ZenPhoto 1.2.5 - Completely Blind SQL Injection

/ ZenPhoto 1.2.5 Completly Blind SQL Injection Exploit Requirements: magicquotes = ANY zenpage disables it anyway, ZenPage needs to be activated and have at least one news category What does this exploit let you do: The precoded functions I provided will allow you to extract the username and...

CVE-2009-2272

CVE-2009-2272 concerns the Huawei D100 where the administrator’s account name and password are stored in cleartext in a cookie. The underlying issue enables context-dependent attackers to obtain sensitive information by reading a cookie file or sniffing HTTP headers, with other vectors possible. ...

Virtue Book Store SQL Injection

CMS : Online Book Store WEB : http://www.virtuenetz.com/book/ Archivo : products.php Variable Tipo : GET valor : cid Tipo : SQL Injection URL : http://www.site.com/products.php?cid=SQLI Exploit : Ejemplo : undersec@Undersec:/Escritorio$ php exploit.php http://www.virtuenetz.com/book/ ID :1 Usuari...

Virtue Book Store - 'cid' SQL Injection

CMS : Online Book Store WEB : http://www.virtuenetz.com/book/ Archivo : products.php Variable Tipo : GET valor : cid Tipo : SQL Injection URL : http://www.site.com/products.php?cid=SQLI Exploit : Ejemplo : undersec@Undersec:/Escritorio$ php exploit.php http://www.virtuenetz.com/book/ ID :1 Usuari...

ZeusCart 2.3 SQL Injection

!usr/bin/perl |------------------------------------------------------------------------------------------------------------------ | -Info: | -Name: Zeus Cart V 2.3 | -Site: http://www.zeuscart.com/ | -Site Demo: http://www.zeuscart.com/onlinedemo.php?action=skip | -Bug: Sql Injection | -Found: by...

ECSHOP Mall system filter is not strict lead to SQL injection vulnerabilities-vulnerability warning-the black bar safety net

Add time: 2009-05-25 System number: WAVDB-0 1 4 3 1 Affected version: ECSHOP 2.6.1/2.6.2 Program description: ECSHOP is an open source free online store system. By the professional development team upgrade and maintenance, to provide you with timely and efficient technical support, you can also...

my-colex 1.4.2 - Authentication Bypass SQL Injection Cross-Site Scripting

my-colex 1.4.2 - Authentication Bypass SQL Injection Cross-Site Scripting || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH!...

CVE-2009-1550

CVE-2009-1550 affects Zakkis Technology ABC Advertise 1.0. The issue is an access restriction flaw in admin.inc.php that may allow remote attackers to obtain the administrator login name and password via a direct request. Connected documents confirm this description but do not provide a patch or ...

Infopop UBB.Threads Admin Credentials via SQL Injection

No description provided by source. Background: ----------- SQL injection has previously been discovered \ http://www.securityfocus.com/bid/14052/ New Details: ------------ UBBThreads is nice enough to encrypt/mask the regular users' passwords in the \ database, but stores the admin users' passwor...

Infopop UBB.Threads Admin Credentials via SQL Injection

Discovered: 07-18-08 By: SecureState R&D Team sasquatch www.securestate.com Background: ----------- SQL injection has previously been discovered http://www.securityfocus.com/bid/14052/ New Details: ------------ UBBThreads is nice enough to encrypt/mask the regular users' passwords in the database...

CVE-2009-0644

CVE-2009-0644 concerns the HTTP interface of the Swann DVR4-SecuraNet platform, where a default administrative username/password exists. The available documents indicate this flaw can allow remote attackers to obtain privileged access. The entries do not specify affected versions, exploit details...

BlogWrite 0.91 Remote FD / SQL Injection Exploit

No description provided by source. !/usr/bin/perl |----------------------------------------------------------------------------------------------------------------------------------| | INFORMATIONS |...

InselPhoto 1.1 (query) Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl |----------------------------------------------------------------------------------------------------------------------------------| | INFORMATIONS |...

BlogWrite 0.91 Remote FD / SQL Injection Exploit

Exploit for unknown platform in category web applications ================================================ BlogWrite 0.91 Remote FD / SQL Injection Exploit ================================================ !/usr/bin/perl...

Bloggeruniverse v2Beta (editcomments.php id) SQL Injection Exploit

No description provided by source. !/usr/bin/perl |----------------------------------------------------------------------------------------------------------------------------------| | INFORMATIONS |...

BlogWrite 0.91 - Remote File Disclosure / SQL Injection

!/usr/bin/perl |----------------------------------------------------------------------------------------------------------------------------------| | INFORMATIONS | |----------------------------------------------------------------------------------------------------------------------------------|...

InselPhoto 1.1 SQL Injection

!/usr/bin/perl |----------------------------------------------------------------------------------------------------------------------------------| | INFORMATIONS | |----------------------------------------------------------------------------------------------------------------------------------|...

Bloggeruniverse 2.0 Beta - id SQL Injection

Bloggeruniverse 2.0 Beta - id SQL Injection !/usr/bin/perl |----------------------------------------------------------------------------------------------------------------------------------| | INFORMATIONS |...

InselPhoto 1.1 - query SQL Injection

InselPhoto 1.1 - query SQL Injection !/usr/bin/perl |----------------------------------------------------------------------------------------------------------------------------------| | INFORMATIONS |...

Bloggeruniverse v2Beta (editcomments.php id) SQL Injection Exploit

Exploit for unknown platform in category web applications ================================================================== Bloggeruniverse v2Beta editcomments.php id SQL Injection Exploit ================================================================== !/usr/bin/perl...