ECSHOP Mall system filter is not strict lead to SQL injection vulnerabilities-vulnerability warning-the black bar safety net

Add time: 2009-05-25 System number: WAVDB-0 1 4 3 1 Affected version: ECSHOP 2.6.1/2.6.2 Program description: ECSHOP is an open source free online store system. By the professional development team upgrade and maintenance, to provide you with timely and efficient technical support, you can also...

my-colex 1.4.2 - Authentication Bypass SQL Injection Cross-Site Scripting

my-colex 1.4.2 - Authentication Bypass SQL Injection Cross-Site Scripting || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH!...

CVE-2009-1550

CVE-2009-1550 affects Zakkis Technology ABC Advertise 1.0. The issue is an access restriction flaw in admin.inc.php that may allow remote attackers to obtain the administrator login name and password via a direct request. Connected documents confirm this description but do not provide a patch or ...

Infopop UBB.Threads Admin Credentials via SQL Injection

Discovered: 07-18-08 By: SecureState R&D Team sasquatch www.securestate.com Background: ----------- SQL injection has previously been discovered http://www.securityfocus.com/bid/14052/ New Details: ------------ UBBThreads is nice enough to encrypt/mask the regular users' passwords in the database...

Infopop UBB.Threads Admin Credentials via SQL Injection

No description provided by source. Background: ----------- SQL injection has previously been discovered \ http://www.securityfocus.com/bid/14052/ New Details: ------------ UBBThreads is nice enough to encrypt/mask the regular users' passwords in the \ database, but stores the admin users' passwor...

CVE-2009-0644

CVE-2009-0644 concerns the HTTP interface of the Swann DVR4-SecuraNet platform, where a default administrative username/password exists. The available documents indicate this flaw can allow remote attackers to obtain privileged access. The entries do not specify affected versions, exploit details...

BlogWrite 0.91 Remote FD / SQL Injection Exploit

No description provided by source. !/usr/bin/perl |----------------------------------------------------------------------------------------------------------------------------------| | INFORMATIONS |...

BlogWrite 0.91 Remote FD / SQL Injection Exploit

Exploit for unknown platform in category web applications ================================================ BlogWrite 0.91 Remote FD / SQL Injection Exploit ================================================ !/usr/bin/perl...

InselPhoto 1.1 (query) Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl |----------------------------------------------------------------------------------------------------------------------------------| | INFORMATIONS |...

Bloggeruniverse v2Beta (editcomments.php id) SQL Injection Exploit

No description provided by source. !/usr/bin/perl |----------------------------------------------------------------------------------------------------------------------------------| | INFORMATIONS |...

BlogWrite 0.91 - Remote File Disclosure / SQL Injection

!/usr/bin/perl |----------------------------------------------------------------------------------------------------------------------------------| | INFORMATIONS | |----------------------------------------------------------------------------------------------------------------------------------|...

InselPhoto 1.1 SQL Injection

!/usr/bin/perl |----------------------------------------------------------------------------------------------------------------------------------| | INFORMATIONS | |----------------------------------------------------------------------------------------------------------------------------------|...

InselPhoto 1.1 - query SQL Injection

InselPhoto 1.1 - query SQL Injection !/usr/bin/perl |----------------------------------------------------------------------------------------------------------------------------------| | INFORMATIONS |...

Bloggeruniverse 2.0 Beta - 'id' SQL Injection

!/usr/bin/perl |----------------------------------------------------------------------------------------------------------------------------------| | INFORMATIONS | |----------------------------------------------------------------------------------------------------------------------------------|...

Blogger Universe SQL Injection/ Code Execution

!/usr/bin/perl |----------------------------------------------------------------------------------------------------------------------------------| | INFORMATIONS | |----------------------------------------------------------------------------------------------------------------------------------|...

Bloggeruniverse v2Beta (editcomments.php id) SQL Injection Exploit

Exploit for unknown platform in category web applications ================================================================== Bloggeruniverse v2Beta editcomments.php id SQL Injection Exploit ================================================================== !/usr/bin/perl...

Bloggeruniverse 2.0 Beta - id SQL Injection

Bloggeruniverse 2.0 Beta - id SQL Injection !/usr/bin/perl |----------------------------------------------------------------------------------------------------------------------------------| | INFORMATIONS |...

InselPhoto 1.1 (query) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications =================================================== InselPhoto 1.1 query Remote SQL Injection Exploit =================================================== !/usr/bin/perl...

InselPhoto 1.1 - 'query' SQL Injection

!/usr/bin/perl |----------------------------------------------------------------------------------------------------------------------------------| | INFORMATIONS | |----------------------------------------------------------------------------------------------------------------------------------|...

Social Engine (category_id) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ======================================================= Social Engine categoryid SQL Injection Vulnerability ======================================================= Exploit: http://localhost/blog.php?user=darkthronex&categoryid=-5+UNION...