VideoDB 3.1.0 - SQL Injection

VideoDB 3.1.0 - SQL Injection DORK:allinurl:borrow.php?diskid= DORK:allintitle:videodb Vendor: http://www.videodb.net/blog/ $ ----------- | S3C0VERUN | & ------------@ along with this i was able in some sites to determine that you can overwrite the databse contents and also if you look in the...

PCVmedia SQL Injection

IRANIAN THE BEST HACKERS IN THE WORLD Remote SQL injection Vulnerability PCVmedia freegallery.php?catid AuTh0r : EhsanHp200 H0ME : www.ehsanhp.blogsky.com Email : [email protected] Vendor : http://www.pcvmedia.com/ Persian Gulf 4 Ever! Dork : "Website designed & developed by PCVmedia.com"...

Joomla Community SQL Injection

Exploit Title : Joomla Sql Injection Vunerability Author : Ne0 H4ck3R Contact : [email protected] Date : 03-08-2011 HomePage : www.indishell.in Dork : inurl"comcommunity" Tested on: Joomla 1.5.x Vendor : http://iluvmyplanet.com Vulnerability Style :...

Saudisoftech detail.php SQLInjection Vulnerability

Exploit for php platform in category web applications + Exploit Title: Saudisoftech detail.php SQLInjection Vulnerability + Data : 2011-04-25 + Author : Net.Edit0r + DisCovered By: 3H34N + E-mail : email protected and email protected + dork : "Designed By: SAUDI SOFTECH" id= + Versian : All Ver +...

Ultimate eShop - Error-Based SQL Injection

Exploit Title: Ultimate eShop Error Based SQL Injection Vulnerability Google Dork: inurl:index.cgi?aktion=shopview Date: 19/04/2011 Author: Romka Software Link: http://www.ultimate-eshop.de/ Tested on: Windows XP SP3 Exploit:...

Site Developed by Magfiroh SQL Injection Vulnerability

Exploit for php platform in category web applications Title : Site Developed by Magfiroh Vulnerable to SQL Injection Filetype : ColdFusion Found by : p0pc0rn Dork : inurl:".cfm?judul=" SQL --- http://site.com/parameter.cfm?judul=SQL POC --- http://site.com/downloaddetail.cfm?judul=1' Live Demo...

Interact 2.4.1 - SQL Injection

Title: Interact 2.4.1 SQL Injection Title : Interact 2.4.1 SQL Injection Affected Version : Interact l0rd D3lt4l0rD & Turb0 ,,,, [email protected] S.V.T :D...

phpMyAdmin数据库搜索跨站脚本执行漏洞

BUGTRAQ ID: 45100 CVE ID: CVE-2010-4329 phpMyAdmin是用PHP编写的工具，用于通过WEB管理MySQL。 phpMyAdmin由于未有效过滤用户提供的数据，所以在实现上存在跨站脚本漏洞，远程攻击者可利用此漏洞在其他访问网站的用户的浏览器中执行任意脚本代码，从而窃取基于Cookie的验证凭据，发动其他攻击。 MandrakeSoft Corporate Server 4.0 x8664 MandrakeSoft Corporate Server 4.0 phpMyAdmin phpMyAdmin 2.11 - 3.3.6 MandrakeSo...

BPAffiliate Affiliate Tracking SQL Injection

/ / / \ \ \ \ \ / / \\ \ \ \ \ // /// \ \ / / \ //|\ / \ \ \ \ \ \ / / \ \ / / \ | | | \ | | || | | |/ / \ V / || |\ V / / \ | / \ | /| | | || / | | | | . | ' || / | || // \ // \|||/|||||||||\ .WEB.ID -----------------------------------------------------------------------...

phpaa cms 0day and fix-vulnerability warning-the black bar safety net

Author:BlAck. Eagle cookie spoofing Vulnerabilityfile:/admin/global.php 1. ? php 2. / 3. Background public profile 4. 5. For the background application is initialized, a background verify permissions, etc. 6. / 7. requireonce '../data/config.inc.php'; //system initialization file 8. requireonce...

WikiWebHelp <= 0.3.3 Insecure Cookie Handling Vulnerability

Exploit for php platform in category web applications =========================================================== WikiWebHelp = 0.3.3 Insecure Cookie Handling Vulnerability =========================================================== My + Author : FuRty Contact : email protected Software info Web...

webSPELL 4.x safe_query Bypass

INFORMATION +Name : Webspell 4.X safequery bypass Vulnerability +Author : silent vapor +Date : 29.09.2010 +Script : webspell +Price : free +Language :PHP +Discovered by silent vapor +Underground Agents +Greetz to Team-Internet, 4004-Security-Project, Easy Laster +Vulnerability :...

MediaDesignStudio SQL Injection Vulnerability

Exploit for php platform in category web applications ============================================= MediaDesignStudio SQL Injection Vulnerability ============================================= .----..--.--.| |--..-----..----.| |.-----..-----. | || | || || -|| || || || | ||| ||||||| ||||| | || ||...

CVE-2010-1950

SQL injection vulnerability in the Online News Paper Manager comjnewspaper component 1.0 for Joomla!, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the dateinfo parameter to index.php. NOTE: the provenance of this information is unknown; the detail...

Joomla Component com_qpersonel SQL Injection Vulnerability

Exploit for php platform in category web applications ========================================================== Joomla Component comqpersonel SQL Injection Vulnerability ========================================================== Exploit Title: Joomla Component QPersonel SQL Injection Vulnerabili...

Joomla Component com_serie SQL Injection Vulnerability

Exploit for php platform in category web applications ====================================================== Joomla Component comserie SQL Injection Vulnerability ====================================================== Title : Joomla Component comserie SQL Injection Vulnerability Author: DevilZ TM...

XlentCMS 1.0.4 - &#039;downloads.php?cat&#039; SQL Injection

Script : XlentCMS V1.0.4 downloads.php?cat SQL Injection Vulnerability Script site : http://sphere.xlentprojects.se/portal.php AUTHOR : Gamoscu HOME : http://www.1923turk.biz Blog : http://gamoscu.wordpress.com/ Greetz : Manas58 Baybora Delibey Tiamo Psiko Turco infazci X-TRO...

list Web (addlink.php id) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================ list Web addlink.php id Remote SQL Injection Vulnerability ============================================================ | | | | | script : http://maker.ir | | DorK :...

phpbb 2.0.5 viewtopic.php Sql注入

No description provided by source...

Joomla Jeema Article Collection SQL Injection

Joomla Component comjeemaarticlecollection SQL injection Vulnerability author : Fl0riX Greetz : BARCOD3 , Septemb0x, Deep-Power,DreamPower,Pyske,3kb3r Name : comjeemaarticlecollection Bug Type : SQL Injection Infection : Admin login bilgileri alýnabilir. Demo Vuln. :...