Cross-site Request Forgery (CSRF) Vulnerabilities in FestOS

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in FestOS which could be exploited to perform cross-site request forgery attacks. 1 Cross-site request forgery CSRF in FestOS 1.1 The vulnerability exists due to insufficient validation of the request origin in...

2CMS SQL Injection Vulnerability

Exploit for php platform in category web applications ================================ 2CMS SQL Injection Vulnerability ================================ Exploit Title: 2CMS SQL Injection Vulnerability Software Site: http://www.2creative.com.au/ CVE : N/A Author: Ashiyane Digital Security Team...

DibiWeb (News.asp) SQL Injection Vulnerability

Exploit for php platform in category web applications ============================================== DibiWeb News.asp SQL Injection Vulnerability ============================================== Exploit Title: DibiWeb News.asp SQL Injection Vulnerability Software Site: http://www.dibiweb.it/ CVE :...

CVE-2010-2003

Cross-site scripting XSS vulnerability in misc/getadmin.php in Advanced Poll 2.08 allows remote attackers to inject arbitrary web script or HTML via the mysqlhost parameter...

Web Design Solutions SQL Injection

JAI HIND Tybe: SQL Injection Vulnerabilities Vendor: http://www.webdesignsolution.co.uk + author: мαsŧєяs + TEAM: H.O.H------ICW--------ANDHRAHACKERS D0rk: Us3 ur brain ? contact: rdon111 AT gmail.com ====================================================================================== SQL...

eliteCMS 1.01 Cross Site Request Forgery

Vulnerability ID: HTB22355 Reference: http://www.htbridge.ch/advisory/xsrfcsrfinelitecms.html Product: eliteCMS Vendor: Elite Graphix Vulnerable Version: 1.01 and Probably Prior Versions Vendor Notification: 19 April 2010 Vulnerability Type: CSRF Cross-Site Request Forgery Status: Not Fixed, Vend...

Kiasabz Article News CMS Magazine - SQL Injection

Kiasabz Article News CMS Magazine - SQL Injection ======================================================================================== | Title : Kiasabz Article News CMS Magazine SQL Injection Vulnerability | Author : indoushka | email : [email protected] | Home : www.iqs3cur1ty.com | Web...

CVE-2009-4670

admin/delitem.php in RoomPHPlanning 1.6 does not require authentication, which allows remote attackers to 1 delete arbitrary users via the user parameter or 2 delete arbitrary rooms via the room parameter...

Blax Blog 0.1 - girisyap.php SQL Injection

Blax Blog 0.1 - girisyap.php SQL Injection source: https://www.securityfocus.com/bid/38465/info Blax Blog is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...

GameScript 3.0 SQL Injection

Author : FormatXformat Home : Tkurd.net Script : http://www.gamescript.net Vulnerabilities : SQL Injection Dork: Copyright © 2005 - 2006 GameScript.net. All Games Copyright © To Their Respective Owners. All Rights Reserved. Exploit:...

GameScript 3.0 - SQL Injection

GameScript 3.0 - SQL Injection Author : FormatXformat Home : Tkurd.net Script : http://www.gamescript.net Vulnerabilities : SQL Injection Dork: Copyright © 2005 - 2006 GameScript.net. All Games Copyright © To Their Respective Owners. All Rights Reserved. Exploit:...

GameScript v3.0 SQL Injection Vulnerability

Exploit for unknown platform in category web applications =========================================== GameScript v3.0 SQL Injection Vulnerability =========================================== Author : FormatXformat Home : Tkurd.net Script : http://www.gamescript.net Vulnerabilities : SQL Injection...

Article Friendly - SQL Injection

Article Friendly - SQL Injection / /| | || || | | | | | || | / \ / || | / | | | | / / |||| | | | | | | / \ | | | / /| /| // |\ || |||| || ||||// \||\ ||| \ ..Bl4ck H4T.. ============================================================================== ! Article Friendly = SQL Injection...

Myteknoloji Hosting Scripti Database Disclosure

============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | // \ || || // \ || || ============================================================================== » Note : Mutlu Yillar Millettt...

KMSoft Guestbook v1.0 Database Disclosure Vulnerability

Exploit for unknown platform in category web applications ======================================================= KMSoft Guestbook v1.0 Database Disclosure Vulnerability ======================================================= » Script: KMSoft Guestbook v 1.0 » Language: ASP » Download:...

KMSoft Guestbook 1.0 - Database Disclosure

KMSoft Guestbook 1.0 - Database Disclosure ============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | // \ || || // \ || || ============================================================================== » Note...

Football Pool 3.1 Database Disclosure

============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | // \ || || // \ || || ============================================================================== » Note : Baska Biri Bulduysa Affettsin :D...

KMSoft Guestbook 1.0 - Database Disclosure

============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | // \ || || // \ || || ============================================================================== » Note : Mutlu Yillar Millettt...

Football Pool 3.1 - Database Disclosure

Football Pool 3.1 - Database Disclosure ============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | // \ || || // \ || || ============================================================================== » Note :...

Football Pool v3.1 Database Disclosure Vulnerability

Exploit for unknown platform in category web applications ==================================================== Football Pool v3.1 Database Disclosure Vulnerability ==================================================== » Script: Football Pool v3.1 » Language: ASP » Download:...