boastMachine <= 3.1 (mail.php id) SQL Injection Vulnerability

No description provided by source. ...:::::boastMachine =3.1 SQL Injection Vulnerbility ::::.... Virangar Security Team www.virangar.org www.virangar.net -------- Discoverd By :virangar security teamhadihadi special tnx to:MR.nosrati,black.shadowes,MR.hesy,Zahra & all virangar members & all hacke...

aflog 1.01 - Cross-Site Scripting SQL Injection

aflog 1.01 - Cross-Site Scripting SQL Injection Name: aflog 1.01 and possibly earlier Webiste: http://aflog.org/ Vulnerability type: SQL Injection comments.php and XSS Author: shinmai, 2008-01-22 Description: SQL INJECTION: SQL injection is possible in comments.php for the GET variable 'id', like...

agares221-sql.txt

!/usr/bin/perl Agares PhpAutoVideo 2.21 articlecat Remote SQL Injection Exploit Bug Found by ka0x http://milw0rm.org/exploits/4901 .. but sql injection works if we include in index.php bug file with sql injection..like this :...

Agares phpAutoVideo 2.21 - articlecat SQL Injection (2)

Agares phpAutoVideo 2.21 - articlecat SQL Injection 2 !/usr/bin/perl Agares PhpAutoVideo 2.21 articlecat Remote SQL Injection Exploit Bug Found by ka0x http://milw0rm.org/exploits/4901 .. but sql injection works if we include in index.php bug file with sql injection..like this :...

Agares PhpAutoVideo 2.21 (articlecat) Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl Agares PhpAutoVideo 2.21 articlecat Remote SQL Injection Exploit Bug Found by ka0x http://milw0rm.org/exploits/4901 .. but sql injection works if we include in index.php bug file with sql injection..like this :...

PostgreSQL Multiple Vulnerabilities

Binary data 4333.prm...

MeGaCheatZ 1.1 - Multiple SQL Injections

MeGaCheatZ 1.1 - Multiple SQL Injections --------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg...

[waraxe-2007-SA#060] - Sensitive info disclosure in CuteNews <= 1.4.5

waraxe-2007-SA060 - Sensitive info disclosure in CuteNews = 1.4.5 ===================================================================== Author: Janek Vind "waraxe" Date: 24. December 2007 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-60.html Vulnerable software description: Cute new...

Ip Reg 0.3 Multiple Remote SQL Injection Vulnerabilities

Exploit for unknown platform in category web applications ======================================================== Ip Reg 0.3 Multiple Remote SQL Injection Vulnerabilities ======================================================== --------------------------------------------------------------- / | ...

nicLOR CMS - 'sezione_news.php' SQL Injection

Name : nicLOR-CMS SQL Injection Vulnerability. Author : x0kster Email : [email protected] Script Download : http://www.niclor.net/prodotti/16-04-06-niclorcms.zip Date : 21/12/2007 SQL Injection in sezionenews.php So we can exploit the $intSezioneID and execute an sql injection. PoC:...

Meridian Prolog Manager uses weak authentication to store and transmit user credentials

Overview Meridian Systems Prolog Manager does not use strong encryption and returns a list of all user credentials when authenticating clients. These behaviors could allow an attacker to obtain user credentials and decrypt passwords. Description Meridian Systems Prolog Manager is a set of...

Flat PHP Board <= 1.2 Multiple Vulnerabilities

--------------------------------------------------------------- / | | / | / |/ | | |/ | | / | | | | | |/ | | // | || | ||| /| / / | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg...

Flat PHP Board <= 1.2 Multiple Vulnerabilities

No description provided by source. --------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | / \ \ | \ \ | | | \ | |/ \ | | // | || | ||| /| / /\ | |||| /| / / &nb...

flatphp-multi.txt

--------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg --------------------------------------------------------------- Flat PHP...

Flat PHP Board <= 1.2 Multiple Vulnerabilities

Exploit for unknown platform in category web applications ============================================== Flat PHP Board | |||| /| / / --------------------------------------------------------------- Flat PHP Board = 1.2 Multiple Vulnerabilities...

Flat PHP Board 1.2 - Multiple Vulnerabilities

--------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg --------------------------------------------------------------- Flat PHP...

Flat PHP Board 1.2 - Multiple Vulnerabilities

Flat PHP Board 1.2 - Multiple Vulnerabilities --------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg...

Aria-Security.Net: Gouae DWD Realty SQL Injection

Aria-Security Team, http://Aria-Security.net ------------------------------- Shout Outs: AurA, Vendor: http://gouae.com Original Page: http://aria-security.net/forum/showthread.php?p=1116 Username: Admin Password: anything' OR 'x'='x More Advisories @...

GLSA-200711-33 : nss_ldap: Information disclosure

The remote host is affected by the vulnerability described in GLSA-200711-33 nssldap: Information disclosure Josh Burley reported that nssldap does not properly handle the LDAP connections due to a race condition that can be triggered by multi-threaded applications using nssldap, which might lead...

Aria-Security.net: CoolShot E-Lite POS 1.0

Aria-Security Team http://aria-security.net ------------------------------------- CoolShot E-Lite POS 1.0 http://coolshot.net/index.php/works/49-e-lite-pos Original Advisory @ http://aria-security.net/forum/showthread.php?p=1108post1108 Published on November 24 2007 users.userid users.username...