FaScript FaPersianHack v1 (show.php) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================ FaScript FaPersianHack v1 show.php SQL Injection Vulnerability ================================================================ FaScript FaPersianHack v1 Remote Sql Injection...

CVE-2007-6662

Directory traversal vulnerability in file.php in CuteNews 2.6 allows remote attackers to read arbitrary files via a .. dot dot in the file parameter, as demonstrated by reading the admin username and password hash in data/users.db.php...

mailmachine-sql.txt

--------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg --------------------------------------------------------------- Remote Sql...

zblog-sql.txt

zBlog v1.2 Remote SQL Injection Exploit AUTHOR : H-T Team HouSSamix ToXiC350 CoNaN HOME : http://no-hack.net Script : zBlog Version : 1.2 Site : http://kaxz01.free.fr/ Download : http://kaxz01.free.fr/fichiers/zBlog.zip EXPLOITS : 1...

Adult Script 1.6.5 - Multiple SQL Injections

Adult Script 1.6.5 - Multiple SQL Injections --------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg...

Adult Script 1.6.5 - Multiple SQL Injections

--------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg --------------------------------------------------------------- Multiple...

CVE-2007-6502

Hosting Controller 6.1 Hot fix 3.3 and earlier allows remote authenticated users to obtain sensitive information via 1 the AdminName and AdminLevel parameters to fp2000/NEWSRVR.asp, which discloses usernames; and 2 certain XML HTTP requests to hosting/css.asp using Microsoft.XMLHTTP or...

Eurologon CMS - Multiple SQL Injections

Eurologon CMS - Multiple SQL Injections --------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg...

DeluxeBB <= 1.09 Remote Admin Email Change Exploit

Exploit for unknown platform in category web applications ================================================== DeluxeBB unbufferedquery"UPDATE ".$prefix."users SET email='$xemail', msn='$xmsn', icq='$xicq', ... WHERE username='$membercookie'"; So, editing cookie "membercookie" you can change remote...

Aria-Security.net: CoolShot E-Lite POS 1.0

Aria-Security Team http://aria-security.net ------------------------------------- CoolShot E-Lite POS 1.0 http://coolshot.net/index.php/works/49-e-lite-pos Original Advisory @ http://aria-security.net/forum/showthread.php?p=1108post1108 Published on November 24 2007 users.userid users.username...

Softbiz Banner Exchange Network Script 1.0 SQL Injection Vulnerability

No description provided by source. Softbiz Banner Exchange Network Script ver 1 SQL INJECTION BY IRCRASH AUTHOR : IRCRASH Dr.Crash Script Download : http://www.softbizscripts.com/ Injection Adress : http://sitename/campaignstats.php?id=SQL C0de SQL C0de :...

softbiz2-sql.txt

Softbiz Ad Management plus Script ver 1 SQL INJECTION BY IRCRASH AUTHOR : IRCRASH Dr.Crash Script Download : http://www.softbizscripts.com/ Injection Adress : http://sitename/ads.php?package= SQL C0de :...

Softbiz Ad Management plus Script 1 - SQL Injection

Softbiz Ad Management plus Script 1 - SQL Injection Softbiz Ad Management plus Script ver 1 SQL INJECTION BY IRCRASH AUTHOR : IRCRASH Dr.Crash Script Download : http://www.softbizscripts.com/ Injection Adress : http://sitename/ads.php?package= SQL C0de :...

Flatnuke 3 - Remote Command Execution / Privilege Escalation

--------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg --------------------------------------------------------------- Flatnuke 3...

Flatnuke 3 Remote Command Execution / Privilege Escalation

Exploit for unknown platform in category web applications ========================================================== Flatnuke 3 Remote Command Execution / Privilege Escalation ========================================================== --------------------------------------------------------------...

CVE-2007-5374

cpmemberedit.php in LightBlog 8.4.1.1 does not check for administrative credentials when processing an admin action, which allows remote authenticated users to increase the privileges of any account...

cpDynaLinks 1.02 - 'category.php' SQL Injection

!/usr/bin/perl cpDynaLinks 1.02 Remote Sql Inyection exploit download: http://www.cplinks.com/download/cpdynalinks/cpdynalinksversion102full.zip bug found by s0cratex exploit written by ka0x D.O.M TEAM 2007 d0rk: Powered by cpDynaLinks need magicquotesgpc off contact: ka0x@domlabs: perl...

cpDynaLinks 1.02 category.php Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ========================================================== cpDynaLinks 1.02 category.php Remote SQL Injection Exploit ========================================================== !/usr/bin/perl cpDynaLinks 1.02 Remote Sql Inyection exploit...

multicart-sql.txt

Indonesian Newhack Security Advisory ------------------------------------ MultiCart 1.0 Remote Blind SQL Injection Waktu : Sep 30 2007 02:00AM Software : MultiCart 1.0 Vendor : http://www.iscripts.com/multicart/ Ditemukan oleh : k1tk4t | http://newhack.org Lokasi : Indonesia ----...

ASP Product catalog SQL injection vulnerability

ASP Product catalog SQL injection vulnerability. A nice little SQL injection vulnerability exists within ASP Product Catalog. The application fails to check for bad input from GET'd variables used in SQL query operations. In this case, the variable cid can be used for SQL injection queries...