Gallarific 1.1 - '/gallery.php' Arbitrary Delete/Edit Category

Gallarific Photo Gallery = 1.0 Arbitrary Delete-Edit Category Vulnerability //Author: iLker Kandemir -- MEFISTO //Price : 47 $ //script demo : http://www.gallarific.com/demo/index.php //imhatimi.org ---------------------------------------------------------------- //exploit : 1...

CVE-2008-6917

SQL injection vulnerability in admin.php in Exocrew ExoPHPDesk 1.2 Final allows remote attackers to execute arbitrary SQL commands via the username user parameter...

Sql injection

SQL injection vulnerability in admin.php in Exocrew ExoPHPDesk 1.2 Final allows remote attackers to execute arbitrary SQL commands via the username user parameter...

TYPO3 CMS 4.0 SQL Injection

----- TYPO3 CMS 4.0 SQL-Injection Vulnerability ----- + Author : CyberNaj, JxE-13 + Vulnerability : SQL injection + Group : Ro0T-MaFia ----- Info CMS: Name : TYPO3 Web : http://typo3.org dowloand : http://typo3.org/download/packages/ Country : Venezuela ----- Vulnerability:...

TYPO3 CMS 4.0 - showUid SQL Injection

TYPO3 CMS 4.0 - showUid SQL Injection ----- TYPO3 CMS 4.0 SQL-Injection Vulnerability ----- + Author : CyberNaj, JxE-13 + Vulnerability : SQL injection + Group : Ro0T-MaFia ----- Info CMS: Name : TYPO3 Web : http://typo3.org dowloand : http://typo3.org/download/packages/ Country : Venezuela -----...

TYPO3 CMS 4.0 - 'showUid' SQL Injection

----- TYPO3 CMS 4.0 SQL-Injection Vulnerability ----- + Author : CyberNaj, JxE-13 + Vulnerability : SQL injection + Group : Ro0T-MaFia ----- Info CMS: Name : TYPO3 Web : http://typo3.org dowloand : http://typo3.org/download/packages/ Country : Venezuela ----- Vulnerability:...

simplePHPWeb 0.2 Authentication Bypass

simplePHPWeb 0.2 Authentication Bypass Vulnerability + Discovered By SirGod + http://insecurity-ro.org + http://h4cky0u.org + download : http://sourceforge.net/projects/simplephpweb/files/simplephpweb/simplephpweb-v0.2/simplephpweb-v0.2.zip/download + Authentication Bypass Vulnerability - No...

simplePHPWeb 0.2 (files.php) Authentication Bypass Vulnerability

No description provided by source. + simplePHPWeb 0.2 Authentication Bypass Vulnerability + Discovered By SirGod + http://insecurity-ro.org + http://h4cky0u.org + download : http://sourceforge.net/projects/simplephpweb/files/simplephpweb/simplephpweb-v0.2/simplephpweb-v0.2.zip/download +...

simplePHPWeb 0.2 (files.php) Authentication Bypass Vulnerability

Exploit for unknown platform in category web applications ================================================================ simplePHPWeb 0.2 files.php Authentication Bypass Vulnerability ================================================================ + simplePHPWeb 0.2 Authentication Bypass...

simplePHPWeb 0.2 - files.php Authentication Bypass

simplePHPWeb 0.2 - files.php Authentication Bypass + simplePHPWeb 0.2 Authentication Bypass Vulnerability + Discovered By SirGod + http://insecurity-ro.org + http://h4cky0u.org + download :...

Cross-Site Scripting and Insufficient Anti-automation vulnerabilities in XAMPP

Hello 3APA3A! I want to warn you about new security vulnerabilities in XAMPP. These are Cross-Site Scripting and Insufficient Anti-automation vulnerabilities. XSS: http://site/xampp/iart.php?text=223E3Cscript3Ealertdocument.cookie3C/script3E Insufficient Anti-automation:...

CVE-2008-6878

CVE-2008-6878 is a directory traversal vulnerability in Zen Cart where remote attackers can cause arbitrary local file inclusion via a crafted _SESSION[language] value in admin/includes/languages/english.php on Zen Cart 1.3.8a, 1.3.8 and earlier when .htaccess is not supported. The issue affects ...

Vulnerabilities in XAMPP

Hello 3APA3A! I want to warn you about security vulnerabilities in XAMPP. These are Information Leakage, Cross-Site Request Forgery and SQL Injection vulnerabilities. Information Leakage: http://site/xampp/phpinfo.php During access to admin panel via Insufficient Authorization vulnerabilities it'...

Insufficient Authentication, XSS and SQL Injection vulnerabilities in XAMPP

Hello 3APA3A! I want to warn you about security vulnerabilities in XAMPP. These are Insufficient Authentication, Cross-Site Scripting and SQL Injection vulnerabilities. Insufficient Authentication: http://site/xampp/ There are such sites, where access to admin panel of XAMPP is not restricted by...

PowerUpload 2.4 Insecure Cookie

|| || | || o,7 || . o7 || 4||| ow, : / / . |-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=| | | | /' \ /'\ /\ \ /'\ /\ \ | | /, \ /\/\L\ \ \ \ ,/\ /\ \ \ \ / | | //\ \ /' \ /\ //\ Kings of injection | | // | | |...

WebVision 2.1 - 'news.php?n' SQL Injection

!/usr/bin/perl -w WebVision 2.1 n Remote SQL Injection Exploit Demo : http://www.webdev4all.nl/demowebsite/ Dork : Webdevelopment Tinx-IT Dork2: Copyright © 2006-2008 Tinx-IT and open your mind admin panel : www.target.com/path/cms Found by : Mr.tro0oqy E-mail : [email protected] special thank...

ZenPhoto 1.2.5 Blind SQL Injection

/ ZenPhoto 1.2.5 Completly Blind SQL Injection Exploit Requirements: magicquotes = ANY zenpage disables it anyway, ZenPage needs to be activated and have at least one news category What does this exploit let you do: The precoded functions I provided will allow you to extract the username and...

CVE-2009-2388

SQL injection vulnerability in admin/index.php in Opial 1.0 allows remote attackers to execute arbitrary SQL commands via the txtPassword parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2009-2340

SQL injection vulnerability in admin/index.php in Opial 1.0 allows remote attackers to execute arbitrary SQL commands via the txtUserName aka User Name parameter. NOTE: some of these details are obtained from third party information...

Sql injection

SQL injection vulnerability in admin/index.php in Opial 1.0 allows remote attackers to execute arbitrary SQL commands via the txtUserName aka User Name parameter. NOTE: some of these details are obtained from third party information...