Netrw 125 Vim Script - Multiple Command Execution Vulnerabilities

source: https://www.securityfocus.com/bid/30115/info Netrw is prone to multiple command-execution vulnerabilities because the application fails to sufficiently sanitize user-supplied data. Successfully exploiting these issues can allow an attacker to execute arbitrary commands with the privileges...

XChangeboard newThread.php文件SQL注入漏洞

BUGTRAQ ID: 30059 Xchangeboard是基于PHP和MySQL的公告牌解决方案。 Xchangeboard的newThread.php文件中没有正确地验证对boardID参数的输入便在SQL查询中使用，这允许远程攻击者通过提交恶意的查询请求执行SQL注入攻击。 Henrik Brinkmann XChangeboard 1.75 Beta Henrik Brinkmann XChangeboard 1.70 Henrik Brinkmann ---------------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本...

Joomla! Component altas 1.0 - Multiple SQL Injections

!/usr/bin/perl -w Joomla Component altas v 1.0 Multiple Remote SQL Injection variables vuln : ano & mes Found by : Houssamix From H-T Team H-T Team HouSSaMix + ToXiC350 Greetz : Islamic Security Team & and all musulmans hackers ComponentName: altas ScriptName: Joomla Dork :...

PHPwebnews 0.2 MySQL Edition - 'id_kat' SQL Injection

/ | | \ | | | | \ \ / / | |/ | | | / | | | | | | | |\ V / | | | | '/ |/ \ | | / | '/ | | || | | |\ | || | | | | | | || | | \ \ / | | | | | | | |/|| |,||| ||/ ,|| |/|||/|| , | ---------------------------------------------------------------------------|/ Exploit found by sToRm phpWebNews...

RCM Revision Web Development (products.php) SQL Injection Vulnerability

No description provided by source. RCM Revision Web Development products.php SQL Injection Vulnerability by D3m0n a.k.a Niiub Home: www.bl4ck-b0x.info niiubatbl4ck-b0x.info Exploit: products.php?cat=-1%20union%20select%201,2,3,4,concatws0x3a,username, userpassword,6%20from%20users/ OR...

AShop Deluxe 4.x - catalogue.php SQL Injection

AShop Deluxe 4.x - catalogue.php SQL Injection usr/bin/perl use LWP::UserAgent; use HTTP::Cookies; use Getopt::Long; use URI::Escape; -------------------------------------------------------------------------------------------------------------------------------------------------------- x AShop...

RCM Revision Web Development - 'products.php' SQL Injection

RCM Revision Web Development products.php SQL Injection Vulnerability by D3m0n a.k.a Niiub Home: www.bl4ck-b0x.info niiubatbl4ck-b0x.info Exploit: products.php?cat=-1%20union%20select%201,2,3,4,concatws0x3a,username, userpassword,6%20from%20users/ OR...

drinkswebsite-sql.txt

|| || | || o,7 || . o7 || 4||| ow, : / / . |-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=| | | | /' \ /'\ /\ \ /'\ /\ \ | | /, \ /\/\L\ \ \ \ ,/\ /\ \ \ \ / | | //\ \ /' \ /\ //\ Kings of injection | | // | | |...

PHP-Fusion Mod Kroax 4.42 - category SQL Injection

PHP-Fusion Mod Kroax 4.42 - category SQL Injection ========================================================== The kroax phpfusion Remote SQL-injection. ========================================================== Author : boom3rang Contact : [email protected] webpage : www.khg-crew.ws ---...

Drinks Complete Website 2.1.0 - drinkid SQL Injection

Drinks Complete Website 2.1.0 - drinkid SQL Injection || || | || o,7 || . o7 || 4||| ow, : / / . |-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=| | | | /' \ /'\ /\ \ /'\ /\ \ | | /, \ /\/\L\ \ \ \ ,/\ /\ \ \ \ / | | //\ \ /' \ /\ //\ Kings of injection | | // | | |...

E-topbiz Link ADS 1 - 'out.php' SQL Injection Vulnerability

E-topbiz Link ADS 1 'out.php' SQL Injection Vulnerability. Webapps exploit for php platform source: http://www.securityfocus.com/bid/29923/info Link ADS 1 is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query...

sharecms-sql.txt

============================================================== ShareCMS 0.1 Multiple Remote SQL Injection Vulnerabilities ============================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team...

Joomla! Component EXP Shop 1.0 - SQL Injection

Joomla! Component EXP Shop 1.0 - SQL Injection source: https://www.securityfocus.com/bid/29869/info The EXP Shop component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue cou...

@CMS 2.1.1 - SQL Injection

@CMS 2.1.1 - SQL Injection Viva IslaM Viva IslaM Remote SQL Injection Vulnerability @CMS 2.1.1 readarticle.php articleid AuTh0r : Mr.SQL H0ME : WwW.PaL-HaCkEr.CoM & WwW.ATsDp.CoM Email : [email protected] !! SYRIAN HaCkErS !! Script : @CMS 2.1.1 site : www.atcode.net -:: SQL ::-...

GlassFish Application Server - '/resourceNode/externalResourceNew.jsf' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/29751/info Sun Glassfish is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user ...

TorrentTrader Classic 1.x - 'scrape.php' SQL Injection

source: https://www.securityfocus.com/bid/29451/info TorrentTrader Classic is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access o...

CMS Easyway - 'mid' SQL Injection

source: https://www.securityfocus.com/bid/29461/info CMS Easyway is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify...

dvbbs 8.2 - 'login.asp' Multiple SQL Injections

source: https://www.securityfocus.com/bid/29429/info The 'dvbbs' program is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the application,...

roomphplanning15-sqlmulti.txt

...::::RoomPHPlanning 1.5 SQL Injection Vulnerabilities ::::... Virangar Security Team www.virangar.net www.virangar.ir -------- Discoverd By :virangar security teamhadihadi special tnx to:MR.nosrati,black.shadowes,MR.hesy,Zahra & all virangar members & all hackerz greetz:to my best friend in the...

Campus Bulletin Board 3.4 - post3book.asp?review SQL Injection

Campus Bulletin Board 3.4 - post3book.asp?review SQL Injection source: https://www.securityfocus.com/bid/29375/info Campus Bulletin Board is prone to multiple input-validation vulnerabilities, including multiple SQL-injection issues and a cross-site scripting issue, because it fails to sufficient...