Dreamlevels Dreampics Builder 'page' SQL注入漏洞

BUGTRAQ ID: 30166 CNCAN ID：CNCAN-2008071103 Dreamlevels Dreampics Builder是一款基于PHP的WEB应用程序。 Dreamlevels Dreampics Builder不正确处理用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，可能获得敏感信息或操作数据库。 问题由于脚本对用户提交给'page'参数缺少过滤，构建恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息或操作数据库。 DreamLevels Dreampics Builder 目前没有解决方案提供：...

eSyndiCat 2.2 - register.php Multiple Cross-Site Scripting Vulnerabilities

eSyndiCat 2.2 - register.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/30178/info eSyndiCat is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues t...

phpnukeplatinum-exec.txt

Date: 02/07/08 Note I modified a bit phpsploit for this exploit, because PHP Nuke plays with REQUESTURI var ... Requirements registerglobals=On phpreter phpreter is really easy to use: You can change mode using "mode=", with = sql, php or cmd If you want to understand how it work ... read the cod...

Netrw 125 Vim Script - Multiple Command Execution Vulnerabilities

Netrw 125 Vim Script - Multiple Command Execution Vulnerabilities source: https://www.securityfocus.com/bid/30115/info Netrw is prone to multiple command-execution vulnerabilities because the application fails to sufficiently sanitize user-supplied data. Successfully exploiting these issues can...

Netrw 125 Vim Script - Multiple Command Execution Vulnerabilities

source: https://www.securityfocus.com/bid/30115/info Netrw is prone to multiple command-execution vulnerabilities because the application fails to sufficiently sanitize user-supplied data. Successfully exploiting these issues can allow an attacker to execute arbitrary commands with the privileges...

XChangeboard newThread.php文件SQL注入漏洞

BUGTRAQ ID: 30059 Xchangeboard是基于PHP和MySQL的公告牌解决方案。 Xchangeboard的newThread.php文件中没有正确地验证对boardID参数的输入便在SQL查询中使用，这允许远程攻击者通过提交恶意的查询请求执行SQL注入攻击。 Henrik Brinkmann XChangeboard 1.75 Beta Henrik Brinkmann XChangeboard 1.70 Henrik Brinkmann ---------------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本...

Joomla! Component altas 1.0 - Multiple SQL Injections

!/usr/bin/perl -w Joomla Component altas v 1.0 Multiple Remote SQL Injection variables vuln : ano & mes Found by : Houssamix From H-T Team H-T Team HouSSaMix + ToXiC350 Greetz : Islamic Security Team & and all musulmans hackers ComponentName: altas ScriptName: Joomla Dork :...

PHPwebnews 0.2 MySQL Edition - 'id_kat' SQL Injection

/ | | \ | | | | \ \ / / | |/ | | | / | | | | | | | |\ V / | | | | '/ |/ \ | | / | '/ | | || | | |\ | || | | | | | | || | | \ \ / | | | | | | | |/|| |,||| ||/ ,|| |/|||/|| , | ---------------------------------------------------------------------------|/ Exploit found by sToRm phpWebNews...

RCM Revision Web Development (products.php) SQL Injection Vulnerability

No description provided by source. RCM Revision Web Development products.php SQL Injection Vulnerability by D3m0n a.k.a Niiub Home: www.bl4ck-b0x.info niiubatbl4ck-b0x.info Exploit: products.php?cat=-1%20union%20select%201,2,3,4,concatws0x3a,username, userpassword,6%20from%20users/ OR...

AShop Deluxe 4.x - catalogue.php SQL Injection

AShop Deluxe 4.x - catalogue.php SQL Injection usr/bin/perl use LWP::UserAgent; use HTTP::Cookies; use Getopt::Long; use URI::Escape; -------------------------------------------------------------------------------------------------------------------------------------------------------- x AShop...

RCM Revision Web Development - 'products.php' SQL Injection

RCM Revision Web Development products.php SQL Injection Vulnerability by D3m0n a.k.a Niiub Home: www.bl4ck-b0x.info niiubatbl4ck-b0x.info Exploit: products.php?cat=-1%20union%20select%201,2,3,4,concatws0x3a,username, userpassword,6%20from%20users/ OR...

drinkswebsite-sql.txt

|| || | || o,7 || . o7 || 4||| ow, : / / . |-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=| | | | /' \ /'\ /\ \ /'\ /\ \ | | /, \ /\/\L\ \ \ \ ,/\ /\ \ \ \ / | | //\ \ /' \ /\ //\ Kings of injection | | // | | |...

Drinks Complete Website 2.1.0 - drinkid SQL Injection

Drinks Complete Website 2.1.0 - drinkid SQL Injection || || | || o,7 || . o7 || 4||| ow, : / / . |-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=| | | | /' \ /'\ /\ \ /'\ /\ \ | | /, \ /\/\L\ \ \ \ ,/\ /\ \ \ \ / | | //\ \ /' \ /\ //\ Kings of injection | | // | | |...

PHP-Fusion Mod Kroax 4.42 - category SQL Injection

PHP-Fusion Mod Kroax 4.42 - category SQL Injection ========================================================== The kroax phpfusion Remote SQL-injection. ========================================================== Author : boom3rang Contact : [email protected] webpage : www.khg-crew.ws ---...

sharecms-sql.txt

============================================================== ShareCMS 0.1 Multiple Remote SQL Injection Vulnerabilities ============================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team...

E-topbiz Link ADS 1 - 'out.php' SQL Injection Vulnerability

E-topbiz Link ADS 1 'out.php' SQL Injection Vulnerability. Webapps exploit for php platform source: http://www.securityfocus.com/bid/29923/info Link ADS 1 is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query...

Joomla! Component EXP Shop 1.0 - SQL Injection

Joomla! Component EXP Shop 1.0 - SQL Injection source: https://www.securityfocus.com/bid/29869/info The EXP Shop component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue cou...

@CMS 2.1.1 - SQL Injection

@CMS 2.1.1 - SQL Injection Viva IslaM Viva IslaM Remote SQL Injection Vulnerability @CMS 2.1.1 readarticle.php articleid AuTh0r : Mr.SQL H0ME : WwW.PaL-HaCkEr.CoM & WwW.ATsDp.CoM Email : [email protected] !! SYRIAN HaCkErS !! Script : @CMS 2.1.1 site : www.atcode.net -:: SQL ::-...

GlassFish Application Server - '/resourceNode/externalResourceNew.jsf' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/29751/info Sun Glassfish is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user ...

TorrentTrader Classic 1.x - 'scrape.php' SQL Injection

source: https://www.securityfocus.com/bid/29451/info TorrentTrader Classic is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access o...