CVE-2008-4146

Addalink 1.0 beta 4 and earlier allows remote attackers to 1 approve web-site additions via a modified approved field and 2 change the visit-counter value via a modified counter field...

Code injection

Addalink 1.0 beta 4 and earlier allows remote attackers to 1 approve web-site additions via a modified approved field and 2 change the visit-counter value via a modified counter field...

CVE-2008-4146

Affected software: Addalink 1.0 beta 4 and earlier. Vulnerable component/function: website configuration fields processed by Addalink that allow remote modification. Root cause/impact: an attacker can remotely alter the approved field to approve site additions and modify the counter field to chan...

phpnukeklein-sql.txt

Rbt-4 crew http://www.rbt-4.net Author : Lovebug ---------------------------- Remote Sql injection Php-Nuke module name Kleinanzeigen modules.php?name=Kleinanzeigen&aop=visit&lid=sql Exploit username :...

Apple iPhone和iPod Touch 2.0版修复多个安全漏洞

BUGTRAQ ID: 30186 CVECAN ID: CVE-2008-1588,CVE-2008-1589,CVE-2008-2303,CVE-2008-2317,CVE-2008-1590 iPod touch（也被称为iTouch）是苹果公司发布的MP4播放器，iPhone是其发布的智能手机。 iPhone和iPod Touch都内嵌了Safari浏览器，远程攻击者可以利用该浏览器中的多个安全漏洞导致拒绝服务、读取敏感信息或执行任意代码。 CVE-2008-1588...

Sql injection

SQL injection vulnerability in read.php in PHP Visit Counter 0.4 and earlier allows remote attackers to execute arbitrary SQL commands via the datespan parameter in a read action...

CVE-2008-2556

SQL injection vulnerability in read.php in PHP Visit Counter 0.4 and earlier allows remote attackers to execute arbitrary SQL commands via the datespan parameter in a read action...

CVE-2008-2556

SQL injection vulnerability in read.php in PHP Visit Counter 0.4 and earlier allows remote attackers to execute arbitrary SQL commands via the datespan parameter in a read action...

CVE-2008-2556

The CVE-2008-2556 entry documents a SQL injection vulnerability in read.php of PHP Visit Counter 0.4 and earlier, exploitable via the datespan parameter in a read action. The vulnerability originates from unsafely incorporating the datespan input into SQL queries, enabling remote attackers to exe...

CVE-2008-2556: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in read.php in PHP Visit Counter 0.4 and earlier allows remote attackers to execute arbitrary SQL commands via the datespan parameter in a read action...

PHP Visit Counter <= 0.4 (datespan) SQL Injection Vulnerability

No description provided by source. PHP Visit Counter = 0.4 - SQL Injection Vulnerability Vulnerability discovered by: LidlosesAuge Greetz to: -=Player=- , Suicide, g4ms3, enco, GPM, Free-Hack, Ciphercrew, h4ck-y0u Date: &nb...

phpvisitcounter-sql.txt

PHP Visit Counter = 0.4 - SQL Injection Vulnerability Vulnerability discovered by: LidlosesAuge Greetz to: -=Player=- , Suicide, g4ms3, enco, GPM, Free-Hack, Ciphercrew, h4ck-y0u Date: 30.05.2008 Dork: inurl:"read.php?datespan=" Vulnerability: 1. SQL Injection 1.1...

PHP Visit Counter 0.4 - datespan SQL Injection

PHP Visit Counter 0.4 - datespan SQL Injection PHP Visit Counter = 0.4 - SQL Injection Vulnerability Vulnerability discovered by: LidlosesAuge Greetz to: -=Player=- , Suicide, g4ms3, enco, GPM, Free-Hack, Ciphercrew, h4ck-y0u Date: 30.05.2008 Dork: inurl:"read.php?datespan=" Vulnerability: 1. SQL...

PHP Visit Counter <= 0.4 (datespan) SQL Injection Vulnerability

Exploit for unknown platform in category web applications =============================================================== PHP Visit Counter = 0.4 datespan SQL Injection Vulnerability =============================================================== PHP Visit Counter = 0.4 - SQL Injection...

PHP Visit Counter 0.4 - 'datespan' SQL Injection

PHP Visit Counter = 0.4 - SQL Injection Vulnerability Vulnerability discovered by: LidlosesAuge Greetz to: -=Player=- , Suicide, g4ms3, enco, GPM, Free-Hack, Ciphercrew, h4ck-y0u Date: 30.05.2008 Dork: inurl:"read.php?datespan=" Vulnerability: 1. SQL Injection 1.1...

Apple Safari WebKit PCRE Handling Integer Overflow Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple Safari. User interaction is required to exploit this vulnerability in that the target must visit a malicious page. The specific flaw exists in the regular expression compiler...

mailmachine-sql.txt

--------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg --------------------------------------------------------------- Remote Sql...

RunCMS 1.6 Remote Blind SQL Injection Exploit (IDS evasion)

Exploit for unknown platform in category web applications =========================================================== RunCMS 1.6 Remote Blind SQL Injection Exploit IDS evasion =========================================================== // / RUNCMS 1.6 BLIND SQL Injection Exploit + IDS evasion / /...

RunCMS 1.6 Remote Blind SQL Injection Exploit (IDS evasion)

No description provided by source. // / RUNCMS 1.6 BLIND SQL Injection Exploit + IDS evasion / // / exploit get hash of admin password / / / / Exploit is invisible for / / RUNCMS sql injection detecting mechanism / // // / tested on RUNCMS english version 1.6 / // // / Date of Public&...

mcmseasy-lfi.txt

--------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg --------------------------------------------------------------- Local File...