YouTube blog 0.1 - Remote File Inclusion SQL Injection Cross-Site Scripting

YouTube blog 0.1 - Remote File Inclusion SQL Injection Cross-Site Scripting / | || | | | | | | | | /| | | | | || ||| ||||| || C. H. R. O. O. T. SECURITY GROUP - -- ----- --- -- -- ---- --- -- - http://www.chroot.org Hacks In Taiwan | || | | | | | | | Conference 2008 | | | | | | | | | || ||| ||...

YouTube blog 0.1 - Remote File Inclusion / SQL Injection / Cross-Site Scripting

/ | || | | | | | | | | /| | | | | || ||| ||||| || C. H. R. O. O. T. SECURITY GROUP - -- ----- --- -- -- ---- --- -- - http://www.chroot.org Hacks In Taiwan | || | | | | | | | Conference 2008 | | | | | | | | | || ||| || |||| http://www.hitcon.org Title =======:: YouTube Blog 0.1 Multiple Remote...

YouTube Blog 0.1 (RFI/SQL/XSS) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ============================================================== YouTube Blog 0.1 RFI/SQL/XSS Multiple Remote Vulnerabilities ============================================================== ScriptName ==:: YouTube Blog Download ====::...

youtubeblog-rfisqlxss.txt

/ | || | | | | | | | | /| | | | | || ||| ||||| || C. H. R. O. O. T. SECURITY GROUP - -- ----- --- -- -- ---- --- -- - http://www.chroot.org Hacks In Taiwan | || | | | | | | | Conference 2008 | | | | | | | | | || ||| || |||| http://www.hitcon.org Title =======:: YouTube Blog 0.1 Multiple Remote...

Unfixed XSS vulnerability at www.youtube-tr.net

Security researcher 3kb3ruqan, has submitted on 17/05/2008 a cross-site-scripting XSS vulnerability affecting www.youtube-tr.net, which at the time of submission ranked 340567 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 25/05/2008. It is...

CVE-2008-2223

SQL injection vulnerability in groupposts.php in vShare YouTube Clone 2.6 allows remote attackers to execute arbitrary SQL commands via the tid parameter...

Sql injection

SQL injection vulnerability in groupposts.php in vShare YouTube Clone 2.6 allows remote attackers to execute arbitrary SQL commands via the tid parameter...

CVE-2008-2223

SQL injection vulnerability in groupposts.php in vShare YouTube Clone 2.6 allows remote attackers to execute arbitrary SQL commands via the tid parameter...

CVE-2008-2223

CVE-2008-2223 describes an SQL injection in group_posts.php of the vShare YouTube Clone 2.6, exploitable via the tid parameter to execute arbitrary SQL. The vulnerability is confirmed in multiple sources (NVD/NVD-entry) with a CVSS v2 base score of 7.5 (HIGH) and network attack vector with low co...

vShare YouTube Clone脚本group_posts.php文件SQL注入漏洞

BUGTRAQ ID: 29114 vShare YouTube clone是用于在网站上共享视频的PHP脚本。 vShare YouTube clone的groupposts.php文件中没有正确地过滤对tid参数的输入便在SQL查询中使用，这允许远程攻击者通过提交恶意查询请求执行SQL注入攻击。 BuyScripts vShare YouTube Clone 2.6 BuyScripts ---------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://forums.buyscripts.in/viewtopic.php?f=7&t=3389...

vShare Youtube Clone 2.6 (tid) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================= vShare Youtube Clone 2.6 tid Remote SQL Injection Vulnerability ================================================================= !/usr/bin/perl Coded by: Saime vShare Youtu...

vShare Youtube Clone 2.6 (tid) Remote SQL Injection Vulnerability

No description provided by source. !/usr/bin/perl Coded by: Saime vShare Youtube Clone v2.6 groupposts.php tid Remote SQL Injection Author: Saime URL: http://www.buyscripts.in Price: $10.00 Date: 8/05/2008 Greetz:...

vShare YouTube Clone 2.6 - tid SQL Injection

vShare YouTube Clone 2.6 - tid SQL Injection !/usr/bin/perl Coded by: Saime vShare Youtube Clone v2.6 groupposts.php tid Remote SQL Injection Author: Saime URL: http://www.buyscripts.in Price: $10.00 Date: 8/05/2008 Greetz:...

vShare YouTube Clone 2.6 - 'tid' SQL Injection

!/usr/bin/perl Coded by: Saime vShare Youtube Clone v2.6 groupposts.php tid Remote SQL Injection Author: Saime URL: http://www.buyscripts.in Price: $10.00 Date: 8/05/2008 Greetz: BaKo,DrWh4x,optiplex,xprog,cam-man-dan,Tulle,t0pP8uZz,Inspiratio,Novalok,illuz1oN,Untamed and everyone else I forgot!...

YouTube Clone Script (spages.php) Remote Code Execution Exploit

No description provided by source. !/usr/bin/perl inphex /siteadmin/spages.php include"../include/config.php"; include"../include/function.php"; if$REQUEST'update' $filepath = $config'BASEDIR'."/templates/".$REQUEST'page'; iffileexists$filepath $handle =...

youtubeclone-exec.txt

!/usr/bin/perl inphex /siteadmin/spages.php include"../include/config.php"; include"../include/function.php"; if$REQUEST'update' $filepath = $config'BASEDIR'."/templates/".$REQUEST'page'; iffileexists$filepath $handle = fopen$config'BASEDIR'."/templates/".$REQUEST'page', "w";...

YouTube Clone Script (spages.php) Remote Code Execution Exploit

Exploit for unknown platform in category web applications =============================================================== YouTube Clone Script spages.php Remote Code Execution Exploit =============================================================== !/usr/bin/perl inphex /siteadmin/spages.php...

YouTube Clone Script - spages.php Remote Code Execution

YouTube Clone Script - spages.php Remote Code Execution !/usr/bin/perl inphex /siteadmin/spages.php include"../include/config.php"; include"../include/function.php"; if$REQUEST'update' $filepath = $config'BASEDIR'."/templates/".$REQUEST'page'; iffileexists$filepath $handle =...

YouTube Clone Script - 'spages.php' Remote Code Execution

!/usr/bin/perl inphex /siteadmin/spages.php include"../include/config.php"; include"../include/function.php"; if$REQUEST'update' $filepath = $config'BASEDIR'."/templates/".$REQUEST'page'; iffileexists$filepath $handle = fopen$config'BASEDIR'."/templates/".$REQUEST'page', "w";...

CVE-2008-0687

Cross-site scripting XSS vulnerability in siteadmin/editorfiles/includes/loadmessage.php in the Youtube Clone Script allows remote attackers to inject arbitrary web script or HTML via the langpleasewait parameter...