2750 matches found
Comersus 8 Shopping Cart SQL Injection and CSRF Vulnerability
Exploit for asp platform in category web applications ============================================================= Comersus 8 Shopping Cart SQL Injection and CSRF Vulnerability ============================================================= Exploit Title:SQL Injection and CSRF Vulnerability in...
Advanced Poll Script SQL Injection / Cross Site Scripting
Exploit Title: XSS and Authentication bypass in Advanced Poll Script Date: 26-apr-2010 Author: Sid3^effects Software Link: N/a CVE : Code : XSS and Authentication bypass in Advanced Poll Script Vendor:http://www.2daybiz.com/ Author:Sid3^effects Description : Advanced Poll is a polling system with...
Sitereptile SQL Injection
/ /| | || || | | | | | || | / \ / || | / | | | | / / |||| | | | | | | / \ | | | / /| /| Geeksec.com // |\ || |||| || ||||// \||\ ||| \ ..Bl4ck H4T.. ============================================================================== ! sitereptile = SQL Injection Vulnerability...
2DayBiz Advanced Poll Script - Cross-Site Scripting / Authentication Bypass
XSS and Authentication bypass in Advanced Poll Script Vendor:http://www.2daybiz.com/ Author:Sid3^effects Description : Advanced Poll is a polling system with powerful administration tool supports both text file and MySQL database. Its features include multiple polls, unlimited options, IP-Logging...
EPay Enterprise 4.13 SQL Injection
/ / / \ \ \ \ \ / / \\ \ \ \ \ // /// \ \ / / \ //|\ / \ \ \ \ \ \ / / \ \ / / \ | | | \ | | || | | |/ / \ V / || |\ V / / \ | / \ | /| | | || / | | | | . | ' || / | || // \ // \|||/|||||||||\ .WEB.ID ----------------------------------------------------------------------- EPay...
EPay Enterprise 4.13 - 'cid' SQL Injection
/ / / \ \ \ \ \ / / \\ \ \ \ \ // /// \ \ / / \ //|\ / \ \ \ \ \ \ / / \ \ / / \ | | | \ | | || | | |/ / \ V / || |\ V / / \ | / \ | /| | | || / | | | | . | ' || / | || // \ // \|||/|||||||||\ .WEB.ID ----------------------------------------------------------------------- EPay...
EPay Enterprise v4.13 (cid) SQL Injection Vulnerability
Exploit for php platform in category web applications ======================================================= EPay Enterprise v4.13 cid SQL Injection Vulnerability ======================================================= ----------------------------------------------------------------------- EPay...
EPay Enterprise 4.13 - cid SQL Injection
EPay Enterprise 4.13 - cid SQL Injection / / / \ \ \ \ \ / / \\ \ \ \ \ // /// \ \ / / \ //|\ / \ \ \ \ \ \ / / \ \ / / \ | | | \ | | || | | |/ / \ V / || |\ V / / \ | / \ | /| | | || / | | | | . | ' || / | || // \ // \|||/|||||||||\ .WEB.ID...
Mice(finding the policy）CMS V4. 2 XDAY-vulnerability warning-the black bar safety net
Mice V4. 2 is currently the latest version. No nonsense, first look at the backend, the admin back-end home page with a login IP, the use of this vulnerability can be IP modify any of the Characters, including the HTML and JS. Yes, so that you can cross out the administrator password. ! Use metho...
Sql injection
Multiple SQL injection vulnerabilities in admin/adminlogin.php in Uiga Fan Club 1.0 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 adminname and 2 adminpassword parameters...
CVE-2010-1366
Multiple SQL injection vulnerabilities in admin/adminlogin.php in Uiga Fan Club 1.0 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 adminname and 2 adminpassword parameters...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in admin/adminlogin.php in Uiga Fan Club, as downloaded on 20100310, allow remote attackers to inject arbitrary web script or HTML via the 1 adminname and 2 adminpassword parameters. NOTE: the provenance of this information is unknown; the details...
CVE-2010-1367
Multiple cross-site scripting XSS vulnerabilities in admin/adminlogin.php in Uiga Fan Club, as downloaded on 20100310, allow remote attackers to inject arbitrary web script or HTML via the 1 adminname and 2 adminpassword parameters. NOTE: the provenance of this information is unknown; the details...
Sql injection
SQL injection vulnerability in admin/login.php in Mini CMS RibaFS 1.0, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the login parameter. NOTE: some of these details are obtained from third party information...
CVE-2010-1346
Affected software: Mini CMS RibaFS 1.0 (admin/login.php).Vulnerability: SQL injection when magic_quotes_gpc is disabled, allowing remote attackers to execute arbitrary SQL via the login parameter.Root cause: Insufficient input sanitization under disabled magic_quotes_gpc as described in multiple ...
Huron CMS SQL Injection
\|/// \ - - // @ @ ----oOOo---oOOo-------------------------------------------------- Huron CMS 8 11 2007 Auth Bypass SQL Injection Vulnerability Script: http://huroncms.googlecode.com/files/Huron28112007.zip Author: mat Mail: [email protected]...
DreamHost <= && > 2.3 Multiple Vulnerability
Exploit for unknown platform in category web applications =================================================== DreamHost 2.3 global Multiple Vulnerability =================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ ...
DreamHost <= && > 2.3 global Inj3ct0r/Xss/Local inc Multiple Exploit
================================================= DreamHost = && 2.3 global inj3ct0r.com Exploit ================================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' /' / /' 0 0 /, // ,/ / 1 1 // /' / // /' / /' 0 0 / / / / / / 1 1 / ...
DreamHost_<=_&&_>_2.3_global_Inj3ct0r/Xss/Local_inc_Multiple_Exploit
No description provided by source. + Discovered By : Inj3ct0r + Site : Inj3ct0r.com + support e-mail : submitatinj3ct0r.com + visit : inj3ct0r.com , inj3ct0r.org , inj3ct0r.net Decided to make a review to DreamHost - Billing Panel Site product: dreamcost.com Version: = && 2.3...
osDate 2.1.9 - Remote File Inclusion
osDate 2.1.9 - Remote File Inclusion ======================================================================================== o osDate Remote File Inclusion Vulnerabilities Software : osDate dating and matchmaking script version 2.1.9 mostly affected Vendor : http://www.tufat.com/ Download :...