big.asp - SQL Injection

big.asp - SQL Injection Author : Ra3cH Price : N/A Title : big.asp SQL Injection Vulnerability Site : www.dz4all.com/cc Dork : inurl:enq/big.asp?id= Risk : High Vulnerable script: enq/big.asp?id= SQL-injection ---------------------------------------------------------...

ArticleLive (Interspire Website Publisher) - SQL Injection

Author : ra3ch Product : ArticleLive Interspire Website Publisher Price : N/A Site : www.dz4all.com/cc Dork : "Website by Spokane Web Communications" Risk : High Vulnerable script: news.asp?id= SQL-injection --------------------------------------------------------- http://server/path/news.asp?id=...

Comersus 8 Shopping Cart - SQL Injection Cross-Site Request Forgery

Comersus 8 Shopping Cart - SQL Injection Cross-Site Request Forgery Exploit Title:SQL Injection and CSRF Vulnerability in Comersus 8 Shopping Cart Version: Web Application vendor :http://www.comersus.com/index.html Date: 1 apr,2010 Author:Sid3^effects Code :...

Comersus 8 Shopping Cart - SQL Injection / Cross-Site Request Forgery

Exploit Title:SQL Injection and CSRF Vulnerability in Comersus 8 Shopping Cart Version: Web Application vendor :http://www.comersus.com/index.html Date: 1 apr,2010 Author:Sid3^effects Code : -------------------------------------------------------------------------------------- Sid3^effects aKa Ha...

Comersus 8 Shopping Cart SQL Injection and CSRF Vulnerability

Exploit for asp platform in category web applications ============================================================= Comersus 8 Shopping Cart SQL Injection and CSRF Vulnerability ============================================================= Exploit Title:SQL Injection and CSRF Vulnerability in...

Advanced Poll Script SQL Injection / Cross Site Scripting

Exploit Title: XSS and Authentication bypass in Advanced Poll Script Date: 26-apr-2010 Author: Sid3^effects Software Link: N/a CVE : Code : XSS and Authentication bypass in Advanced Poll Script Vendor:http://www.2daybiz.com/ Author:Sid3^effects Description : Advanced Poll is a polling system with...

Sitereptile SQL Injection

/ /| | || || | | | | | || | / \ / || | / | | | | / / |||| | | | | | | / \ | | | / /| /| Geeksec.com // |\ || |||| || ||||// \||\ ||| \ ..Bl4ck H4T.. ============================================================================== ! sitereptile = SQL Injection Vulnerability...

2DayBiz Advanced Poll Script - Cross-Site Scripting / Authentication Bypass

XSS and Authentication bypass in Advanced Poll Script Vendor:http://www.2daybiz.com/ Author:Sid3^effects Description : Advanced Poll is a polling system with powerful administration tool supports both text file and MySQL database. Its features include multiple polls, unlimited options, IP-Logging...

EPay Enterprise 4.13 SQL Injection

/ / / \ \ \ \ \ / / \\ \ \ \ \ // /// \ \ / / \ //|\ / \ \ \ \ \ \ / / \ \ / / \ | | | \ | | || | | |/ / \ V / || |\ V / / \ | / \ | /| | | || / | | | | . | ' || / | || // \ // \|||/|||||||||\ .WEB.ID ----------------------------------------------------------------------- EPay...

EPay Enterprise 4.13 - 'cid' SQL Injection

/ / / \ \ \ \ \ / / \\ \ \ \ \ // /// \ \ / / \ //|\ / \ \ \ \ \ \ / / \ \ / / \ | | | \ | | || | | |/ / \ V / || |\ V / / \ | / \ | /| | | || / | | | | . | ' || / | || // \ // \|||/|||||||||\ .WEB.ID ----------------------------------------------------------------------- EPay...

EPay Enterprise 4.13 - cid SQL Injection

EPay Enterprise 4.13 - cid SQL Injection / / / \ \ \ \ \ / / \\ \ \ \ \ // /// \ \ / / \ //|\ / \ \ \ \ \ \ / / \ \ / / \ | | | \ | | || | | |/ / \ V / || |\ V / / \ | / \ | /| | | || / | | | | . | ' || / | || // \ // \|||/|||||||||\ .WEB.ID...

EPay Enterprise v4.13 (cid) SQL Injection Vulnerability

Exploit for php platform in category web applications ======================================================= EPay Enterprise v4.13 cid SQL Injection Vulnerability ======================================================= ----------------------------------------------------------------------- EPay...

Mice(finding the policy）CMS V4. 2 XDAY-vulnerability warning-the black bar safety net

Mice V4. 2 is currently the latest version. No nonsense, first look at the backend, the admin back-end home page with a login IP, the use of this vulnerability can be IP modify any of the Characters, including the HTML and JS. Yes, so that you can cross out the administrator password. ! Use metho...

Sql injection

Multiple SQL injection vulnerabilities in admin/adminlogin.php in Uiga Fan Club 1.0 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 adminname and 2 adminpassword parameters...

CVE-2010-1366

Multiple SQL injection vulnerabilities in admin/adminlogin.php in Uiga Fan Club 1.0 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 adminname and 2 adminpassword parameters...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in admin/adminlogin.php in Uiga Fan Club, as downloaded on 20100310, allow remote attackers to inject arbitrary web script or HTML via the 1 adminname and 2 adminpassword parameters. NOTE: the provenance of this information is unknown; the details...

CVE-2010-1367

Multiple cross-site scripting XSS vulnerabilities in admin/adminlogin.php in Uiga Fan Club, as downloaded on 20100310, allow remote attackers to inject arbitrary web script or HTML via the 1 adminname and 2 adminpassword parameters. NOTE: the provenance of this information is unknown; the details...

Sql injection

SQL injection vulnerability in admin/login.php in Mini CMS RibaFS 1.0, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the login parameter. NOTE: some of these details are obtained from third party information...

CVE-2010-1346

Affected software: Mini CMS RibaFS 1.0 (admin/login.php).Vulnerability: SQL injection when magic_quotes_gpc is disabled, allowing remote attackers to execute arbitrary SQL via the login parameter.Root cause: Insufficient input sanitization under disabled magic_quotes_gpc as described in multiple ...

Huron CMS SQL Injection

\|/// \ - - // @ @ ----oOOo---oOOo-------------------------------------------------- Huron CMS 8 11 2007 Auth Bypass SQL Injection Vulnerability Script: http://huroncms.googlecode.com/files/Huron28112007.zip Author: mat Mail: [email protected]...