CVE-2009-1952

Multiple SQL injection vulnerabilities in the administrative login feature in PropertyMax Pro FREE 0.3, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 username and 2 password parameters...

CVE-2009-1952

CVE-2009-1952 concerns multiple SQL injection vulnerabilities in the administrative login feature of PropertyMax Pro FREE 0.3. The root cause is improper handling of user-supplied inputs in the login process when magic_quotes_gpc is disabled, enabling remote attackers to craft (username, password...

Pixelactivo 3.0 - Authentication Bypass

Pixelactivo 3.0 - Authentication Bypass Pixelactivo 3.0 Auth bypass Remote SQL Injection Founder: ThE g0bL!N ------ Home: http:/www.4ckx.com/dz/ ---- Vendor:http://www.pixelactivo.com Special Thx: Snakespc Exploit: ------ Username: adminname' or '1=1 Password: ThE g0bL!N Demo: ----...

Impact Software AdPeeps 8.5d1 - Cross-Site Scripting HTML Injection

Impact Software AdPeeps 8.5d1 - Cross-Site Scripting HTML Injection AdPeeps Ad Rotator - XSS and HTML Injection Vulnerabilities Version Affected: 8.5d1 3-18-09 newest Info: Ad Peeps is a banner rotator and text ad rotator - all in one that allows you to track, sell and manage banner ads,...

DreamArticle 3.0 background the validation logic vulnerability and injection vulnerabilities-vulnerability warning-the black bar safety net

Team: bbs.wolvez.org By q1ur3n 在 admin/global.php there is such a piece of code, used to implement the”remember password”in the login back-office functions. $administrator = getcookie"administrator"; $adminpassword = getcookie"adminpassword"; if $administrator && $adminpassword...

ZaoCMS Insecure Cookie Handling

-------------------------------------------------------------- ZaoCMS Insecure Cookie Handling Vulnerability --------------------------------------------------------------- Founder :ThE g0bL!N Home:http://www.zaocms.com/ Software : ZaoCMS...

ZaoCMS Insecure Cookie Handling Vulnerability

Exploit for unknown platform in category web applications ============================================= ZaoCMS Insecure Cookie Handling Vulnerability ============================================= -------------------------------------------------------------- ZaoCMS Insecure Cookie Handling...

ZaoCMS - Insecure Cookie Handling

-------------------------------------------------------------- ZaoCMS Insecure Cookie Handling Vulnerability --------------------------------------------------------------- Founder :ThE g0bL!N Home:http://www.zaocms.com/ Software : ZaoCMS...

CVE-2009-1662

Multiple SQL injection vulnerabilities in admin/login.php in Wright Way Services Recipe Script 5 allow remote attackers to execute arbitrary SQL commands via the 1 username and 2 Password fields, as reachable from admin/index.php...

CVE-2009-1662

Multiple SQL injection vulnerabilities in admin/login.php in Wright Way Services Recipe Script 5 allow remote attackers to execute arbitrary SQL commands via the 1 username and 2 Password fields, as reachable from admin/index.php...

PHP Site Lock 2.0 - Insecure Cookie Handling

-------------------------------------+ Homepage:http://www.kalptarudemos.com Product: PHP Site Lock 2.0 home:www.h4ckf0ru.com ------------------------------------- PHP Site Lock 2.0 Insecure Cookie Handling Vuln ------------------------------------- Exploit: --------...

Sql injection

SQL injection vulnerability in admin/admlogin.php in DeltaScripts PHP Links 1.3 and earlier allows remote attackers to execute arbitrary SQL commands via the adminusername parameter aka the admin field...

CVE-2008-6720

SQL injection vulnerability in admin/admlogin.php in DeltaScripts PHP Links 1.3 and earlier allows remote attackers to execute arbitrary SQL commands via the adminusername parameter aka the admin field...

Back-End CMS 5.0 - 'main.asp?id' SQL Injection

BackendCMS Version 5.0 SQl Injection Prodcut: BackendCMS Version 5.0 Home : http://www.backendcms.dk/ Vunlerability : SQL Injection Dork : find it yourself Discovred by: AnGeL25dZ Contact : [email protected] Greetz to : ALLAH All Members of HackTeach All Members of http://islam-attack.com ra3ch...

Flex CMS Calendar (ItemId) Blind SQL Injection Vulnerability

Exploit for unknown platform in category web applications =========================================================== FlexCMS Calendar ItemId Blind SQL Injection Vulnerability =========================================================== FlexCMS CalendarItemId Blind SQL Injection Vulnerability...

X-Forum 0.6.2 Remote Command Execution Exploit

No description provided by source. !/usr/bin/perl Web App: X-Forum 0.6.2 Link : http://freefr.dl.sourceforge.net/sourceforge/x-forum/xforum-0.6.2.tar.gz Bug : Auth Bypass via Cookie Handling : There are also other SQL Injections Remote Command Execution Exploit Credits to Giovanni Buzzin,...

L-Forum 2.4.0 SQL Injection / Command Execution

!/usr/bin/perl Web App: L-Forum 2.4.0 Link : http://l-forum.sourceforge.net/ Bug : SQL INJECTIONS SQL Command Injection Exploit Needs MQ Off Dork: Copyright 2000-2001 Leszek 'Leon' Krupinski Credits to Giovanni Buzzin, "Osirys" Mail: osirysatautisticidotorg...

Diskos CMS Manager SQL Injection

Diskos CMS Manager & multiple vulnerabilitiesS Prodcut: Diskos CMS Manager Home : http://www.diskos.dk Vunlerability : SQL Injection & admin byapass & database disclosure Dork : "Powered By diskos" inurl:"side.asp?kat=1" Discovred by: AnGeL25dZ Contact : [email protected] Greetz to : ALLAH All...

X-Forum 0.6.2 Authentication Bypass

!/usr/bin/perl Web App: X-Forum 0.6.2 Link : http://freefr.dl.sourceforge.net/sourceforge/x-forum/xforum-0.6.2.tar.gz Bug : Auth Bypass via Cookie Handling : There are also other SQL Injections Remote Command Execution Exploit Credits to Giovanni Buzzin, "Osirys" Mail osirysatautisticidotorg It...

PhotoStand 1.2.0 Command Execution

!/usr/bin/perl App : PhotoStand 1.2.0 Site : http://www.photostand.org Remote Command Execution Exploit Credits to : Giovanni Buzzin, "Osirys" osirysatautisticidotorg Greets: drosophila, emgent, Fireshot PhotoStand is a used Image Gallery CMS. PhotoStand is vulnerable to SQL Injection, AUTH BYPAS...