itMedia - Multiple SQL Injections

source: https://www.securityfocus.com/bid/30740/info itMedia is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the application, access or...

Links Pile - 'link.php' SQL Injection

source: https://www.securityfocus.com/bid/29223/info Links Pile is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify...

Meet#Web 0.8 - modules.php?root_path Remote File Inclusion

MeetWeb 0.8 - modules.php?rootpath Remote File Inclusion source: https://www.securityfocus.com/bid/30673/info MeetWeb is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise...

PHP-Fusion 4.01 - 'readmore.php' SQL Injection

source: https://www.securityfocus.com/bid/30680/info PHP-Fusion is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify...

Magnet Blog Sql Injection Vulnerability

Title:Magnet Blog Sql Injection Vulnerability Discovered by : AleminKrali Dork: "intitle:Magnet Blog" Download:www.aspindir.com/Goster/4217 Exploit:Http://www.site.com/scriptpath/yazidetay.asp?id=-999 union select 0,user,2,pass,4,5 from user Example:...

WebmasterSite (Multiple Products) - Remote Command Execution

WebmasterSite Multiple Products - Remote Command Execution source: https://www.securityfocus.com/bid/30572/info Multiple WebmasterSite products are prone to a remote shell command-execution vulnerability because the applications fail to sufficiently sanitize user-supplied data. Successfully...

plogger-sql.txt

GulfTech Security Research August 05, 2008 Vendor : Mike Johnson URL : http://www.plogger.org/ Version : Plogger addfile$filecontents, $row"path";...

Softbiz Image Gallery - index.php Multiple Cross-Site Scripting Vulnerabilities

Softbiz Image Gallery - index.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/30546/info Softbiz Photo Gallery is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may levera...

Softbiz Image Gallery - 'images.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/30546/info Softbiz Photo Gallery is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecti...

Pcshey Portal - 'kategori.asp' SQL Injection

source: https://www.securityfocus.com/bid/30534/info Pcshey Portal is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify...

PHP-Nuke Book Catalog Module 1.0 - catid SQL Injection

PHP-Nuke Book Catalog Module 1.0 - catid SQL Injection source: https://www.securityfocus.com/bid/30511/info The Book Catalog module for PHP-Nuke is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this...

GC Auction Platinum (cate_id) Remote SQL Injection Vulnerability

No description provided by source. || | | GC Auction Platinum cateid Remote SQL Injection Vulnerability | | |---------------------Hussin X----------------------| | | Author: Hussin X | | Home : www.tryag.cc/cc | | email: darkangelg85atYahooDoTcom | | | | | | | | script :...

Jamroom 3.3.8 - Cookie Authentication Bypass

source: https://www.securityfocus.com/bid/30406/info Jamroom is prone to fourteen security vulnerabilities, including an authentication-bypass vulnerability that occurs because the application fails to verify user-supplied data. Very few technical details are available regarding the remaining...

phptest-sql.txt

Name : phpTest 0.6.3 picture.php imageid Remote SQL Injection Vulnerability Author : cOndemned Dark-Coders Dork : sorry, today no dork ; Greetz : ZaBeaTy, str0ke, GregStar, Voo|doo, ixos, 0in, suN8Hclf, TBH, Avantura : Source code of "picture.php" : 24. ptregister'GET', 'imageid'; 25. 26. if...

phpTest 0.6.3 (picture.php image_id) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ======================================================================= phpTest 0.6.3 picture.php imageid Remote SQL Injection Vulnerability ======================================================================= Name : phpTest 0.6.3...

nss_ldap randomly replying with wrong user's data

Race condition in nssldap, when used in applications that are linked against the pthread library and fork after a call to nssldap, might send user data to the wrong process because of improper handling of the LDAP connection. NOTE: this issue was originally reported for Dovecot with the wrong...

AtomPhotoBlog 1.15 - atomPhotoBlog.php SQL Injection

AtomPhotoBlog 1.15 - atomPhotoBlog.php SQL Injection source: https://www.securityfocus.com/bid/30360/info AtomPhotoBlog is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an...

Def_Blog 1.0.3 - comaddok.php?article SQL Injection

DefBlog 1.0.3 - comaddok.php?article SQL Injection source: https://www.securityfocus.com/bid/30289/info DefBlog is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an...

Netrw Vim Script - 's:BrowserMaps()' Command Execution

source: https://www.securityfocus.com/bid/30254/info Netrw is prone to a command-execution vulnerability because the application fails to sufficiently sanitize user-supplied data. Successfully exploiting this issue can allow an attacker to execute arbitrary commands with the privileges of the use...

Avlc Forum 'vlc_forum.php' SQL注入漏洞

BUGTRAQ ID: 30202 CNCAN ID：CNCAN-2008071503 Avlc Forum是一款基于PHP的WEB应用程序。 Avlc Forum不正确处理用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，可能获得敏感信息或操作数据库。 问题由于'vlcforum.php'脚本对用户提交给'id'参数缺少过滤，构建恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息或操作数据库。 Avlc Forum 目前没有解决方案提供： http://www.easy-script.com/scripts-PHP/avlc-forum-2147.html...