CVE-2010-1366

Multiple SQL injection vulnerabilities in admin/adminlogin.php in Uiga Fan Club 1.0 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 adminname and 2 adminpassword parameters...

CVE-2010-1367

Multiple cross-site scripting XSS vulnerabilities in admin/adminlogin.php in Uiga Fan Club, as downloaded on 20100310, allow remote attackers to inject arbitrary web script or HTML via the 1 adminname and 2 adminpassword parameters. NOTE: the provenance of this information is unknown; the details...

Sql injection

SQL injection vulnerability in admin/login.php in Mini CMS RibaFS 1.0, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the login parameter. NOTE: some of these details are obtained from third party information...

CVE-2010-1346

Affected software: Mini CMS RibaFS 1.0 (admin/login.php).Vulnerability: SQL injection when magic_quotes_gpc is disabled, allowing remote attackers to execute arbitrary SQL via the login parameter.Root cause: Insufficient input sanitization under disabled magic_quotes_gpc as described in multiple ...

Huron CMS SQL Injection

\|/// \ - - // @ @ ----oOOo---oOOo-------------------------------------------------- Huron CMS 8 11 2007 Auth Bypass SQL Injection Vulnerability Script: http://huroncms.googlecode.com/files/Huron28112007.zip Author: mat Mail: [email protected]...

DreamHost <= && > 2.3 global Inj3ct0r/Xss/Local inc Multiple Exploit

================================================= DreamHost = && 2.3 global inj3ct0r.com Exploit ================================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' /' / /' 0 0 /, // ,/ / 1 1 // /' / // /' / /' 0 0 / / / / / / 1 1 / ...

DreamHost_<=_&&_>_2.3_global_Inj3ct0r/Xss/Local_inc_Multiple_Exploit

No description provided by source. + Discovered By : Inj3ct0r + Site : Inj3ct0r.com + support e-mail : submitatinj3ct0r.com + visit : inj3ct0r.com , inj3ct0r.org , inj3ct0r.net Decided to make a review to DreamHost - Billing Panel Site product: dreamcost.com Version: = && 2.3...

DreamHost <= && > 2.3 Multiple Vulnerability

Exploit for unknown platform in category web applications =================================================== DreamHost 2.3 global Multiple Vulnerability =================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ ...

osDate 2.1.9 - Remote File Inclusion

osDate 2.1.9 - Remote File Inclusion ======================================================================================== o osDate Remote File Inclusion Vulnerabilities Software : osDate dating and matchmaking script version 2.1.9 mostly affected Vendor : http://www.tufat.com/ Download :...

Campsite v3.3.5 CSRF Vulnerability

Exploit for unknown platform in category web applications ================================== Campsite v3.3.5 CSRF Vulnerability ================================== Site p4ge http://wwwcampware.org/ Plateform php Proof of concept Targeted URL: http://server/admin/login.php Script to delete the Admi...

Mortal network shopping system V8. 0 Simplified Chinese version of Cookie spoofing exploit-vulnerability warning-the black bar safety net

adchk. asp determine the administrator login state % if Request. Cookies"venshop""adminname"="" or Request. Cookies"venshop""adminpass"="" or Request. Cookies"venshop""adminclass"="" then Response. Cookies"venshop""adminname"="" Response. Cookies"venshop""adminpass"="" Response...

DEDECMS v5. 5 GBK Final of a chicken-vulnerability-vulnerability warning-the black bar safety net

In the session. autostart turned on in the case can be arbitrarily to cover the$SESSION variable, we can forge the admin login and upload the file /DedeCmsV55-GBK-Final/uploads/include/dialog/selectsoftpost.php When uploading renamed to . php. You can bypass the check upload shell exp: | 1 2 3 4 ...

Softbiz Classifieds PLUS SQL Injection

----------------------------Information------------------------------------------------ +Name : Softbiz Classifieds PLUS SQL Injection gallery.php +Autor : Easy Laster +Date : 25.02.2010 +Script : Softbiz Classifieds PLUS +Download : ----- +Demo : www.posbisnis.com /the password is in browser lin...

Softbiz Classifieds PLUS - Multiple SQL Injections

Softbiz Classifieds PLUS - Multiple SQL Injections ----------------------------Information------------------------------------------------ +Name : Softbiz Classifieds PLUS SQL Injection gallery.php +Autor : Easy Laster +Date : 25.02.2010 +Script : Softbiz Classifieds PLUS +Price : 99$ +Language :...

Bispage SQL Injection

Exploit Title: bispage Bypass Vulnerability Author: SaMir-BonD [email protected] Organization : TEAM-DZ Formal sites : t00ls.org - h4kz.com Software Link: N/A Script's Language: .ASP Tested on: Windows PHP/4.3.11 os Dork :"Developed by Bispage.com" CVE : if exists Code : exploit code Site page :...

Softbiz Auktios Script - Multiple SQL Injections

----------------------------Information------------------------------------------------ +Name : softbiz auktios script sql injection viewitems.php +Autor : Easy Laster +Date : 24.02.2010 +Script : softbiz auktios script +Download : ----- +Demo : http://ezpips.com/ +Price : 99$ +Language :PHP...

Softbiz Classifieds PLUS - Multiple SQL Injections

----------------------------Information------------------------------------------------ +Name : Softbiz Classifieds PLUS SQL Injection gallery.php +Autor : Easy Laster +Date : 25.02.2010 +Script : Softbiz Classifieds PLUS +Price : 99$ +Language : PHP +Discovered by Easy Laster +Security Group...

Article Friendly SQL Injection Vulnerability

No description provided by source. / /| | || || | | | | | || | / \ / || | / | | | | / / |||| | | | | | | / \ | | | / /| /| // |\ || |||| || ||||// \||\ ||| \ ..Bl4ck H4T.. ============================================================================== ! Article Friendly = SQL Injection...

Article Friendly SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================ Article Friendly SQL Injection Vulnerability ============================================ === -/Expl0it Code- : === SQL Injection Vulnerability : -/ Link Admin:...

Joomla Recipe SQL Injection

Joomla Component comrecipe SQL Injection Vulnerabilities Author :FL0RiX Greez: All Tahkikat-ul Ahlak Family Name : comrecipe Google Dork: allinurl:"comrecipe" Bug Type : SQL Injection Infection : Admin login bilgileri alinabilir. Demo Vulns :...