Joomla! Component com_jdrugstopics - SQL Injection

Joomla! Component comjdrugstopics - SQL Injection Title: Joomla Component comjdrugstopics SQL Injection Vulnerability Author: SadHaCkEr Data : 2010-04-12 InformatioN AUTHOR: SadHaCkEr Email: [email protected] ANY ONE IF U lucky U will Find Me Website: http://www.sadx.297m.com/ Forum :...

Zabbix < 1.8.2 SQLi Vulnerability

Zabbix is prone to an SQL injection SQLi vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Copyright C 2010 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective...

Joomla! Component com_jdrugstopics - SQL Injection

Title: Joomla Component comjdrugstopics SQL Injection Vulnerability Author: SadHaCkEr Data : 2010-04-12 InformatioN AUTHOR: SadHaCkEr Email: [email protected] ANY ONE IF U lucky U will Find Me Website: http://www.sadx.297m.com/ Forum : http://v4-team.net/cc ExploiT Vulnerable :...

Moodle < 1.8.12 / 1.9.x < 1.9.8 Multiple Vulnerabilities

Binary data 5504.prm...

DEBIAN-CVE-2010-1189

MediaWiki before 1.15.2 does not prevent wiki editors from linking to images from other web sites in wiki pages, which allows editors to obtain IP addresses and other information of wiki users by adding a link to an image on an attacker-controlled web site, aka "CSS validation issue."...

Joomla! Component com_aml_2 - 'art' SQL Injection

source: https://www.securityfocus.com/bid/38914/info The 'comaml2' component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

4x CMS - 'login.php' Multiple SQL Injections

source: https://www.securityfocus.com/bid/39840/info 4xcms is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the application, access or modi...

Debian Security Advisory DSA 2008-1 (typo3-src)

The remote host is missing an update to typo3-src announced via advisory DSA 2008-1. OpenVAS Vulnerability Test $Id: deb20081.nasl 6614 2017-07-07 12:09:12Z cfischer $ Description: Auto-generated from advisory DSA 2008-1 typo3-src Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...

Preisschlacht V4 Flash System (seite&aid) index.php SQL Injection

Exploit for unknown platform in category web applications ================================================================= Preisschlacht V4 Flash System seite&aid index.php SQL Injection =================================================================...

Xbtit 2.0.0 SQL Injection

Exploit Title: Xbtit SQL Injection Vulnerability Date: 14.03.2010 Author: Ctacok Software Link: http://xbtit.com/ Version: 2.0.0 Tested on: Windows XP SP3 Title : Xbtit SQL Injection Vulnerability Author : Ctacok Homepage : http://ctacok.ru/ Vulnerable File : /index.php?page=users&order=SQL&by=AS...

Easynet Forum Host (topic.php) SQL Injection Vulnerbility

Exploit for unknown platform in category web applications ========================================================= Easynet Forum Host topic.php SQL Injection Vulnerbility ========================================================= Exploit Title: Easynet Forum Host topic.php SQL Injection...

Zblog1.8 search.asp 跨站漏洞

北洋贱队http://bbs.seceye.org Zblog是基于Asp平台的Blog博客网志程序 search.asp在对用户提交数据处理上存在安全漏洞。 demo: http://localhost/search.asp?q=%3Ciframe+src%3Dhttp%3A%2F%2Fwww.gohack.org+insafe Zblog 1.8 等待官方发补丁 !/usr/bin/env python coding: utf-8 from pocsuite.net import req from pocsuite.poc import POCBase, Output from...

[SECURITY] [DSA 2008-1] New typo3-src packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-2008-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff March 08, 2010 http://www.debian.org/security/faq -...

DSA-2008-1 typo3-src - several vulnerabilities

Bulletin has no description...

Auktionshaus 3.0.0.1 - news.php?id SQL Injection

Auktionshaus 3.0.0.1 - news.php?id SQL Injection ----------------------------Information------------------------------------------------ +Name : Auktionshaus 3.0.0.1 news.php id SQL Injection +Autor : Easy Laster +Price : 59.95€ +Language :PHP +Discovered by Easy Laster +Security Group...

Microsoft to Patch 8 Vulnerabilities in Windows, Office

Microsoft has announced plans to ship two security bulletins next week to fix a total of eight vulnerabilities affecting Windows and Office products. Both bulletins are rated “important” because of the risk compromising the confidentiality, integrity or availability of user data. Microsoft is...

smartplugs 1.3 - 'showplugs.php' SQL Injection

----------------------------Information------------------------------------------------ +Name : smartplugs 1.3 SQL Injection showplugs.php +Autor : Easy Laster +Date : 03.03.2010 +Script : smartplugs 1.3 http://www.smart-plugs.com/spv1/ +Download : ------------- +Price : 170$ +Language : PHP...

PHP Auktion Pro SQL Injection

----------------------------Information------------------------------------------------ +Name : Php Auktion Pro SQL Injection news.php +Autor : Easy Laster +Date : 22.02.2010 +Script : Php Auktion Pro +Download : ----- +Demo :http://wp1072278.vwp3485.webpack.hosteurope.de/demoserver/auktionblau/...

rbot 0.9.14 - !react Unauthorized Access

rbot 0.9.14 - !react Unauthorized Access source: https://www.securityfocus.com/bid/39915/info Rbot is prone to an unauthorized-access vulnerability because it fails to adequately sanitize user supplied data. An attacker can exploit this vulnerability to gain administrative rights to the rbot...

Joomla! Component HD FLV Player - id SQL Injection

Joomla! Component HD FLV Player - id SQL Injection source: https://www.securityfocus.com/bid/38401/info The HD FLV Player component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this...