CVE-2009-4262

Harold Bakker's NewsScript HB-NS 1.3 allows remote attackers to obtain access to the admin control panel via a direct request to admin.php...

Chipmunk NewsLetter - Persistent Cross-Site Scripting

Chipmunk NewsLetter - Persistent Cross-Site Scripting Tested On: Windows Vista Note: For educational purposes only There’s probably a lot more vulnerabilities in their web apps, but I could not even get them to work out of the box.. http://server/newsletter/admin/addlist.php Look no sanitization:...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in e107 0.7.16 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified vectors in 1 submitnews.php, 2 usersettings.php; and 3 newpost.php, 4 banlist.php, 5 banner.php, 6 cpage.php, 7 download.php, 8...

W3infotech ( Auth Bypass ) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ====================================================== W3infotech Auth Bypass SQL Injection Vulnerability ====================================================== +====================================================================|| About ...

CVE-2009-3667

SQL injection vulnerability in admin/index.php in AdsDX 3.05 allows remote attackers to execute arbitrary SQL commands via the Username...

MMORPG Zone SQL Injection

x========================================================================================================================================x | AntiSecuritydotorg |...

BPMusic 1.0 - Blind SQL Injection

BPMusic 1.0 - Blind SQL Injection x========================================================================================================================================x | AntiSecuritydotorg |...

DVD Zone SQL Injection / Cross Site Scripting

x========================================================================================================================================x | AntiSecuritydotorg |...

BPMusic 1.0 - Blind SQL Injection

x========================================================================================================================================x | AntiSecuritydotorg |...

Giga Nepal SQL Injection

====================================== Author : Gonzhack Contact : [email protected] Homepage : Http://www.indonesiancoder.com ====================================== INFORMATION + Giga Nepal newsdetail.php?id= SQL injection Vulnerability + Dork : "Powered by Clicknet CMS"...

TBDev2 SQL Injection / Remote File Inclusion

======================================= TBDev2 Blind SQL Inj3ct0r + RFI Exploit ======================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database...

Sql injection

SQL injection vulnerability in the admin panel admin/ in WeBid auction script 0.5.4 allows remote attackers to execute arbitrary SQL commands via the username...

CVE-2008-7116

SQL injection vulnerability in the admin panel admin/ in WeBid auction script 0.5.4 allows remote attackers to execute arbitrary SQL commands via the username...

Interactivefx.ie CMS SQL Injection

================================================ Interactivefx.ie CMS global inj3ct0r.com Exploit ================================================ 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /...

eLinks SQL Injection / XSS / LFI

===================================================================== eLinks Vulnerabilities blind sql inj / xss / LFI by Inj3ct0r.com ===================================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ ...

New5starRating 1.0 (rating.php) SQL Injection Vulnerability

Exploit for unknown platform in category web applications =========================================================== New5starRating 1.0 rating.php SQL Injection Vulnerability =========================================================== New5starRating v1.0 rating.php Sql Inj. Vuln. Yazar: Bgh7 Tur...

New5starRating 1.0 (rating.php) SQL Injection Vulnerability

No description provided by source. New5starRating v1.0 rating.php Sql Inj. Vuln. Yazar: Bgh7 Turk Bilisim Gucleri Download; http://www.maniacomputer.com/5starrating/New5Star.html Bug--Sql Inj. Exp: rating.php?det=-1 union select userid,0,0,userpass from admin Panel: /admin/ Thanks: milw0rm--Str0k...

New5starRating 1.0 SQL Injection

New5starRating v1.0 rating.php Sql Inj. Vuln. Yazar: Bgh7 Turk Bilisim Gucleri Download; http://www.maniacomputer.com/5starrating/New5Star.html Bug--Sql Inj. Exp: rating.php?det=-1 union select userid,0,0,userpass from admin Panel: /admin/ Thanks: milw0rm--Str0ke...

Design/Logic Flaw

Wordpress before 2.8.3 allows remote attackers to gain privileges via a direct request to 1 admin-footer.php, 2 edit-category-form.php, 3 edit-form-advanced.php, 4 edit-form-comment.php, 5 edit-link-category-form.php, 6 edit-link-form.php, 7 edit-page-form.php, and 8 edit-tag-form.php in wp-admin...

CVE-2008-6956

Static code injection vulnerability in admin/admin.php in mxCamArchive 2.2 allows remote authenticated administrators to inject arbitrary PHP code into an unspecified program via the description parameter, which is executed by invocation of index.php. NOTE: some of these details are obtained from...