Safari < 4.1 / 5.0 Multiple Vulnerabilities

Binary data 801012.prm...

K9 Kreativity Design (pages.php) SQL Injection Vulnerability

Exploit for php platform in category web applications ============================================================ K9 Kreativity Design pages.php SQL Injection Vulnerability ============================================================ + K9 Kreativity Design pages.php SQL Injection Vulnerability +...

BBMedia Design's SQL Injection

========================================================= BBMedia Design's SQL Injection Vulnerability ========================================================= Name: BBMedia Design's SQL Injection Vulnerability Date: 2010-05-23 vendor: http://www.bbmedia.org Author: Ashiyane Digital Security Tea...

MMA Creative Design SQL Injection

========================================================= MMA Creative Design SQL Injection Vulnerability ========================================================= Name: MMA Creative Design SQL Injection Vulnerability Date: 2010-05-23 vendor: www.mmacreative.com Author: Ashiyane Digital Security...

WebAsys blind SQL Injection Exploit

Exploit for php platform in category web applications =================================== WebAsys blind SQL Injection Exploit =================================== ?php / WebAsys blindSQL-inj exploit @author: zsh.shell / if$argc !== 4 echo "\n\n"; echo "GET username by id:\tphp ".$argv0." url id...

JVN#90248889: Interstage Application Server vulnerable in request processing

The Servlet service provided by the Interstage Application Server from Fujitsu Limited, contains a vulnerability where certain requests may be handled improperly depending on the settings at the load balancing device. Impact Invalid requests may be processed or user information may be leaked...

Moodle 1.9.8 Remote File Inclusion

+Title: Moodle 1.9.8+ "libdir" , "dirroot" RFI Vulnerability Exploit +TesTed On: Version 1.9.8+ and Prior +Download: http://download.moodle.org/stable19/ +Discovered by: eidelweiss +Contact: eidelweissatcyberservicesdotcom !Thanks To: exploit-db team , JosS hack0wn , sp3x securityreason , r0073r ...

phpscripte24 Shop System SQL Injection

----------------------------Information------------------------------------------------ +Name : phpscripte24 Shop System SQL Injection Vulnerability Exploit +Autor : Easy Laster +ICQ : 11-051-551 +Date : 09.05.2010 +Script : phpscripte24 Shop System +Download : ----------- +Demo :...

Consumer Advocates in Facebook's Face

This week, the Electronic Privacy Information Center filed a 38-page complaint against Facebook with the Federal Trade Commission, demanding it cancel new features introduced in mid-April that compel users to share more information than before. Read the full article. Computerworld...

Clicksor SQL Injection

ALLH AKBAR Exploit Title: Clicksor SQL Injecti0n Vulnerability -::DESCRIPTION Date: 4 de mayo de 2010 -::DATE Author: JM511 EmaiL : [email protected] , [email protected] -::AUTHOR From :\ Saudi Arabia , Greetz to: GoLdeN-Z3r0 , Dr.Exe , Sec-q8 , Shi5 aL Hacker , SaFa7 al3nzee , BlacK DeaTh Home :...

CVE-2010-1617

user/view.php in Moodle 1.8.x before 1.8.12 and 1.9.x before 1.9.8 does not properly check a role, which allows remote authenticated users to obtain the full names of other users via the course profile page...

CVE-2010-1189

MediaWiki before 1.15.2 does not prevent wiki editors from linking to images from other web sites in wiki pages, which allows editors to obtain IP addresses and other information of wiki users by adding a link to an image on an attacker-controlled web site, aka "CSS validation issue."...

Kasseler CMS 1.4.x Lite Jokes SQL Injection

?php echo "\n\n\n"; echo " \n"; echo " Product: Kasseler CMS 1.4.x lite Module Jokes SQL-Injection Exploit \n"; echo " Usage: php.exe kasseler.php www.site.com /cmspath/ \n"; echo " Require: Magicquotes = off \n"; echo " Author: Sc0rpi0n RUS http://scorpion.su \n"; echo " Special for Antichat...

Kasseler CMS 1.4.x lite (Module Jokes) SQL-Injection Exploit

Exploit for php platform in category web applications ============================================================ Kasseler CMS 1.4.x lite Module Jokes SQL-Injection Exploit ============================================================ ?php echo "\n\n\n"; echo " \n"; echo " Product: Kasseler CMS...

SiteX CMS 0.7.4 Beta - 'photo.php' SQL Injection

?php echo "\n\n\n"; echo " \n"; echo " Product: SiteX CMS 0.7.4 beta /photo.php SQL-Injection exploit \n"; echo " Usage: php.exe sitex.php www.site.com /cmspath/ \n"; echo " Require: Magicquotes = off \n"; echo " Author: Sc0rpi0n RUS http://scorpion.su \n"; echo " Special for Antichat...

Kasseler CMS [Category] SQL Injection Vulnerabilities

No description provided by source. view source print? Kasseler CMS Category SQL Injection Vulnerabilities Author : Palyo34 Homepage : http://www.1923turk.com Script : www.kasseler-cms.net Vulnerable File index.php?module=News&do=Category&id= SQL XpL...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in Limny 2.0 allow remote attackers to 1 hijack the authentication of users or administrators for requests that change the email address or password via the user action to index.php, and 2 hijack the authentication of the administrator for...

CVE-2010-0709

Limny firmware/web app is affected by CSRF flaws in Limny

Southburn Web SQL Injection

southburn Web products.php Sql Injection Vulnerability ============================================================== .:. Author : AtT4CKxT3rR0r1ST [email protected] .:. Team : Sec Attack Team .:. Home : www.sec-attack.com/vb .:. Script : southburn Web http://southburn.ca/ .:. Bug Type : Sql...

ULoki Community Forum 2.1 - 'usercp.php' Cross-Site Scripting

Exploit Title: ULoki Community Forum v2.1 usercp.php Cross Site Scripting Date: 10/02/2010 Author: Sioma Labs Software Link: http://www.uloki.com/download/ulokiforum06may2009.zip Version: v2.1 Tested on: Windows SP 2 / WAMP CVE : Code : / | | | | | \ | |/ | ' \ / | | | / | ' / | | | | | | | | |...