CVE-2014-1840

Cross-site scripting XSS vulnerability in Upload/search.php in MyBB 1.6.12 and earlier allows remote attackers to inject arbitrary web script or HTML via the keywords parameter in a dosearch action, which is not properly handled in a forced SQL error message...

CVE-2014-1840: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Upload/search.php in MyBB 1.6.12 and earlier allows remote attackers to inject arbitrary web script or HTML via the keywords parameter in a dosearch action, which is not properly handled in a forced SQL error message...

PT-2014-4324

Name of the Vulnerable Software and Affected Versions MyBB versions 1.6.12 and earlier Description A cross-site scripting XSS issue exists due to improper handling of the keywords parameter in a do search action, allowing remote attackers to inject arbitrary web script or HTML. This occurs when a...

SynConnect Pms - index.php?loginid SQL Injection

SynConnect Pms - index.php?loginid SQL Injection Title: ==== SynConnect - SQL Injection vulnerability Credit: ====== Name: Bhadresh Patel Company/affiliation: Cyberoam Technologies Private Limited Website: www.cyberoam.com CVE: ===== Date: ==== 01-03-2013 CRD: ==== CRD-2013-01 Vendor: ======...

WordPress IndiaNIC FAQs Manager Plugin 1.0 - Blind SQL Injection

The "order" and "orderby" parameter is vulnerable for SQL Injection Example URL: http://127.0.0.1:9001/wordpress/wp-admin/admin.php?page=3Din= icfaq&orderby=3D PoC take some time to finish 15min on my Testsystem. I could speed it up with Multithreading but I'm to lazy right now Vulnerable code pa...

debliteckservices SQL Injection vulnerability

Exploit for php platform in category web applications Exploit Title: debliteckservices / SQL Injection vulnerability Date: 02/02/2013 Exploit Author: DiegoAsencio || r4z0rbl4ck Twitter: @r4z0rbl4ck Blog: http://r4z0rbl4ck.wordpress.com/ Vendor Homepage: http://www.debliteckservices.com/ Tested on...

MyBB HM My Country Flags - SQL Injection

MyBB HM My Country Flags - SQL Injection Exploit title: HM My Country Flags SQL Injection Author: JoinSe7en Contact: join7 +at+ riseup.net Tested on: Linux Category: Web Applications Software link: http://mods.mybb.com/view/hm-my-country-flags HM My Country Flags has a SQL Injection vulnerability...

IBM Rational ClearQuest 7.1.x < 7.1.2.9 / 8.0.0.x < 8.0.0.5 Multiple Vulnerabilities (credentialed check)

The remote host has a version of IBM Rational ClearQuest 7.1.x prior to 7.1.2.9 / 8.0.0.x prior to 8.0.0.5 installed. It is, therefore, affected by the following vulnerabilities : - An unspecified input validation error exists related to the Open Services for Lifecycle Collaboration OSLC system...

Information disclosure

The Web Client aka CQ Web in IBM Rational ClearQuest 7.1.2.x before 7.1.2.9 and 8.0.0.x before 8.0.0.5 allows remote attackers to obtain sensitive information via unspecified vectors that trigger a SQL error message...

CVE-2012-5765

The Web Client aka CQ Web in IBM Rational ClearQuest 7.1.2.x before 7.1.2.9 and 8.0.0.x before 8.0.0.5 allows remote attackers to obtain sensitive information via unspecified vectors that trigger a SQL error message...

CVE-2012-5765

IBM Rational ClearQuest Web (CQ Web) is affected in 7.1.2.x before 7.1.2.9 and 8.0.0.x before 8.0.0.5. The vulnerability allows remote attackers to disclose sensitive information via SQL error messages (SQL Error Message Attack). Affected component is the ClearQuest Web client; desktop/CLI is not...

CVE-2012-5765: Exposure of Sensitive Information to an Unauthorized Actor

The Web Client aka CQ Web in IBM Rational ClearQuest 7.1.2.x before 7.1.2.9 and 8.0.0.x before 8.0.0.5 allows remote attackers to obtain sensitive information via unspecified vectors that trigger a SQL error message...

PT-2012-6090

Name of the Vulnerable Software and Affected Versions IBM Rational ClearQuest versions 7.1.2.x through 7.1.2.8 IBM Rational ClearQuest versions 8.0.0.x through 8.0.0.4 Description The issue allows remote attackers to obtain sensitive information via unspecified vectors that trigger a SQL error...

CVE-2012-2748

Unspecified vulnerability in Joomla! 2.5.x before 2.5.5 allows remote attackers to obtain sensitive information via vectors related to "Inadequate filtering" and a "SQL error."...

Information disclosure

Unspecified vulnerability in Joomla! 2.5.x before 2.5.5 allows remote attackers to obtain sensitive information via vectors related to "Inadequate filtering" and a "SQL error."...

CVE-2012-2748

CVE-2012-2748 affects Joomla! 2.5.x prior to 2.5.5. The vulnerability enables remote attackers to obtain sensitive information due to inadequate input filtering and an SQL error, as described in multiple sources. The issue is a information disclosure in the Joomla! core; explicit exploit details ...

CVE-2012-2748

Unspecified vulnerability in Joomla! 2.5.x before 2.5.5 allows remote attackers to obtain sensitive information via vectors related to "Inadequate filtering" and a "SQL error."...

CVE-2012-2748: Undefined Security Weakness

Unspecified vulnerability in Joomla! 2.5.x before 2.5.5 allows remote attackers to obtain sensitive information via vectors related to "Inadequate filtering" and a "SQL error."...

PT-2012-4234

Name of the Vulnerable Software and Affected Versions Joomla! versions prior to 2.5.5 Description The issue allows remote attackers to obtain sensitive information. This is related to inadequate filtering and a SQL error. Recommendations For versions prior to 2.5.5, update to version 2.5.5 or lat...

Dotcombinat SQL Injection

-------------------- IN The NAme OF God -------------------- -====Dotcombinat Remote Sql Injection Vulnerability====- Exploit Title: Dotcombinat Remote Sql Injection Vulnerability Exploit Author: Mr.XpR SCript Download : http://www.dotcombinat.net Tested on: BackTrack , 7 , Redhat MAil :...