Chatwm V1.0 SqL Injection Vuln.

LiderHack.Org & BhhGroup.Org & Bilgi-Yonetimi.Org.Tr script name : chatwm V1.0 Script Download : http://maxiasp.com/scyorum.asp?scno=225 Risk : High GoogLe Dork : chatwm Found By : ShaFuck31 Thanks : | Dekolax | The RйD | CyBorG | DesquneR | f1r3b0y | BaZaL | SaboTaqe | ST@ReXT | BLaSTER | B1G B0...

Doğantepe Ziyareti Defteri (tr) Sql Injection Vuln.

LiderHack.Org & BhhGroup.Org script name : Doantepe Ziyaretзi Defteri tr Script Download : http://aspindir.com/Goster/4485 Risk : High Found By : ShaFuck31 Thanks : | Dekolax | The RйD | CyBorG | DesquneR | f1r3b0y | BaZaL | SaboTaqe | ST@ReXT | BLaSTER | B1G B0SS | UNiKnoX | Vulnerable file :...

dudirBypass.txt

DUdirectory Admin Panel SQL Injection Download: http://www.duware.com/zips/productsnew/DUdirectory31.zip Search:"DUdrirectory" DUdirectory/admin/default.asp User:'or' Pass:'or' Testing; http://www.euconvention.be/DUdirectory/admin/default.asp...

DUdirectory Admin Panel SQL Injection

DUdirectory Admin Panel SQL Injection Download: http://www.duware.com/zips/productsnew/DUdirectory31.zip Search:"DUdrirectory" DUdirectory/admin/default.asp User:'or' Pass:'or' Testing; http://www.euconvention.be/DUdirectory/admin/default.asp...

aspee.txt

LiderHack.Org Script name : Aspee Ziyaretçi Defteri tr Script Download : http://aspindir.com/goster/4575 Risk : High Found By : ShaFuck31 Thanks : Dekolax , DesquneR , ST@ReXT , SaboTaqe Vulnerable file : giris.asp Manual connect : Go to Admin Panel Login ----- http://victim.com/path to...

Metyus Okul Ynetim Sistemi V.1.0 (tr) Sql injection Vuln.

LiderHack.Org script name : Metyus Okul Ynetim Sistemi V.1.0 tr Script Download : http://www.maxiasp.com/scriptler.asp?ktno=1 Risk : High Found By : ShaFuck31 Thanks : Dekolax , DesquneR , ST@ReXT , SaboTaqe Vulnerable file : uyegirisislem.asp Manual connect : Go to Admin Panel Login -----...

Aspee Ziyareti Defteri (tr) Sql injection Vuln.

LiderHack.Org Script name : Aspee Ziyaretзi Defteri tr Script Download : http://aspindir.com/goster/4575 Risk : High Found By : ShaFuck31 Thanks : Dekolax , DesquneR , ST@ReXT , SaboTaqe Vulnerable file : giris.asp Manual connect : Go to Admin Panel Login ----- http://victim.com/path to...

UltraSite 1.0 (update.asp) Remote SQL Injection Vulnerability

Title : UltraSite 1.0 update.asp Remote SQL Injection Vulnerability Author : ajann Admin Panel= http://target/path//update.asp?id=SQL Example: //update.asp?id=-120union20select200,0,0,username,password,0,0,0,0,0,0,0,0,020from20members20where20id20like207 """"""""""""""""""""" ajann,Turkey ... Im...

CVE-2006-5777

Creasito E-Commerce Content Manager 1.3.08 allows remote attackers to bypass authentication and perform privileged functions via a non-empty finame parameter to 1 addnewcont.php, 2 adminpassw.php, 3 amministrazione.php, 4 artins.php, 5 bgcolor.php, 6 cancartcat.php, 7 canccat.php, 8 cancelart.php...

Creasito E-Commerce Content Manager - 'admin' Authentication Bypass

============================================================================================ Creasito E-Commerce Content Manager admin Authentication Bypass ============================================================================================ Product............: Creasito E-Commerce Conten...

Hazir Site v2.0 Admin SQL Injection

BiyoSecurity.Org script name : HazirSite v2.0 Script Download : http://www.aspindir.com/indir.asp?id=2728 Risk : High Regards : Dj ReMix Thanks : Korsan , Liz0zim , TrIP Vulnerable file : girisyap.asp Manual connect : Go to Admin Panel Login ----- http://victim.com/path to script/idare.asp Remote...

Emek Portal v2.1 SQL Injection

BiyoSecurity.Org script name : Emek Portal v2.1 tr Script Download : http://www.aspindir.com/indir.asp?id=2728 Risk : High Regards : Dj ReMix Thanks : Korsan , Liz0zim , TrIP Vulnerable file : girisyap.asp Manual connect : Go to Admin Panel Login ----- http://victim.com/path to script/uyegiris.as...

phpWordPress (Vivvo Article Manager)

MercilessTurk [email protected] App Name: phpWordPress Vivvo Article Manager App Author: vivvo.net App Version: =3.2 Vulnerable Code in pdfversion.php : line 19: $aid=securesql$GET'id'; line 20: $query="SELECT from tblArticles where id=$aid"; securesql function doesn't block all sql injection...

Vivvo Article Manager 3.2 - 'id' SQL Injection

MercilessTurk [email protected] App Name: phpWordPress Vivvo Article Manager App Author: vivvo.net App Version: =3.2 Vulnerable Code in pdfversion.php : line 19: $aid=securesql$GET'id'; line 20: $query="SELECT from tblArticles where id=$aid"; securesql function doesn't block all sql injection...

Vivvo Article Manager 3.2 - id SQL Injection

Vivvo Article Manager 3.2 - id SQL Injection MercilessTurk [email protected] App Name: phpWordPress Vivvo Article Manager App Author: vivvo.net App Version: =3.2 Vulnerable Code in pdfversion.php : line 19: $aid=securesql$GET'id'; line 20: $query="SELECT from tblArticles where id=$aid";...

Icblogger.txt

Icblogger = "YID" Remote Blind SQL Injection - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Credit by | Chironex Fleckeri Mail | [email protected] - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Usage : http://www.target.com/path/devam.asp?YID=-...

forum112.txt

©ZIXForum 1.12 = "RepId" Remote SQL Injection - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Credit by | Chironex Fleckeri Mail | [email protected] - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Username :...

CVE-2006-4586

The admin panel in Tr Forum 2.0 accepts a username and password hash for authentication, which allows remote authenticated users to perform unauthorized actions, as demonstrated by modifying user settings via the id parameter to /membres/modifprofil.php, and changing a password via...

CVE-2006-4586

CVE-2006-4586 affects the Tr Forum 2.0 admin panel, where authentication can be done by supplying a username and password hash. This enables remote authenticated users to perform unauthorized actions such as modifying user profile settings via /membres/modif_profil.php (id parameter) and changing...

EUVD-2006-4574

The admin panel in Tr Forum 2.0 accepts a username and password hash for authentication, which allows remote authenticated users to perform unauthorized actions, as demonstrated by modifying user settings via the id parameter to /membres/modifprofil.php, and changing a password via...