slogan design Script SQL Injection Vulnerability

No description provided by source. Title: slogan design Script SQL Injection Vulnerability Version: 3.1 Author: Mr.P3rfekT Software Site: http://www.slogandesign.co.il Tested on Lunix CVE : N/A Founded By Mr.P3rfekT --- We Will Not Go Down Dork : inurl:index.php?mid= Helllo Allz. Exploit :...

Pre Multi-Vendor Shopping Malls SQL Injection Vulnerability

No description provided by source. Source: Pre Multi-Vendor Shopping Malls SQL Injection Vulnerability Download: http://preproject.com/products.asp Dork: inurl:Powered by: PreProjects + detail.php?prodid=694 Author: [email protected] Exploit : http://server/detail.php?prodid=999999+UNION...

Joomla Component com_kk Blind SQL Injection Vulnerability

No description provided by source. ------------------- header data start ------------------- Joomla Component comkk Blind SQL Injection Vulnerability Author : Pyske | Bug Researchers Name : comkk Bug Type : Blind SQL Injection Infection : Admin login bilgileri alinabilir. Demo Vuln. : TRUE+...

WebCards <= 1.3 - Remote SQL Injection Vulnerability

No description provided by source. -+================================================================================+- -+ WebCards = 1.3 Remote SQL Injection Vulnerability +- -+================================================================================+- Discovered By: t0pP8uZz Contact:...

phpMyFamily <= 1.4.0 - SQL Injection Exploit

No description provided by source. !/usr/bin/perl -w phpMyFamily Exploit injection ============================== $banner = phpMyFamily Exploit injection \n\n============================== \n\nINFGPG-Hacking&Security Research; Greats: AresU 1st IndoSec Team,ADZ Security Team has discovered bugs...

E.Z. Poll 2 - (Auth Bypass) Remote SQL Injection Vulnerability

No description provided by source. Description: E.Z. Poll = v.2 script Remote SQL injection Exploit discovered by t0fx aka xtof69 vendor : E.Z. vulnerable page : http://www.site.com/admin/login.asp exploit : Username : 'or' '=' Password : 'or' '=' Add, modify user : /admin/admin-users.asp...

Joomla Component com_ksadvertiser SQL Injection Vulnerability

No description provided by source. Joomla Component comksadvertiser SQL Injection Vulnerability Author :FL0RiX Name : comksadvertiser Bug Type : SQL Injection Infection : Admin login bilgileri alinabilir. Demo Vuln : http://server/index.php?option=comksadvertiser&pid=EXPLOIT&task=showcats EXPLOIT...

Joomla Component com_articlemanager SQL Injection Vulnerability

No description provided by source. Joomla Component comarticlemanager SQL Injection Vulnerability Author :FL0RiX Name : comarticlemanager Bug Type : SQL Injection Infection : Admin login bilgileri alinabilir. Demo Vuln :...

pligg <= 9.9.0 (xss/lfi/sql) Multiple Vulnerabilities

No description provided by source. GulfTech Security Research July 30, 2008 Vendor : Pligg LLC URL : http://www.pligg.com/ Version : Pligg = 9.9 Risk : Multiple Vulnerabilities Description: Pligg is a popular open source, full featured, content management system written in php. There are a number...

Web Wiz NewsPad Express Edition 1.03 Database File Disclosure Vulnerability

No description provided by source. ============================================================= NewsPad Database Download Vulnerability ============================================================= Exploit Title: NewsPad Database Download Vulnerability Date: 15/11/2010 Author: keracker Software...

My Gaming Ladder <= 7.5 (ladderid) SQL Injection Vulnerability

No description provided by source. --==+================================================================================+==-- --==+ My Gaming Ladder 7.5 AND Prior SQL Injection Vulnerbilitys +==-- --==+================================================================================+==-- AUTHOR:...

pixelpost 1.7.3 - Multiple Vulnerabilities

No description provided by source. 1 +Exploit Title: pixelpostv1.7.3 Multiple vulnerabilities 0 0 +Date: 15/09/2010 1 1 +Author: Sweet 0 0 +Contact : [email protected] 0 1 +Software Link: http://www.pixelpost.org/ 0 0 +Download: http://www.pixelpost.org/ 1 1 +Version: 1.7.3 0 0 +Tested on: WinX...

WEBBDOMAIN Post Card <= 1.02 (catid) SQL Injection Vulnerability

No description provided by source. post Card catid Remote SQL Injection Vulnerability Author: Hussin X Home : www.IQ-TY.com & www.TrYaG.cc MaiL : [email protected] script : http://webbdomain.com/php/postcarden/index2.php script : http://webbdomain.com/php/postcardir/index2.php DorK :...

Free Monthly Websites 2.0 - Multiple Vulnerabilities

No description provided by source. Title: ====== Free Monthly Websites v2.0 - Multiple Web Vulnerabilities Date: ===== 2013-02-04 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=851 VL-ID: ===== 851 Common Vulnerability Scoring System: ==================================...

DouPHP轻量级企业建站系统后台任意文件删除缺陷

简要描述： 某处未验证删除的文件路径，导致可以删除任意文件。 官网演示站测试通过 详细说明： 漏洞文件: /admin/backup.php 第161行 / +---------------------------------------------------------- 备份删除 +---------------------------------------------------------- / if $REQUEST'rec' == 'del' $sqlfilename = $GET'sqlfilename'; if $POST'confirm' if...

Maccms 最新注入一枚。

简要描述： 看到maccms又更新了 果断下来看看。 本来可以Sql的地方还挺多。。 但是由于自带的360防注入脚本。。我没办法绕过。 还是找到了一处, 如果没这防注入的话可以直接利用这注入登录后台。。 可是。。 老老实实盲注把。 详细说明： maccms 基本上都是调用be函数来代替$POST之类的。 都做了addslashes。 在admin/adminconn.php中 function chkLogin global $db; $mid = getCookie'adminid'; $mname = getCookie'adminname'; $mcheck =...

PT-2014-5567 · D Link · D-Link Dap-1350

Name of the Vulnerable Software and Affected Versions: D-Link DAP-1350 versions 1.14 and earlier Description: The issue concerns SQL injection vulnerabilities in the administration login page. Remote attackers can execute arbitrary SQL commands via the username or password variables...

BEESCMS 3.4 /admin.php 登录绕过漏洞

No description provided by source...

CVE-2013-4722

Multiple cross-site scripting XSS vulnerabilities in Admin/login/default.asp in DDSN Interactive cm3 Acora CMS 6.0.6/1a, 6.0.2/1a, 5.5.7/12b, 5.5.0/1b-p1, and possibly other versions allow remote attackers to inject arbitrary web script or HTML via the 1 username, 2 url, 3 qstr parameter...

CVE-2013-4722

Multiple cross-site scripting XSS vulnerabilities in Admin/login/default.asp in DDSN Interactive cm3 Acora CMS 6.0.6/1a, 6.0.2/1a, 5.5.7/12b, 5.5.0/1b-p1, and possibly other versions allow remote attackers to inject arbitrary web script or HTML via the 1 username, 2 url, 3 qstr parameter...