[Full-disclosure] PHP File Sharing System 1.5.1

PHP File Sharing System - Directory traversal +--------------------------------------------+ Author: Jonas Thambert Date: 2007-10-13 URL: http://sourceforge.net/projects/phpfilesadmin/ Vendor Notified. Version: 1.5.1 latest - Description - PHP File Sharing System is vulnerable to directory...

phpfss-traverse.txt

PHP File Sharing System - Directory traversal +--------------------------------------------+ Author: Jonas Thambert Date: 2007-10-13 URL: http://sourceforge.net/projects/phpfilesadmin/ Vendor Notified. Version: 1.5.1 latest - Description - PHP File Sharing System is vulnerable to directory...

Scott Manktelow Design Stride 1.0 Courses - 'detail.php' Multiple SQL Injections

source: https://www.securityfocus.com/bid/26036/info Stride 1.0 Courses is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the application,...

Scott Manktelow Design Stride 1.0 - 'Merchant shop.php' SQL Injection

source: https://www.securityfocus.com/bid/26046/info Scott Manktelow Design Stride 1.0 Merchant is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

Softbiz Jobs & Recruitment - SQL Injection

Softbiz Jobs & Recruitment Script SQL INJECTION BY IRCRASH AUTHOR : IRCRASH Dr.Crash Script Download : http://www.softbizscripts.com/ DORK: "Powered by SoftbizScripts" "ALL JOBS" Injection Adress : http://site.com/browsecats.php?cid=sql cod Sql code For see user name :...

Mambo Component Mambads <= 1.5 Remote SQL Injection Vulnerability

No description provided by source. Mambads = 1.5 Sql Injection Autor:Sniper456 Contact:Sniper456atgmail.kom Greetss: PescaoDeth, Daemon21, Vampirin456, Shh-2, CodeBreak and the chilean People ; SQL: index.php?option=commambads&Itemid=0&func=detail&cacat=1&casb=1&caid=inyecta maricon Example:...

Google Gmail cross-site request forgery vulnerability

Overview According to public reports, Google Gmail contained a cross-site request forgery XSRF vulnerability that allowed attackers to create email filters that could forward mail and attachments to arbitrary email addresses. Description Google Gmail is a web-based mail service. Gmail provides...

kwsphp-sql.txt

KwsPHP Module jeuxflash Remote SQL Injection Vulnerability AUTHOR : H-T Team HouSSamix ToXiC350 HOME : http://no-hack.fr & http://no-hack.net Site: http://koogar.alorys-hebergement.com/kwsphp/index.php?mod=downloads&filedl=30&before=8&pdl=1 Dork : inurl:index.php?mod=jeuxflash EXPLOITS :...

Dale Mooney Calendar Events - Viewevent.php SQL Injection

Dale Mooney Calendar Events - Viewevent.php SQL Injection source: https://www.securityfocus.com/bid/25456/info Calendar Events is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow...

yemao cms3.2 info_zoom.php SQL injection Vulnerability

Vulnerable file : infozoom.php Exploit : Thx : All the kidz of cnsst.org 过滤不严,造成SQL注入漏洞 ymCMS 3.2.0 http://www.yemao.com官方已经更新建议先删掉这个文件,等官方补丁 http://www.yemao.com/infozoom.php?sortid=1%20and%201=2%20union%20select%201,concatusername,0x5f,password,3,4,5,6,7%20from%20user%20where%20userid=1/...

AuraCMS [Forum Module] Remote SQL Injection Vulnerability

No description provided by source. AuraCMS Forum Module - Remote SQL Injection Vendor : http://auracms.org/ Download : http://iwan.or.id/redirect/download/36.html -- Forum Module Found By : k1tk4t - k1tk4t4tnewhack.org Location : Indonesia -- newhackdotorg @irc.dal.net Dork : inurl:"?pilih=forum"...

Berthanas Ziyaretci Defteri 2.0 - Yonetici.asp SQL Injection

Berthanas Ziyaretci Defteri 2.0 - Yonetici.asp SQL Injection source: https://www.securityfocus.com/bid/25109/info Berthanas Ziyaretci Defteri is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this...

Online Store Application Template - Sign_In.aspx SQL Injection

Online Store Application Template - SignIn.aspx SQL Injection source: https://www.securityfocus.com/bid/25112/info Online Store Application Template is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting...

Real Estate Listing Website Application Template Login Dialog - SQL Injection

source: https://www.securityfocus.com/bid/25115/info Real Estate Listing Website Application Template is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromis...

Online Store Application Template - 'Sign_In.aspx' SQL Injection

source: https://www.securityfocus.com/bid/25112/info Online Store Application Template is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

Metyus Forum Portal 1.0 - Philboard_Forum.asp SQL Injection

Metyus Forum Portal 1.0 - PhilboardForum.asp SQL Injection source: https://www.securityfocus.com/bid/25096/info Metyus Forum Portal is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could...

IBM AIX 5.2/5.3 FTP Client Local Buffer Overflow Vulnerability

IBM AIX 5.2/5.3 FTP Client Local Buffer Overflow Vulnerability. CVE-2007-4004. Local exploit for aix platform source: http://www.securityfocus.com/bid/25077/info The IBM AIX FTP application is prone to a local buffer-overflow vulnerability because it fails to properly bounds-check user-supplied...

Vikingboard 0.1.2 - topic.php Cross-Site Scripting

Vikingboard 0.1.2 - topic.php Cross-Site Scripting source: https://www.securityfocus.com/bid/25056/info Vikingboard is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting this issue could allow an attacker to steal...

prozilla-sql.txt

--==+================================================================================+==-- --==+ Prozilla Directory Script SQL Injection Vulnerbility +==-- --==+================================================================================+==-- AUTHOR: t0pP8uZz & xprog SITE:...

emeeting-sql.txt

--==+================================================================================+==-- --==+ eMeeting Online Dating Software 5.2 SQL Injection Vulnerbilitys +==-- --==+================================================================================+==-- AUTHOR: t0pP8uZz & xprog SITE: eMeeting...