joomla15-sql.txt

!/usr/bin/php -q -d shortopentag=on getPageParameters; switch $params-get'filtertype', 'title' case 'title' : $where .= ' AND LOWER a.title LIKE '%'.$filter.'%''; break; case 'author' : $where .= ' AND LOWER u.name LIKE '%'.$filter.'%' OR LOWER a.createdbyalias LIKE '%'.$filter.'%' '; break;...

pabugs-sql.txt

!/usr/bin/perl use LWP::UserAgent; use HTTP::Cookies; if@ARGV get$sql or err; $res - content = /0-9,a-f32/ or err; print "\n + Admin Passwordmd5=$usid is: $1 \n\n"; sub usage print "---------------------------------------------------------\n"; print "| Bug Found by: umpi |\n"; print...

PHP123 Top Sites - category.php?cat SQL Injection

PHP123 Top Sites - category.php?cat SQL Injection --==+================================================================================+==-- --==+ PHP123 Top Sites SQL Injection Vulnerbility +==-- --==+================================================================================+==-- AUTHOR:...

AV Arcade 2.1b (view_page.php) Remote SQL Injection

AV Arcade 2.1b viewpage.php Remote SQL Injection Web: AV Arcade 2.1b Site : www.avscripts.net Dork : "Powered By AV Arcade" Author: Kw3rLn tehlostbyteatYaHoOd0tCom Romanian Security Team Ethical Hacking - hTTp://RSTZONE.nET Description: SQL injection in $id of includes/viewpage.php Exploit:...

Buddy Zone 1.5 - Multiple SQL Injections

Buddy Zone 1.5 - Multiple SQL Injections --==+================================================================================+==-- --==+ Buddy Zone Version 1.5 And Prior SQL Injection Vulnerability +==-- --==+================================================================================+==--...

Buddy Zone 1.5 - Multiple SQL Injections

--==+================================================================================+==-- --==+ Buddy Zone Version 1.5 And Prior SQL Injection Vulnerability +==-- --==+================================================================================+==-- AUTHOR: t0pP8uZz & xprog SITE:...

Elkagroup Image Gallery 1.0 - SQL Injection

--==+================================================================================+==-- --==+ Image Gallery 1.0 SQL Injection Vulnerbilitys +==-- --==+================================================================================+==-- AUTHOR: t0pP8uZz & xprog SCRIPT DOWNLOAD: N/A SITE:...

GLSA-200706-06 : Mozilla products: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200706-06 Mozilla products: Multiple vulnerabilities Mozilla developers fixed several bugs involving memory corruption through various vectors CVE-2007-2867, CVE-2007-2868. Additionally, several errors leading to crash, memory...

CVE-2000-1243

Privacy leak in Dansie Shopping Cart 3.04, and probably earlier versions, sends sensitive information such as user credentials to an e-mail address controlled by the product developers...

Wordpress 2.2 (xmlrpc.php) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ======================================================= Wordpress 2.2 xmlrpc.php Remote SQL Injection Exploit ======================================================= / El error, bastante tonto por cierto, se encuentra en la funcion...

wordpress -- XMLRPC SQL Injection

Secunia reports: Slappter has discovered a vulnerability in WordPress, which can be exploited by malicious users to conduct SQL injection attacks. Input passed to the "wp.suggestCategories" method in xmlrpc.php is not properly sanitised before being used in SQL queries. This can be exploited to...

Mandrake Linux Security Advisory : mutt (MDKSA-2007:113)

A flaw in the way mutt processed certain APOP authentication requests was discovered. By sending certain responses when mutt attempted to authenticate again an APOP server, a remote attacker could possibly obtain certain portions of the user's authentication credentials CVE-2007-1558. A flaw in h...

Vonage VoIP phones weak defaults

Administrative interface in available via WAN connection with username/password of user/user...

CVE-2007-2715

CVE-2007-2715 affects Snaps! Gallery 1.4.4. The vulnerability is in admin/users.php and allows remote attackers to modify usernames and passwords via the (1) username parameter or (2) password and password2 parameters in an edit action. The available connected records confirm the same textual des...

SimpleNews <= 1.0.0 FINAL (print.php news_id) SQL Injection Exploit

No description provided by source. !/usr/bin/perl -w SimpleNews = 1.0.0 FINAL SQL Injection Exploit Discovered by: Silentz Payload: Admin Username & Hash Retrieval Website: http://www.w4ck1ng.com Vulnerable Code print.php: $newsid = $GET'newsid'; $query = "SELECT FROM simplenewsarticles WHERE...

Multiple Vulnerabilities in the IOS FTP Server

The Cisco IOS FTP Server feature contains multiple vulnerabilities that can result in a denial of service DoS condition, improper verification of user credentials, and the ability to retrieve or write any file from the device filesystem, including the device's saved configuration. This...

Symantec Norton Ghost本地溢出及信息泄露漏洞

Symantec Norton Ghost是一个备份恢复系统，允许用户将系统恢复到之前的快照状态。 Norton Ghost的服务管理器实现上存在缓冲区溢出漏洞，如果攻击者能够向Norton Ghost的服务管理器中的函数提供超长字符串的话，就可能触发缓冲区溢出，导致以系统级权限执行任意指令。 Norton...

CVE-2007-2149

Stephen Craton aka WiredPHP Chatness 2.5.3 and earlier stores usernames and unencrypted passwords in 1 classes/vars.php and 2 classes/varstuff.php, and recommends 0666 or 0777 permissions for these files, which allows local users to gain privileges by reading the files, and allows remote attacker...

Wordpress 2.1.2 (xmlrpc) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ===================================================== Wordpress 2.1.2 xmlrpc Remote SQL Injection Exploit ===================================================== !/usr/bin/perl -w Wordpress 2.1.2 SQL Injection POC Wordpress version 2.1.2 is...

PHP-Fusion Module topliste 1.0 (cid) Remote SQL Injection Vulnerability

No description provided by source. -------------------------------- PHP-FUSION topliste Module cid Remote SQL Injection Vuln -------------------------------- Bulan: xoron - unique xoron.biz -------------------------------- Exploit:...