FooSun - Api_Response.asp SQL Injection

FooSun - ApiResponse.asp SQL Injection source: https://www.securityfocus.com/bid/26552/info FooSun is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise t...

JiRo's Banner System 2.0 - 'login.asp' Multiple SQL Injections

source: https://www.securityfocus.com/bid/26479/info JiRo's Banner System is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the application,...

miniBB 2.1 (table) Remote SQL Injection Vulnerability

No description provided by source. vuln.: miniBB 2.1 table Remote SQL Injection Exploit download: http://www.minibb.net/download.php?file=minibb21 dork: "These forums are running on" "miniBB" author: [email protected] greets to: str0ke, polish under :...

miniBB 2.1 (table) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ===================================================== miniBB 2.1 table Remote SQL Injection Vulnerability ===================================================== vuln.: miniBB 2.1 table Remote SQL Injection Exploit download:...

MiniBB 2.1 - 'table' SQL Injection

vuln.: miniBB 2.1 table Remote SQL Injection Exploit download: http://www.minibb.net/download.php?file=minibb21 dork: "These forums are running on" "miniBB" author: [email protected] greets to: str0ke, polish under : '-----------------------------------------------------------------------------' cod...

phpstats-multi.txt

32 break; 100. 103. $title='?'; 104. if$option'pagetitle' && isset$GET't' 105. 106. $tmpTitle=htmlspecialcharsaddslashesurldecode$GET't'; 107. if$tmpTitle!='\\\" t \\\"' $title=$tmpTitle; 108. 109. 174. if $loaded=='?' && $title!='?' 175. $result=sqlquery"SELECT lastpage FROM...

multicart-sql.txt

Indonesian Newhack Security Advisory ------------------------------------ MultiCart 1.0 Remote Blind SQL Injection Waktu : Sep 30 2007 02:00AM Software : MultiCart 1.0 Vendor : http://www.iscripts.com/multicart/ Ditemukan oleh : k1tk4t | http://newhack.org Lokasi : Indonesia ----...

MultiCart 1.0 Remote Blind SQL Injection Exploit

No description provided by source. Indonesian Newhack Security Advisory ------------------------------------ MultiCart 1.0 Remote Blind SQL Injection Waktu : Sep 30 2007 02:00AM Software : MultiCart 1.0 Vendor : http://www.iscripts.com/multicart/ Ditemukan oleh : k1tk4t | http://newhack.org Lokas...

MultiCart 1.0 - Blind SQL Injection

Indonesian Newhack Security Advisory ------------------------------------ MultiCart 1.0 Remote Blind SQL Injection Waktu : Sep 30 2007 02:00AM Software : MultiCart 1.0 Vendor : http://www.iscripts.com/multicart/ Ditemukan oleh : k1tk4t | http://newhack.org Lokasi : Indonesia ----...

MultiCart 1.0 Remote Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ================================================ MultiCart 1.0 Remote Blind SQL Injection Exploit ================================================ Indonesian Newhack Security Advisory ------------------------------------ MultiCart 1.0 Remo...

ASP Product catalog SQL injection vulnerability

ASP Product catalog SQL injection vulnerability. A nice little SQL injection vulnerability exists within ASP Product Catalog. The application fails to check for bad input from GET'd variables used in SQL query operations. In this case, the variable cid can be used for SQL injection queries...

MultiCart 1.0 - Blind SQL Injection

MultiCart 1.0 - Blind SQL Injection Indonesian Newhack Security Advisory ------------------------------------ MultiCart 1.0 Remote Blind SQL Injection Waktu : Sep 30 2007 02:00AM Software : MultiCart 1.0 Vendor : http://www.iscripts.com/multicart/ Ditemukan oleh : k1tk4t | http://newhack.org Loka...

LinPHA 1.3.1 - 'new_images.php' Blind SQL Injection

order = $REQUEST'order'; 188. 189. if$defaultorder != $REQUEST'order' 190. 191. $this-linkaddress .= '&order='.$REQUEST'order'; 192. 193. 194. else 195. 196. $this-order = $defaultorder; 197. 198. 199. 200. // 201. // set sql query string 202. // 203. function setSql$sqlbegin,$sqlwhere 204. 205...

Vulnerability against DoS attack via labels

Description: When you give more labels to a content, then Confluence split up the user input on spaces, and then make az SQL query against each word or something like this. Exploit: Giving x thousand characters depends on the machine separated by space as label results the system is breaking down...

Vulnerability against DoS attack via labels

Description: When you give more labels to a content, then Confluence split up the user input on spaces, and then make az SQL query against each word or something like this. Exploit: Giving x thousand characters depends on the machine separated by space as label results the system is breaking down...

Vulnerability against DoS attack via labels

Description: When you give more labels to a content, then Confluence split up the user input on spaces, and then make az SQL query against each word or something like this. Exploit: Giving x thousand characters depends on the machine separated by space as label results the system is breaking down...

QuickEStore <= 8.2 (insertorder.cfm) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ======================================================================= QuickEStore = 8.2 insertorder.cfm Remote SQL Injection Vulnerability ======================================================================= web application:QuickEStor...

husrevforum 1.0.12.0.1 - Philboard_forum.asp SQL Injection

husrevforum 1.0.12.0.1 - Philboardforum.asp SQL Injection source: https://www.securityfocus.com/bid/24928/info The 'husrevforum' program is prone to an SQL-injection vulnerability because it fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could...

SkilMatch Systems JobLister3 - 'index.php' SQL Injection

source: https://www.securityfocus.com/bid/25296/info JobLister3 is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the application, access or...

Inmostore 4.0 - index.php SQL Injection

Inmostore 4.0 - index.php SQL Injection source: https://www.securityfocus.com/bid/24884/info Inmostore is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to...