SuperNET Shop 1.0 - SQL Injection

----------------------------------- SuperNET Shop v1.0 Remote SQL Ä°njection Vulnerability Discovered By : U238 ugur238 webpage : ugur238.org the end mail : [email protected] From : Turkey - Erzincan Script : http://www.aspindir.com/indir.asp?ID=2 Script alternativ :...

CoBaLT 0.1 Multiple Remote SQL Injection Vulnerabilities

No description provided by source. ---------------------------------------- CoBaLT v1.0 Remote SQL 陌njection Vulnerabiltiy Discovered : U238 Mail : [email protected] WebPage : http://ugur238.org The End Script: http://www.aspindir.com/indir.asp?ID=5414 Script Alternativ :...

Cobalt 0.1 - Multiple SQL Injections

Cobalt 0.1 - Multiple SQL Injections ---------------------------------------- CoBaLT v1.0 Remote SQL Ä°njection Vulnerabiltiy Discovered : U238 Mail : [email protected] WebPage : http://ugur238.org The End Script: http://www.aspindir.com/indir.asp?ID=5414 Script Alternativ :...

CoBaLT 0.1 Multiple Remote SQL Injection Vulnerabilities

Exploit for unknown platform in category web applications ======================================================== CoBaLT 0.1 Multiple Remote SQL Injection Vulnerabilities ======================================================== ---------------------------------------- CoBaLT v1.0 Remote SQL...

Cobalt 0.1 - Multiple SQL Injections

---------------------------------------- CoBaLT v1.0 Remote SQL Ä°njection Vulnerabiltiy Discovered : U238 Mail : [email protected] WebPage : http://ugur238.org The End Script: http://www.aspindir.com/indir.asp?ID=5414 Script Alternativ :...

Cross site request forgery (csrf)

cp06wifimnocifr.cgi in the admin panel on the Alice Gate 2 Plus Wi-Fi router does not verify authentication credentials, which allows remote attackers to disable Wi-Fi encryption via a certain request...

CVE-2008-1269

cp06wifimnocifr.cgi in the admin panel on the Alice Gate 2 Plus Wi-Fi router does not verify authentication credentials, which allows remote attackers to disable Wi-Fi encryption via a certain request...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in adminpanel.php in the Simon Elvery WP-Footnotes 2.2 plugin for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 wpfootnotescurrentsettingspriority, 2 wpfootnotescurrentsettingsstylerules, 3...

CVE-2008-0691

Multiple cross-site scripting XSS vulnerabilities in adminpanel.php in the Simon Elvery WP-Footnotes 2.2 plugin for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 wpfootnotescurrentsettingspriority, 2 wpfootnotescurrentsettingsstylerules, 3...

CVE-2008-0691

Multiple cross-site scripting XSS vulnerabilities in adminpanel.php in the Simon Elvery WP-Footnotes 2.2 plugin for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 wpfootnotescurrentsettingspriority, 2 wpfootnotescurrentsettingsstylerules, 3...

360-sql.txt

360 Web Manager CMS Remote SQL Injection Vulnerability Author: Ded MustD!e Site: http://www.360webmanager.com/ Google Dork: inurl:"IDFM=" "form.php" Exploit: http://site.com/form.php?IDM=7&IDSM=20&IDFM=-1+union+select+1,concatws0x3a,name,password,3,4...

360 Web Manager 3.0 (IDFM) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ====================================================== 360 Web Manager 3.0 IDFM SQL Injection Vulnerability ====================================================== 360 Web Manager CMS Remote SQL Injection Vulnerability Author: Ded MustD!e...

360 Web Manager 3.0 - IDFM SQL Injection

360 Web Manager 3.0 - IDFM SQL Injection 360 Web Manager CMS Remote SQL Injection Vulnerability Author: Ded MustD!e Site: http://www.360webmanager.com/ Google Dork: inurl:"IDFM=" "form.php" Exploit: http://site.com/form.php?IDM=7&IDSM=20&IDFM=-1+union+select+1,concatws0x3a,name,password,3,4...

360 Web Manager 3.0 - 'IDFM' SQL Injection

360 Web Manager CMS Remote SQL Injection Vulnerability Author: Ded MustD!e Site: http://www.360webmanager.com/ Google Dork: inurl:"IDFM=" "form.php" Exploit: http://site.com/form.php?IDM=7&IDSM=20&IDFM=-1+union+select+1,concatws0x3a,name,password,3,4...

aspphotogal-sql.txt

ASP Photo Gallery 1.0 - Multiple SQL Injection Vulnerabilities Date : 12-january-2008 Risk : Medium Vendor URL : http://www.matteobinda.com/apg.php Google Dork : "download this free gallery at matteobinda.com" : allinurl: imgbig.asp?id= Found By : Ruben Ventura Piña Trew Contact Info :...

ASP Photo Gallery 1.0 Multiple SQL Injection Vulnerabilities

Exploit for unknown platform in category web applications ============================================================ ASP Photo Gallery 1.0 Multiple SQL Injection Vulnerabilities ============================================================ ASP Photo Gallery 1.0 - Multiple SQL Injection...

ASP Photo Gallery 1.0 - Multiple SQL Injections

ASP Photo Gallery 1.0 - Multiple SQL Injections ASP Photo Gallery 1.0 - Multiple SQL Injection Vulnerabilities Date : 12-january-2008 Risk : Medium Vendor URL : http://www.matteobinda.com/apg.php Google Dork : "download this free gallery at matteobinda.com" : allinurl: imgbig.asp?id= Found By :...

XCMS <= 1.83 Remote Command Execution Exploit

No description provided by source. Name : XCMS = v1.83 Remote Command Execution Vulnerability Author : x0kster Email : [email protected] Site : ihteam.net Script Download : http://www.xcms.it Date : 28/12/2007 Dork : inurl:"mod=notizie" The xcms's footerthat is in "/dati/generali/footer.dtb" is...

XCMS 1.83 - Remote Command Execution

XCMS 1.83 - Remote Command Execution Name : XCMS So the xcms allow you to modify the footer throught a bugged page called cpie.php included in the admin panel. So let's take a look to the bugged code. So with a simple html form we can change the footer. Ex: /textarea input type=...

XCMS <= 1.83 Remote Command Execution Exploit

Exploit for unknown platform in category web applications ============================================= XCMS So the xcms allow you to modify the footer throught a bugged page called cpie.php included in the admin panel. So let's take a look to the bugged code. So with a simple html form we can...