visinia 1.3 - Multiple Vulnerabilities

''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | |...

visinia 1.3 - Multiple Vulnerabilities

visinia 1.3 - Multiple Vulnerabilities ''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | Day 3 0day | | | | || / \ || | | | || ||// \/|/ ''' Abysssec Inc Public Advisory Title : Visinia Multiple Vulnerabilities Affected Version : Visinia 1.3 Discovery :...

Shop Creator 4.0 Bypass Vulnerability

Exploit for asp platform in category web applications ===================================== Shop Creator 4.0 Bypass Vulnerability ===================================== --------------------------------------------------------- Portal Name: Shop Creator Version: 4.0 Vendor: http://www.etoshop.com...

Shop Creator 4.0 - SQL Injection

Shop Creator 4.0 - SQL Injection --------------------------------------------------------- Portal Name: Shop Creator Version: 4.0 Vendor: http://www.etoshop.com Author : PouyaServer , [email protected] Website: http://Pouya-Server.ir Vulnerability : Auth Bypass SQL Injection Vulnerability...

Adobe ColdFusion - Directory Traversal

Adobe ColdFusion - Directory Traversal Working GET request courtesy of carnal0wnage: http://server/CFIDE/administrator/enter.cfm?locale=../../../../../../../../../../ColdFusion8/lib/password.properties%00en LLsecurity added another admin page filename: "/CFIDE/administrator/enter.cfm"...

NavanaSoft Auth Bypass vulnerability

Exploit for php platform in category web applications ==================================== NavanaSoft Auth Bypass vulnerability ==================================== ? My home: HacKTeach.org & Pal-Li0ns.com & sec-r1z.com ? For Ask: email protected ? Script: NavanaSoft ? home Script NavanaSoft.com ...

Cross-site Request Forgery (CSRF) Vulnerabilities in FestOS

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in FestOS which could be exploited to perform cross-site request forgery attacks. 1 Cross-site request forgery CSRF in FestOS 1.1 The vulnerability exists due to insufficient validation of the request origin in...

2CMS SQL Injection Vulnerability

Exploit for php platform in category web applications ================================ 2CMS SQL Injection Vulnerability ================================ Exploit Title: 2CMS SQL Injection Vulnerability Software Site: http://www.2creative.com.au/ CVE : N/A Author: Ashiyane Digital Security Team...

DibiWeb (News.asp) SQL Injection Vulnerability

Exploit for php platform in category web applications ============================================== DibiWeb News.asp SQL Injection Vulnerability ============================================== Exploit Title: DibiWeb News.asp SQL Injection Vulnerability Software Site: http://www.dibiweb.it/ CVE :...

CVE-2010-2003

Cross-site scripting XSS vulnerability in misc/getadmin.php in Advanced Poll 2.08 allows remote attackers to inject arbitrary web script or HTML via the mysqlhost parameter...

Web Design Solutions SQL Injection

JAI HIND Tybe: SQL Injection Vulnerabilities Vendor: http://www.webdesignsolution.co.uk + author: мαsŧєяs + TEAM: H.O.H------ICW--------ANDHRAHACKERS D0rk: Us3 ur brain ? contact: rdon111 AT gmail.com ====================================================================================== SQL...

eliteCMS 1.01 Cross Site Request Forgery

Vulnerability ID: HTB22355 Reference: http://www.htbridge.ch/advisory/xsrfcsrfinelitecms.html Product: eliteCMS Vendor: Elite Graphix Vulnerable Version: 1.01 and Probably Prior Versions Vendor Notification: 19 April 2010 Vulnerability Type: CSRF Cross-Site Request Forgery Status: Not Fixed, Vend...

Kiasabz Article News CMS Magazine - SQL Injection

Kiasabz Article News CMS Magazine - SQL Injection ======================================================================================== | Title : Kiasabz Article News CMS Magazine SQL Injection Vulnerability | Author : indoushka | email : [email protected] | Home : www.iqs3cur1ty.com | Web...

CVE-2009-4670

admin/delitem.php in RoomPHPlanning 1.6 does not require authentication, which allows remote attackers to 1 delete arbitrary users via the user parameter or 2 delete arbitrary rooms via the room parameter...

Blax Blog 0.1 - girisyap.php SQL Injection

Blax Blog 0.1 - girisyap.php SQL Injection source: https://www.securityfocus.com/bid/38465/info Blax Blog is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...

GameScript 3.0 SQL Injection

Author : FormatXformat Home : Tkurd.net Script : http://www.gamescript.net Vulnerabilities : SQL Injection Dork: Copyright © 2005 - 2006 GameScript.net. All Games Copyright © To Their Respective Owners. All Rights Reserved. Exploit:...

GameScript 3.0 - SQL Injection

GameScript 3.0 - SQL Injection Author : FormatXformat Home : Tkurd.net Script : http://www.gamescript.net Vulnerabilities : SQL Injection Dork: Copyright © 2005 - 2006 GameScript.net. All Games Copyright © To Their Respective Owners. All Rights Reserved. Exploit:...

GameScript v3.0 SQL Injection Vulnerability

Exploit for unknown platform in category web applications =========================================== GameScript v3.0 SQL Injection Vulnerability =========================================== Author : FormatXformat Home : Tkurd.net Script : http://www.gamescript.net Vulnerabilities : SQL Injection...

Article Friendly - SQL Injection

Article Friendly - SQL Injection / /| | || || | | | | | || | / \ / || | / | | | | / / |||| | | | | | | / \ | | | / /| /| // |\ || |||| || ||||// \||\ ||| \ ..Bl4ck H4T.. ============================================================================== ! Article Friendly = SQL Injection...

Myteknoloji Hosting Scripti Database Disclosure

============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | // \ || || // \ || || ============================================================================== » Note : Mutlu Yillar Millettt...