# MHG Security Team --- OzzyWork Gallery SQL Injection

Milli-Harekat Advisory www.milli-harekat.org OzzyWork Galeri Admin SQL Injection Risk : High Script : OzzyWork Gallery All Version Credits : Dj ReMix Thanks : y Korsan , ESKOBAR , Poizonb0x , TRIP OzzyWork Gallery Admin Page's www.victim.com/Ozzywork Path /admindefault.asp Login and password : 'o...

[SA18945] WPCeasy Admin Logon SQL Injection Vulnerability

TITLE: WPCeasy Admin Logon SQL Injection Vulnerability SECUNIA ADVISORY ID: SA18945 VERIFY ADVISORY: http://secunia.com/advisories/18945/ CRITICAL: Moderately critical IMPACT: Manipulation of data WHERE: From remote SOFTWARE: WPCeasy http://secunia.com/product/8156/ DESCRIPTION: murfie has report...

sql injection in ASP Survey

Hi guys there is a simple sql injection in web app. ASP Survey by this vuln. you can go into the admin page Target Page : login.asp Vendor : ASP Survey Exploit : User: admin Password: 'or' Hacking: 1. search on google.com as : allinurl:"login.asp" ASPsurvey and then type the Exploit in correct...

fswiki -- command injection vulnerability

There is a command injection vulnerability in admin page of fswiki...

CVE-2005-2332

Cross-site scripting XSS vulnerability in PHPPageProtect 1.0.0a allows remote attackers to inject arbitrary web script or HTML via the username parameter to 1 admin.php or 2 login.php...

PT-2004-3258 · Phpx · Phpx

Name of the Vulnerable Software and Affected Versions: PHPX versions 3.0 through 3.2.6 Description: A cross-site request forgery CSRF issue allows remote attackers to execute arbitrary commands via specific URLs that are automatically executed on behalf of the administrator. The affected URLs...

PT-2003-1586 · Upb · Ultimate Php Board

Name of the Vulnerable Software and Affected Versions: Ultimate PHP Board UPB version 1.9 Description: The issue allows remote attackers to execute arbitrary PHP code with administrator privileges. This is achieved via an HTTP request containing the code in the User-Agent header, which is execute...

PT-2003-1574 · Port80 · Iisprotect

Name of the Vulnerable Software and Affected Versions: iisPROTECT versions 2.2-r4 and earlier Description: The issue allows remote attackers to insert arbitrary SQL and execute code via certain variables, such as the GroupName variable in the SiteAdmin.ASP page. This can be exploited by attackers...

Beanwebb Guestbook v1.0 vulnerabilities

=:=:=::=:=:=::=:=:=::=:=:=::=:=:=::=:=:=::=:=:=::= topic: Beanwebb Guestbook v1.0 vulnerabilities product: Beanwebb Guestbook v1.0 vendor: http://www.adam.orientfans.co.uk risk: high date: 03/29/2k3 discovered by: euronymous /F0KP advisory urls: http://f0kp.iplus.ru/bz/016.en.txt...

HPE - News Portal Engine

Product : HPE - News Portal Engine Version : 4.0 beta WebSite : http://news.is.free.fr Problem : phpinfo Description: ------------ phpinfo.php =========== ... HPEbeginPage"PHPinfo"; phpinfo; HPEendPage; ... =========== Exploit: -------- http://somehost/HPEdir/HPE/admin/pages/phpinfo.php...