CVE-2009-2883

SQL injection vulnerability in admin/login.php in SaphpLesson 4.0, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the cpusername parameter, related to an error in the CleanVar function in includes/functions.php...

PHP Email Manager SQL Injection

===========================================|- Mtrb3 hena Security-Code ===========================================|- script :- PHP Email Manager Downlode:-http://webscripts.softpedia.com/script/Mailing-List-Managers/PHP-eMail-Manager-30652.html Dork:-PHPEmailManager Found by :- MuShTaQ from :-...

AJ Auction Pro OOPD 2.x SQL Injection

!/usr/bin/perl o AJ Auction Pro OOPD 2.x SQL Injection Exploit Software : AJ Auction Pro OOPD 2.x Vendor : http://www.ajsquare.com/ Author : NoGe Contact : nogedotcodeatgmaildotcom Blog : http://evilc0de.blogspot.com o Usage root@noge: perl ajpro.pl www.target.com o Dork "Powered By AJ Auction Pr...

AJ Auction Pro OOPD 2.x - id SQL Injection

AJ Auction Pro OOPD 2.x - id SQL Injection !/usr/bin/perl o AJ Auction Pro OOPD 2.x SQL Injection Exploit Software : AJ Auction Pro OOPD 2.x Vendor : http://www.ajsquare.com/ Author : NoGe Contact : nogedotcodeatgmaildotcom Blog : http://evilc0de.blogspot.com o Usage root@noge: perl ajpro.pl...

PHP Email Manager - 'remove.php?ID' SQL Injection

===========================================|- Mtrb3 hena Security-Code ===========================================|- script :- PHP Email Manager Downlode:-http://webscripts.softpedia.com/script/Mailing-List-Managers/PHP-eMail-Manager-30652.html Dork:-PHPEmailManager Found by :- MuShTaQ from :-...

PHP Email Manager (remove.php ID) SQL Injection Vulnerability

No description provided by source. ===========================================|- Mtrb3 hena Security-Code ===========================================|- script :- PHP Email Manager Remote SQL Injection Vulnerability...

PHP Email Manager (remove.php ID) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================= PHP Email Manager remove.php ID SQL Injection Vulnerability ============================================================= ===========================================|- Mtrb3 hen...

AJ Auction Pro OOPD 2.x (store.php id) SQL Injection Exploit

No description provided by source. !/usr/bin/perl o AJ Auction Pro OOPD 2.x SQL Injection Exploit Software : AJ Auction Pro OOPD 2.x Vendor : http://www.ajsquare.com/ Author : NoGe Contact : nogedotcodeatgmaildotcom Blog : http://evilc0de.blogspot.com o Usage root@noge: perl ajpro.pl www.target.c...

Shorty 0.7.1b - (Authentication Bypass) Insecure Cookie Handling

Shorty 0.7.1b - Authentication Bypass Insecure Cookie Handling Vulnerable Software -------------------------------------------------------------------------------- Script: Shorty v0.7.1 Beta maybe other versions URL:http://get-shorty.com/ Download:http://get-shorty.com/beta?force=download Google...

Ajax Short URL SQL Injection

Discovered By: Cicklow - Date: 03.08.2009 Exploit: username: realadminname ' or ' 1=1 password: cicklow note: generally admin name: admin or any user Buy Script: http://junglescripts.com/shorturls.php Admin login Demo: http://href.in/x/login...

A network of popular campus web CMS system vulnerabilities-vulnerability warning-the black bar safety net

Today inadvertently browsing to the home of a high school's website, casually turn to turn. The bottom of the page directly to have“admin”, and click directly into the Background address for http://www.xxxxx.net/xyadmin/login.asp Guess a bit of the database, found at: http://www. xxxxx...

Multi Website 1.5 - index PHP action SQL Injection

Bug : Powered by Multi Website 1.5 index php action Remote SQL Injection Vulnerability + Script home : http://www.multi-website.com + Affected versions : 1.5 + Solution : nothing .; ======================================================= == AuThOr : SarboT511 == EmaiL : [email protected] == HomE :...

Ajax Short URL Script - Authentication Bypass

Discovered By: Cicklow - Date: 03.08.2009 Exploit: username: realadminname ' or ' 1=1 password: cicklow note: generally admin name: admin or any user Buy Script: http://junglescripts.com/shorturls.php Admin login Demo: http://href.in/x/login milw0rm.com 2009-08-03...

Ajax Short URL Script - Authentication Bypass

Ajax Short URL Script - Authentication Bypass - Discovered By: Cicklow - Date: 03.08.2009 Exploit: username: realadminname ' or ' 1=1 password: cicklow note: generally admin name: admin or any user Buy Script: http://junglescripts.com/shorturls.php Admin login Demo: http://href.in/x/login...

Ajax Short URL Script (Auth Bypass) SQL Injection Vulnerability

Exploit for unknown platform in category web applications =============================================================== Ajax Short URL Script Auth Bypass SQL Injection Vulnerability =============================================================== - Discovered By: Cicklow - Date: 03.08.2009...

SaphpLesson 4.0 - Authentication Bypass

SaphpLesson 4.0 - Authentication Bypass ---------------------------------SaphpLesson v4.0 Auth Bypass SQL Injection Vulnerability--------------------------------------- ---------------------------------------------------------------------------------------------------------------- Script :...

SaphpLesson v4.0 (Auth Bypass) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ========================================================== SaphpLesson v4.0 Auth Bypass SQL Injection Vulnerability ==========================================================...

SaphpLesson 4.0 SQL Injection

---------------------------------SaphpLesson v4.0 Auth Bypass SQL Injection Vulnerability--------------------------------------- ---------------------------------------------------------------------------------------------------------------- Script : SaphpLesson version : 4.0 Language: PHP Site:...

AShop ru.1.Beta Database Config Disclosure

Application Name : AShop ru.1.Beta Vulnerable Type : Arbitrary Database Config Disclosure Vulnerability Infection : Admin Login Password Get... Author : Septemb0x Script Down.& WebSite : http://s2.dosya.tc/AShop.rar.html - http://softsearch.ru/programs/30-132-ashop-ru-download.shtml EXPLOIT :...

APBook 1.3 - Admin Login Multiple SQL Injections

APBook 1.3 - Admin Login Multiple SQL Injections source: https://www.securityfocus.com/bid/43452/info APBook is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an...