EfesTech E-Kontr (id) Remote SQL INJECTION

$Author = RMx $home page = www.coderx.org $thanks = Dynamic , TRIP , Liz0zim $Script name = Efestech E-Kontr tr $script test = http://www.aspindir.com/Goster/5145 $script sales = 750 YTL // EfesTech E-Kontr id Remote SQL INJECTION // Table names id no = id password : sifre users = firma exploit f...

efestechekontr-sql.txt

$Author = RMx $home page = www.coderx.org $thanks = Dynamic , TRIP , Liz0zim $Script name = Efestech E-Kontör tr $script test = http://www.aspindir.com/Goster/5145 $script sales = 750 YTL // EfesTech E-Kontör id Remote SQL INJECTION // Table names id no = id password : sifre users = firma exploit...

acart-sqlxss.txt

A R I A - S E C U R I T Y A-Cart SQL Injection And Cross-Site Scripting http://alanward.net Cross Site Scripting: http://localhost/path/error.asp?msg=XSS SQL Injection: http://localhost/path/product.asp?productid=' SQL COMMAND Table Names are: categories customers orderitems orders products users...

A-Cart SQL Injection And Cross-Site Scripting

A R I A - S E C U R I T Y A-Cart SQL Injection And Cross-Site Scripting http://alanward.net Cross Site Scripting: http://localhost/path/error.asp?msg=XSS SQL Injection: http://localhost/path/product.asp?productid=' SQL COMMAND Table Names are: categories customers orderitems orders products users...

ASP Product catalog SQL injection vulnerability

ASP Product catalog SQL injection vulnerability. A nice little SQL injection vulnerability exists within ASP Product Catalog. The application fails to check for bad input from GET'd variables used in SQL query operations. In this case, the variable cid can be used for SQL injection queries...

OpenLD <= 1.2.2 (index.php id) Remote SQL Injection Vulnerability

No description provided by source. --==+================================================================================+==-- --==+ OpenLD = 1.2.2 SQL Injection Exploit +==-- --==+================================================================================+==-- DISCOVERED BY: Cody "CypherXero...

openld122-sql.txt

--==+================================================================================+==-- --==+ OpenLD = 1.2.2 SQL Injection Exploit +==-- --==+================================================================================+==-- DISCOVERED BY: Cody "CypherXero" Rester PAYLOAD: Admin username an...

aig-mssql.txt

Absolute Image Gallery Gallery.ASP categoryid MSSQL Injection Exploit Type : SQL Injection Release Date : 2007-03-15 Product / Vendor : Absolute Image Gallery http://www.xigla.com/absoluteig/ Bug : http://localhost/script/gallery.asp?action=viewimage&categoryid=-SQL Inj-...

Absolute Image Gallery 2.0 - gallery.asp?categoryId SQL Injection

Absolute Image Gallery 2.0 - gallery.asp?categoryId SQL Injection Absolute Image Gallery Gallery.ASP categoryid MSSQL Injection Exploit Type : SQL Injection Release Date : 2007-03-15 Product / Vendor : Absolute Image Gallery http://www.xigla.com/absoluteig/ Bug :...

Oracle XSQL Sample Application Vulnerability

One of the sample applications that comes with the Oracle XSQL Servlet allows an attacker to make arbitrary queries to the Oracle database under an unprivileged account. Whilst not allowing an attacker to delete or modify database contents, this flaw can be used to enumerate database users and vi...