2713 matches found
eWebEditor: the website of the invisible bomb-vulnerability warning-the black bar safety net
Article author: koshan Information source: http://www.hacker.com.cn/ Dear webmasters in using the eWebEditor is found, eWebEditor improperly configured so that it will become the site of the Unabomber? The first discovery of this vulnerability stems from last year's invasion, in the dead end of t...
Sql injection
Multiple SQL injection vulnerabilities in Pro Publish 2.0 allow remote attackers to execute arbitrary SQL commands via the 1 email and 2 password parameter to a admin/login.php, 3 findstr parameter to b search.php, or 4 artid parameter to c art.php, or 5 catid parameter to d cat.php...
CVE-2006-2128
Multiple SQL injection vulnerabilities in Pro Publish 2.0 allow remote attackers to execute arbitrary SQL commands via the 1 email and 2 password parameter to a admin/login.php, 3 findstr parameter to b search.php, or 4 artid parameter to c art.php, or 5 catid parameter to d cat.php...
JMK's Picture Gallery admin login
dork: "JMK's Picture Gallery" and last path to add : admingallery.php3?action=add&upload=1 example:hhtp://www.site.com/path/.../admingallery.php3?action=add&upload=1 credits:AlpEren,tugr@...
planetGallery admin login
google dork - inurl:planetgallery last path add to /admin/galleryadmin.php example: http://site.com/planetgallery/admin/galleryadmin.php no pass, no login, sending your shell. credits:tugr@,AlpEren...
free-php.net Poll 1.0 admin login
google dork:"powered by free-php.net" poll last path add to /admin/ select poll and modify or addnew poll credits:tugr@...
Sql injection
SQL injection vulnerability in admin/login.php in Chipmunk Guestbook allows remote attackers to execute arbitrary SQL commands and bypass login authentication via the User name...
phpBB 2.0.19 - user_sig_bbcode_uid Remote Code Execution
phpBB 2.0.19 - usersigbbcodeuid Remote Code Execution !/usr/bin/perl r57phpbba2e2.pl - phpBB admin 2 exec exploit version 2 based on usersigbbcodeuid bug tested on 2.0.12 , 2.0.13 , 2.0.19 -------------------------------------------- screen r57phpbba2e2.pl -u http://192.168.0.2/phpBB-2.0.19/ -L...
phpBB 2.0.19 - 'user_sig_bbcode_uid' Remote Code Execution
!/usr/bin/perl r57phpbba2e2.pl - phpBB admin 2 exec exploit version 2 based on usersigbbcodeuid bug tested on 2.0.12 , 2.0.13 , 2.0.19 -------------------------------------------- screen r57phpbba2e2.pl -u http://192.168.0.2/phpBB-2.0.19/ -L admin -P password Command for execute or 'exit' for exi...
dnGuestbook <= 2.0 Remote SQL Injection Vulnerabilities
Exploit for unknown platform in category web applications ======================================================= dnGuestbook "dnGuestbook by design-nation.de Version" - 331 msn - "dnGuestbook by design-nation.de Version" - 249 conditions: php.ini - magicquotesgpc = Off...
dnGuestbook <= 2.0 Remote SQL Injection Vulnerabilities
No description provided by source. / | | | | | SECURITY ADVISORY | | | | | /¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯\ advisory: dnGuestbook = v2.0 remote sql injection vulnerability release: 2006-04-08 author: snatcher snatcher at gmx.ch country: switzerland |+| application: dnGuestbook =...
dnGuestbook 2.0 - SQL Injection
dnGuestbook 2.0 - SQL Injection / | | | | | SECURITY ADVISORY | | | | | /¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯\ advisory: dnGuestbook "dnGuestbook by design-nation.de Version" - 331 msn - "dnGuestbook by design-nation.de Version" - 249 conditions: php.ini - magicquotesgpc = Off greets:...
Sql injection
SQL injection vulnerability in adminlogin.asp in ISP of Egypt SiteMan allows remote attackers to execute arbitrary SQL commands via the pass parameter...
TotalECommerceSQL.txt
--Security Report-- Advisory: TotalECommerce index.asp id Remote SQL Injection Vulnerability. --- Author: Mustafa Can Bjorn "nukedx a.k.a nuker" IPEKCI --- Date: 04/03/06 04:36 AM --- Contacts: ICQ: 10072 MSN/Email: [email protected] Web: http://www.nukedx.com --- Vendor: TotalECommerce...
Webeveyn Whomp! Real Estate Manager 2005 - Login SQL Injection
Webeveyn Whomp! Real Estate Manager 2005 - Login SQL Injection source: https://www.securityfocus.com/bid/16544/info Whomp! Real Estate Manager is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in ...
CVE-2006-0320
SQL injection vulnerability in admin/processlogin.php in Bit 5 Blog 8.01 allows remote attackers to execute arbitrary SQL commands and bypass authentication via the 1 username and 2 password parameter...
eWebEditor: the website of the invisible bomb-vulnerability warning-the black bar safety net
Bit webmasters in using the eWebEditor is found, eWebEditor improperly configured so that it will become the site of the Unabomber? First found thisvulnerabilityfrom last year's invasion, in the dead end of the time to find out eWebEditor, so it is simple to get a WebShell in. Subsequently, sever...
CVE-2005-4140
SQL injection vulnerability in admin/login/index.php in Website Baker 2.6.0 allows remote attackers to execute arbitrary SQL commands via the username parameter, as used by the user field...
CVE-2005-4140
Website Baker 2.6.0 is vulnerable to SQL injection in admin/login/index.php via the username parameter used in user-field queries. The vulnerability can allow an unauthenticated attacker to bypass authentication, disclose sensitive information, modify data, or mount further database attacks. Affe...