Mambo Component com_downloads - SQL Injection

joomla SQL Injectioncomdownloadsfilecatid AUTHOR : S@BUN HOME : http://www.hackturkiye.com DORKS 1 : allinurl :"comdownloads"filecatid EXPLOIT :...

joomlaestate-sql.txt

joomla SQL Injectioncomestateagent AUTHOR : S@BUN HOME : http://www.hackturkiye.com/ DorK 1 : allinurl: allinurl: "comestateagent" EXPLOIT : index.php?option=comestateagent&Itemid=S@BUN&func=showObject&info=contact&objid=-9999//union//select//username,password//from//mosusers/&results=S@BUN S@BUN...

FaScript FaMp3 v1 (show.php) Remote SQL Injection Vulnerability

No description provided by source. FaScript FaMp3 v1 Remote Sql Injection BY IRCRASH AUTHO...

Meridian Prolog Manager weak encryption

Weak username/password encryption...

lotfian-sqlxss.txt

Aria-Security Team http://Aria-Security.Net ---------------------------------------- Lotfian Brochure and cataloge Script XSS And SQL Injection Original Advisory @ http://aria-security.net/forum/showthread.php?p=1135 Username/Password Field can run SQL Queries, For Example I got these:...

Irola My-Time 3.5 Remote SQL Injection Vulnerability

No description provided by source. Aria-Security Team http://Aria-Security.Net ----------------------------- Original Advisory @ http://aria-security.net/forum/showthread.php?p=1106 Vendor: http://www.irola.com Username/Password Fields can run SQL Queries. Therefore: We get the Tables:...

Aria-Security.net: Irola My-Time v3.5 SQL Injection

Aria-Security Team http://Aria-Security.Net ----------------------------- Original Advisory and more details @ http://aria-security.net/forum/showthread.php?p=1106 Irola My-Time v3.5 http://www.irola.com Username/Password Fields can run SQL Queries. Therefore: We get the Tables: UserInfo.UserID...

giab-sql.txt

A R I A - S E C U R I T Y Gallery In A Box Username & Password Parameters SQL Injection Vendor: http://www.kerberosdev.net/ http://target.com/adminconsole/index.asp Username: anything' OR 'x'='x Password: anything' OR 'x'='x Credits: Aria-Security Team http://aria-security.net...

gazi-sql.txt

Title : Gazi Okul Sitesi 2007trfotokategori.asp Remote SQL Injection Vulnerability Author : CoNqUeRoR Demo Page : http://www.gazilogo.com Script Page : http://www.aspindir.com/indir.asp?id=4746 Date : 30-03-2007 Vulnerability: -------------------- Username & Password :...

gtalkbot information leak

Username and password are passed in command line and can be obtained with process list...

Modicon PLC HTTP Server Default Username/Password (SCADA)

Binary data 3853.prm...

CVE-2006-6254

administration/telecharger.php in Cahier de texte 2.0 allows remote attackers to obtain unparsed content source code of files via the chemin parameter, as demonstrated using directory traversal sequences to obtain the MySQL username and password from conncahierdetexte.php. NOTE: it is not clear...

Particle Wiki <= 1.0.2 (version) Remote SQL Injection Vulnerability

No description provided by source. Particle wiki = 1.0.2 Remote SQLInjection - Username/Passwordhash Extractor Thanks to UNSECURED SYSTEMS : http://pridels.blogspot.com/2006/06/particle-wiki-sql-inj.html Exploited by FarhadKey from http://www.kapda.ir Username :...

Particle Wiki 1.0.2 - SQL Injection

Particle Wiki 1.0.2 - SQL Injection Particle wiki = 1.0.2 Remote SQLInjection - Username/Passwordhash Extractor Thanks to UNSECURED SYSTEMS : http://pridels.blogspot.com/2006/06/particle-wiki-sql-inj.html Exploited by FarhadKey from http://www.kapda.ir Username :...

Multiple Symantec Ghost security vulnerabilities

Default username/password for application and Sybase database engine. dbisqlc.exe Shatter attacks...

CVE-2005-3489

Buffer overflow in Asus Video Security 3.5.0.0 and earlier, when using authorization, allows remote attackers to execute arbitrary code via a long username/password string...

gravityBad.txt

4.22 07/08/2005 Gravity Board X v1.1 possibly prior versions Remote code execution, SQL Injection / Login Bypass, cross site scripting, path disclosure poc software: author site: http://www.gravityboardx.com/ a Sql Injection / Login Bypass: A user can bypass login check and grant administrator...

FunkBoard V0.66CF (possibly prior versions) cross site scripting, possible database username/password disclosure & board takeover,possible remote code execution

FunkBoard V0.66CF possibly prior versions cross site scripting, possible database username/password disclosure & board takeover, possible remote code execution software: author site: http://www.pathtofunkboard.co.uk/ xss:...

CVE-2001-1565

The CVE affects the MacOS X Point-to-Point Protocol daemon (pppd) for versions 10.0 to 10.1.5. The issue is that the daemon exposes the username and password on the process command line, allowing local users to read authentication information via the ps utility. Root cause: credentials displayed ...

CVE-2004-2455

Sweex Wireless Broadband Router/Accesspoint 802.11g LC000060 allows remote attackers to obtain sensitive information and gain privileges by using TFTP to download the nvram file, then extracting the username, password, and other data from the file...