Local PHP File Inclusion and SQL Injection Invision Power Board = 2.3.6 SQL Injection II. BACKGROUND...
Oracle Database Server ctxsys.driload Access Validation (CVE-2004-0637)
Stored procedures are a powerful feature of an Oracle database server. They are essentially a set of SQL statements that are stored server-side, which are called by name and optionally passed a set of parameters. Stored procedures provide improved performance, because only data specific to the...
cP Creator 'tickets' Cookie SQL Injection Vulnerability
cP Creator is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
FreeBSD : mybb -- multiple vulnerabilities (beb6f4a8-add5-11de-8b55-0030843d3802)
mybb team reports : Input passed via avatar extensions is not properly sanitised before being used in SQL queries. This can be exploited to manipulate SQL queries by uploading specially named avatars. The script allows to sign up with usernames containing zero width space characters, which can be...
mybb -- multiple vulnerabilities
mybb team reports: Input passed via avatar extensions is not properly sanitised before being used in SQL queries. This can be exploited to manipulate SQL queries by uploading specially named avatars. The script allows to sign up with usernames containing zero width space characters, which can be...
Snitz Forums 2000 <= 3.4.07 register.asp 'Email' Parameter SQL Injection
The remote version of Snitz Forums 2000 is vulnerable to a SQL injection attack. The domain name of the email address passed to the 'Email' parameter of 'register.asp' is not sanitized before being used in a SQL query. A remote attacker could exploit this to execute arbitrary SQL queries. Note th...