Report warns of 'web bugs' and privacy violations

Researchers at the University of California, Berkeley’s School of Information has released a report showing that the most popular Web sites in the United States all share data with their corporate affiliates and allow third parties to collect information directly by using tracking beacons known a...

Pixelactivo 3.0 SQL Injection

-------------------------AllaH AkbaR------------------------------- Pixelactivo Remote SQL Injection Vulnerability --------------------------------------------------------------------------- Discovered By: Snakespc ALGERIAN HaCkEr Mail: [email protected] Site:http://www.snakespc.com/sc/index.php...

Ecsportal 6.5 SQL Injection

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Ecsportal 6.5 - SQL-injection Vulnerability ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ @=======================================@ ! ============taRentReXx=============== ! The Indian Hack...

Open-School 1.0 SQL Injection

Cms : Open-school Version : 1.0 Archivo : Index.php Parametro : id Sitio :http://open-school.org Url Vulnz :http://site.com/index.php?module=osnews&view=show&id=SQLI Demo Injection: Admin User,Pass:...

Evernew Free Joke Script 1.2 SQL Injection

@=======================================@ ============taRentReXx=================== The Indian Hacker @=======================================@ @=Author : taRentReXx @=Email : [email protected] @===============INDIAN=================@ @=======================================@ @=Script :...

Kensei Board 2.0.0b - Multiple SQL Injections

Kensei Board = 2.0.0b Multiple Remote SQL Injection Vulnerabilities Bug found && Exploited by cOndemned Greetz: SELECT FROM friends Download Script : http://www.kenseiboard.com/counter/click.php?id=2 --- source of index.php : ... 87. if $incfunction == "showforum" 88. if $GETt == "" 89...

Mandrake Security Advisory MDVSA-2009:110 (squirrelmail)

The remote host is missing an update to squirrelmail announced via advisory MDVSA-2009:110. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

Shutter 0.1.1 - Multiple SQL Injections

Shutter 0.1.1 - Multiple SQL Injections || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH!...

IceWarp Merak Mail Server 9.4.1 Groupware Component - Multiple SQL Injections

IceWarp Merak Mail Server 9.4.1 Groupware Component - Multiple SQL Injections source: https://www.securityfocus.com/bid/34820/info IceWarp Merak Mail Server is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL...

REMOTE SQL INJECTION (SQLi) VULNERABILITY--Photo-Rigma.BiZ v30-->

------------------------------------------------------------------ REMOTE SQL INJECTION SQLi VULNERABILITY--Photo-Rigma.BiZ v30-- ------------------------------------------------------------------ CMS INFORMATION: --WEB: http://foto.rigma.biz affected --DOWNLOAD:...

BolinTech DreamFTP Server 1.02 - 'users.dat' Arbitrary File Disclosure

!/usr/bin/perl -w This Bug Similar to others found By My Friend : Stack = so special Thanx So You Can Exploit Arbitrary File Disclosure From The Server == You can use Stack's Exploit To do That But This Exploit i will get Users & Passwords Of The applicatin From : users.dat : C:\Program...

VS PANEL 7.3.6 SQL Injection

+-------------------------------------+ + Homepage: http://www.vspanel.gr/ + Product: VS PANEL v.7.3.6 + File: showcat.php + Parameter: CatID + Dork: "Powered by VS PANEL" +-------------------------------------+ + SQL Injection: +...

Online Contact Manager 3.0 - email.php?id Cross-Site Scripting

Online Contact Manager 3.0 - email.php?id Cross-Site Scripting source: https://www.securityfocus.com/bid/34626/info Online Contact Manager is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues ...

Mandriva Update for nss_ldap MDVSA-2008:049 (nss_ldap)

Check for the Version of nssldap OpenVAS Vulnerability Test Mandriva Update for nssldap MDVSA-2008:049 nssldap Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

Pixie CMS Multiple Vulnerabilities (Mar 2009) - Active Check

Pixie CMS is prone to an SQL injection SQLi vulnerability and a cross-site scripting XSS vulnerability because it fails to sufficiently sanitize user-supplied data. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C b...

Bloginator 1a - Cookie Bypass / SQL Injection

Author = FireShot , Jacopo Vuga. Mail = fireshotautisticiorg Software = Bloginator V1A Download = http://kamads.com/kamadsads/download.php?email=bloginator&ID=0 Greets to = Osirys, Myral, str0ke Vulnerability = Insicure Cookie Handling CODE URL www.site.com/bloginator/articleCall.php global...

Wordpress fMoblog 2.1 SQL Injection

Wordpress Plugin fMoblog Remote SQL Injection Vulnerability Plugin Home: http://www.fahlstad.se/wp-plugins/fmoblog/ Plugin Version: 2.1 Author: strange kevin Email: [email protected] Google Dork: "Gallery powered by fMoblog" Exploit:...

DeluxeBB 1.3 - qorder SQL Injection

DeluxeBB 1.3 - qorder SQL Injection Author: girex Homepage: girex.altervista.org Date: 18/03/2009 CMS: DeluxeBB 1.3 and prior site: deluxebb.com NOTE: - Works regardless of php.ini settings - This SQL injection will shows you username and md5 of ALL registered users of the site. - This PoC was...

phpComasy 0.9.1 - entry_id SQL Injection

phpComasy 0.9.1 - entryid SQL Injection phpComasyentryid SQL-injection Vulnerability Author : boom3rang Greetz : H!tm@N, KHG, chs, redc00de Vulnerability : SQL injection Google Dork : N/W -------------------------------------------------- ! Name : phpComasy ! Site : www.phpcomasy.com ! Download :...

WEBJump! Multiple SQL Injection Vulnerabilities

WEBJump! is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the...