Babe Logger V2 Sql inj. vuln.

Babe Logger V2 Sql inj. vuln. Vuln. dicovered by : r0t Date: 28 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/babe-logger-v2-sql-inj-vuln.html Vendor:http://13scripts.com/ affected version: V2 and prior Product Description: This script is geared towards babe blog type sites but c...

Netzbrett 1.5.1 SQL inj. vuln.

Netzbrett 1.5.1 SQL inj. vuln. Vuln. dicovered by : r0t Date: 28 nov. 2005 orginal advisory:http://pridels.blogspot.com/2005/11/netzbrett-151-sql-inj-vuln.html Vendor:http://www.weaverslave.ws/index.32.html affected version: 1.5.1 and prior Product Description: Netzbrett is a Web board / forum...

SDMS 2.0 SQL inj. vuln.

Simple Document Management System SQL injection Vuln. Vuln. dicovered by : r0t Date: 27 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/sdms-20-sql-inj-vuln.html Vendor:http://sdms.cafuego.net/ affected version: 2.0-CVS and prior Product Description: SDMS uses PHP to provide you wi...

Zainu 2.x SQL inj. vuln.

Zainu 2.x SQL inj. vuln. Vuln. dicovered by : r0t Date: 28 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/zainu-2x-sql-inj-vuln.html Vendor:http://www.zainu.com affected version: 2.x and prior Product Description: Zainu lets you create and maintain professional music videos websit...

AllWeb search SQL inj. vuln.

AllWeb search SQL inj. vuln. Vuln. dicovered by : r0t Date: 28 nov. 2005 orginal advisory:http://pridels.blogspot.com/2005/11/allweb-search-sql-inj-vuln.html Vendor:http://www.scripts-templates.com affected version: 3.0 and prior Product Description: Want to make money from your site traffic?...

edmoBBS SQL inj. vuln.

edmoBBS SQL inj. vuln. Vuln. dicovered by : r0t Date: 28 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/edmobbs-sql-inj-vuln.html Vendor:http://www.upyournet.com/edmobbs/index.php affected version: V0.9 and prior Product Description: edmoBBS is not a cluttered and complex board...

Fantastic News "category" SQL inj.

Fantastic News "category" SQL inj. Vuln. dicovered by : r0t Date: 25 nov. 2005 orginal advisory:http://pridels.blogspot.com/2005/11/fantastic-news-category-sql-inj.html Vendor:www.fscripts.com Product link:http://fscripts.com/free.php?id=1 affected version: 2.1.1 and prior Product description:...

pdjk-support suite sql inj.

pdjk-support suite sql inj. Vuln. dicovered by : r0t Date: 25 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/pdjk-support-suite-sql-inj.html Vendor:http://support.pdjkeelan.com/ affected vesion: 1.1a retail edition and prior. Product Description: The pdjk-support suite is a full...

SMBCMS v2.1 SQL injection.

SMBCMS v2.1 SQL injection. Vuln. dicovered by : r0t Date: 25 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/smbcms-v21-sql-injection.html Vendor:www.smbcms.com affected vesion: v2.1 Vuln. Description: SMBCMS search engine contains a flaw that may allow an attacker to carry out an...

iSupport 1.x "include_file" SQL inj.

iSupport 1.x "includefile" SQL inj. Vuln. dicovered by : r0t Date: 25 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/isupport-1x-includefile-sql-inj.html Vendor:http://www.idevspot.com/ Product link:http://www.idevspot.com/index.php?page=pdetail7E1 affected vesion: tested on 1.06...

cSupport "pg" SQL inj.

cSupport "pg" SQL inj. Vuln. dicovered by : r0t Date: 25 nov. 2005 orginal advisory:http://pridels.blogspot.com/2005/11/csupport-pg-sql-inj.html Vendor:www.forperfect.com Product link:http://www.forperfect.com/csupport/ affected vesion:1.0 and prior Vuln. Description: Input passed to the "pg"...

sNews 1.3 SQL injection.

sNews 1.3 SQL injection. Vuln. dicovered by : r0t Date: 25 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/snews-13-sql-injection.html Vendor:http://www.solucija.com/ affected vesion:1.3 and prior Vuln. Description: Input passed to the "id" and "category" parameter in "index.php"...

Systems Panel v1.0.x Multiple SQL inj.

Systems Panel v1.0.x Multiple SQL inj. Vuln. dicovered by : r0t Date: 25 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/systems-panel-v10x-multiple-sql-inj.html Vendor:www.sysbotz.com Product link:http://www.sysbotz.com/products/systemspanel/index.htm affected vesion: 1.0.6 and...

Kayako SupportSuite v3.00.x Full path Disclosure .

Kayako SupportSuite v3.00.x Full path Disclosure . Vuln. dicovered by : r0t Date: 25 nov. 2005 orginal advisory:http://pridels.blogspot.com/2005/11/kayako-supportsuite-v300x-full-path.html Vendor:kayako.com affected vesion:v3.00.12 and prior Vuln. Description: Due invalid input parameters or not...

OWOS Lite 3.0 SQL inj.

Online Work Order Suite: Lite Edition for ASP 3.0 SQL inj. Vuln. dicovered by : r0t Date: 25 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/owos-lite-30-sql-inj.html Vendor:www.onlinetechtools.com Product link:http://www.onlinetechtools.com/products/owoslite/ affected vesion:3.0 a...

AgileBill 1.4.x "id" sql injection.

AgileBill 1.4.x "id" sql injection. Vuln. dicovered by : r0t Date: 25 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/agilebill-14x-id-sql-injection.html Vendor:http://agileco.com/ affected vesion: 1.4.92 and possible prior versions. Product Description: AgileBill features a powerf...

Hung it to a trick-vulnerability warning-the black bar safety net

| --- | Hung it when using theiframe src=http://www.sohu.com/mm.htm width=0 height=0/iframesuch source code, but the browser is hung when the status bar will display hung it to the link in mm. htm or is hanging the page, add the phrasebody onload=window. status="is hanging stations of the URL"may...

DeskLance Vuln.

DeskLance Vuln. Vuln. dicovered by : r0t Date: 24 nov. 2005 Orginal advsiory:http://pridels.blogspot.com/2005/11/desklance-vuln.html Vendor:http://www.desklance.com/ affected version: 2.3 and prior Vuln. description: Input passed to the "main" parameter in "index.php" isn't properly verified,...

Softbiz Web Host Directory Script Multiple vuln.

Softbiz Web Host Directory Script Multiple vuln. Vuln. dicovered by : r0t Date: 23 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/web-host-directory-script-multiple.html Vendor:www.softbizscripts.com Product link:http://www.softbizscripts.com/web-hosting-directory-script.php...

freeForum 1.x "cat" "thread" SQL inj.

freeForum 1.x "cat" "thread" SQL inj. Vuln. dicovered by : r0t Date: 23 nov. 2005 Orginal advsiory:http://pridels.blogspot.com/2005/11/freeforum-1x-cat-and-thread-sql-inj.html Vendor:http://soft.zoneo.net/freeForum/ affected version: 1.1 and prior Vuln. description: Input passed to the "cat" and...