Ero Auktion 2.0 - 'news.php' SQL Injection

----------------------------Information---------------------------------------- +Autor : Easy Laster +Date : 21.10.2010 +Script : Ero Auktion V.2.0 SQL Injection news.php +Download : ----- +Price : 34,90€ +Language :PHP +Discovered by Easy Laster +Security Group 4004-Security-Project +Greetz to...

Microsoft Works File Converter WPS File Section Header Index Table Stack Overflow (MS08-011; CVE-2008-0105)

Microsoft Works is a home/office productivity software suite. Its core functionality includes a word processor, a spreadsheet, and a database. A Microsoft Works Document, normally denoted by the extension .wps, has numerous properties which define the appearance of the document, as well as some...

CommodityRentals CD Rental Software - index.php SQL Injection

CommodityRentals CD Rental Software - index.php SQL Injection source: https://www.securityfocus.com/bid/38184/info CommodityRentals CD Rental Software is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploitin...

PHPMySpace Gold 'gid' Parameter SQL Injection Vulnerability

PHPMySpace Gold is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the...

FlatPress Multiple Cross site Scripting Vulnerabilities

This host is running FlatPress and is prone to multiple Cross Site Scripting vulnerabilities. OpenVAS Vulnerability Test $Id: gbflatpressmultxssvuln.nasl 5306 2017-02-16 09:00:16Z teissa $ FlatPress Multiple Cross site Scripting Vulnerabilities Authors: Madhuri D Copyright: Copyright c 2010...

DataLife Engine 8.3 - engineinchelp.php?config[langs] Remote File Inclusion

DataLife Engine 8.3 - engineinchelp.php?configlangs Remote File Inclusion source: https://www.securityfocus.com/bid/37851/info Datalife Engine is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow a...

vBulletin 4.0.1 - misc.php SQL Injection

vBulletin 4.0.1 - misc.php SQL Injection source: https://www.securityfocus.com/bid/37854/info vBulletin is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...

Easysitenetwork Jokes Complete Website - id Cross-Site Scripting

Easysitenetwork Jokes Complete Website - id Cross-Site Scripting source: https://www.securityfocus.com/bid/37852/info EasySiteNetwork Jokes Complete Website is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may...

Dittberner.com SQL Injection

Title pressrelease.php SQL Injection Vulnerability AUTHOR : KroNicKq HOME : www 1923turk.com Greetz : Zombie & DigitALL & 1923Turk ALL Users http://www.dittberner.com/news/pressrelease.php?id= SQL DORK : inurl:"pressrelease.php?id=" EXPLOIT :...

ITaco Group ITaco.biz SQL Injection

Exploit Title: ITaco Group ITaco.biz viewnews SQL Injection Vulnerability Date: 5/1/2010 Author: Err0R Software Link: ITaco.biz Version: N/A Tested on: CVE : Code : 11009 =============================================================================...

Joomla! Component DM Orders - 'id' SQL Injection

source: https://www.securityfocus.com/bid/37655/info The DM Orders component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

Freewebscriptz Online Games Login - Multiple SQL Injections

Freewebscriptz Online Games Login - Multiple SQL Injections source: https://www.securityfocus.com/bid/41267/info Free Web Scriptâ??z Online Games is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query...

webCocoon's simpleCMS SQL Injection Vulnerability

No description provided by source. webCocoon's simpleCMS Vulnerability Plugin Home: http://webcocoon.wordpress.com Author:ÝNFAZCI Site: www.1923turk.biz Exploit: Vuln file: /content/post/show.php Exploit: POST http://host/path/index.php HTTP/1.0 Content-type: application/x-www-form-urlencoded...

WHMCompleteSolution CMS - SQL Injection

WHMCompleteSolution CMS - SQL Injection ALGERIAN HACKER - NORTH-AFRICA SECURITY TEAM - ! WHMCompleteSolution CMS sql Injection Vulnerability ! Author : Dr.0rYX and Cr3w-DZ ! MAIL : [email protected] & [email protected] / Software Information + Vendor : http://www.siamhostserver.com/whmcs/ + script :...

CreateLive CMS 3.1 injection vulnerability-vulnerability warning-the black bar safety net

Inadvertently see the Black hands 1 2 The month of the books, saw the CreateLive CMS 4.2 injection vulnerability, the author is Chaoyang it. Just have a CreateLive CMS system, but version is 3. 1, I think it should be also the presence of this hole! The website is open for registration. Start now...

Joomla! Component com_virtuemart 1.0 - 'Product_ID' SQL Injection

Title: Joomla Component comvirtuemart SQL injection vulnerability productid Author: SOA Crew a.k.a Neo-GabrieL [email protected] visit us: http://indonesianhacker.com/ / Software Information Vendor : http://virtuemart.net/ Download : - Version : 1.0 Vulnerability : SQL injection Dork :...

Illogator Shop - SQL Injection Bypass

Illogator Shop - SQL Injection Bypass Title: Illogator Shop SQL Injection Bypass Date: 11/12/2009 Author: bi0 CVE : /\ == \ /\ \ /\ \ \ \ \ \ \ \ \ /\ \ \ \ \ \ \ \ // // // ---------------------------------------------------------------- x Illogator Shop SQL Injection Bypass x Author : bi0...

DPI 1.1-final Powered by Clixint XSS

No description provided by source. andresg888 Vendor : http://www.image-host-script.com/ Contact : andresg8884tgmaildotcom Web: : www.ilegalintrusion.nethttp://www.ilegalintrusion.net & www.bl4ck-p0rtal.orghttp://www.bl4ck-p0rtal.org Dork : No DoRk f0R ScRipT KiDDieS Example1:...

DEBIAN-CVE-2009-4076

Cross-site request forgery CSRF vulnerability in Roundcube Webmail 0.2.2 and earlier allows remote attackers to hijack the authentication of unspecified users for requests that modify user information via unspecified vectors, a different vulnerability than CVE-2009-4077...

Joomla! 'com_mygallery' Component 'cid' Parameter SQL Injection Vulnerability

No description provided by source. Bugtraq ID: 37121 Class: Input Validation Error Published: Feb 21 2008 12:00AM Updated: Nov 24 2009 10:15PM Credit: S@BUN Vulnerable: Joomla commygallery 0 The 'commygallery' component for Joomla! is prone to an SQL-injection vulnerability because it fails to...