Sql injection

SQL injection vulnerability in admin/memberlist.php in Easebay Resources Paypal Subscription Manager allows remote attackers to execute arbitrary SQL commands via the keyword parameter...

CVE-2007-0402

Cross-site scripting XSS vulnerability in admin/editmember.php in Easebay Resources Paypal Subscription Manager allows remote attackers to inject arbitrary web script or HTML via the username parameter...

CVE-2007-0403

SQL injection vulnerability in admin/memberlist.php in Easebay Resources Paypal Subscription Manager allows remote attackers to execute arbitrary SQL commands via the keyword parameter...

CVE-2007-0191

Cross-site scripting XSS vulnerability in admin.php in MKPortal allows remote attackers to inject arbitrary web script or HTML via two certain fields in a contentsnew operation in the adcontents section...

AShop Deluxe 4.5 - 'shipping.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/21845/info AShop Deluxe and AShop Administration Panel are prone to multiple cross-site scripting vulnerabilities because they fail to sufficiently sanitize user-supplied input data. An attacker may leverage these issues to have arbitrary script code...

CVE-2006-6815

Multiple cross-site scripting XSS vulnerabilities in DMXReady Secure Login Manager 1.0 allow remote authenticated administrators to inject arbitrary web script or HTML via unspecified parameters to 1 setpreferences.asp, 2 sendpasswordpreferences.asp, and 3 SecureLoginManager/list.asp in the...

CVE-2006-6816

Multiple SQL injection vulnerabilities in DMXReady Secure Login Manager 1.0 allow remote attackers to execute arbitrary SQL commands via unspecified parameters to 1 setpreferences.asp, 2 sendpasswordpreferences.asp, and 3 SecureLoginManager/list.asp in the Local-Admin Panel; 4 the sent parameter ...

CVE-2006-6815

Multiple cross-site scripting XSS vulnerabilities in DMXReady Secure Login Manager 1.0 allow remote authenticated administrators to inject arbitrary web script or HTML via unspecified parameters to 1 setpreferences.asp, 2 sendpasswordpreferences.asp, and 3 SecureLoginManager/list.asp in the...

CVE-2006-6816: Undefined Security Weakness

Multiple SQL injection vulnerabilities in DMXReady Secure Login Manager 1.0 allow remote attackers to execute arbitrary SQL commands via unspecified parameters to 1 setpreferences.asp, 2 sendpasswordpreferences.asp, and 3 SecureLoginManager/list.asp in the Local-Admin Panel; 4 the sent parameter ...

CVE-2006-6815: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in DMXReady Secure Login Manager 1.0 allow remote authenticated administrators to inject arbitrary web script or HTML via unspecified parameters to 1 setpreferences.asp, 2 sendpasswordpreferences.asp, and 3 SecureLoginManager/list.asp in the...

chatwm10-sql.txt

LiderHack.Org & BhhGroup.Org & Bilgi-Yonetimi.Org.Tr script name : chatwm V1.0 Script Download : http://maxiasp.com/scyorum.asp?scno=225 Risk : High GoogLe Dork : chatwm Found By : ShaFuck31 Thanks : | Dekolax | The RéD | CyBorG | DesquneR | f1r3b0y | BaZaL | SaboTaqe | ST@ReXT | BLaSTER | B1G B0...

phplive322-xss.txt

PHP Live! © OSI Codes Inc. enables live help and live customer support communication directly from your website. With PHP Live!, you can provide one-on-one chat assistance in real-time, answer visitor questions and add that extra human touch to your website. The application if full of xss holes...

Chatwm V1.0 SqL Injection Vuln.

LiderHack.Org & BhhGroup.Org & Bilgi-Yonetimi.Org.Tr script name : chatwm V1.0 Script Download : http://maxiasp.com/scyorum.asp?scno=225 Risk : High GoogLe Dork : chatwm Found By : ShaFuck31 Thanks : | Dekolax | The RйD | CyBorG | DesquneR | f1r3b0y | BaZaL | SaboTaqe | ST@ReXT | BLaSTER | B1G B0...

Doğantepe Ziyareti Defteri (tr) Sql Injection Vuln.

LiderHack.Org & BhhGroup.Org script name : Doantepe Ziyaretзi Defteri tr Script Download : http://aspindir.com/Goster/4485 Risk : High Found By : ShaFuck31 Thanks : | Dekolax | The RйD | CyBorG | DesquneR | f1r3b0y | BaZaL | SaboTaqe | ST@ReXT | BLaSTER | B1G B0SS | UNiKnoX | Vulnerable file :...

dudirBypass.txt

DUdirectory Admin Panel SQL Injection Download: http://www.duware.com/zips/productsnew/DUdirectory31.zip Search:"DUdrirectory" DUdirectory/admin/default.asp User:'or' Pass:'or' Testing; http://www.euconvention.be/DUdirectory/admin/default.asp...

DUdirectory Admin Panel SQL Injection

DUdirectory Admin Panel SQL Injection Download: http://www.duware.com/zips/productsnew/DUdirectory31.zip Search:"DUdrirectory" DUdirectory/admin/default.asp User:'or' Pass:'or' Testing; http://www.euconvention.be/DUdirectory/admin/default.asp...

aspee.txt

LiderHack.Org Script name : Aspee Ziyaretçi Defteri tr Script Download : http://aspindir.com/goster/4575 Risk : High Found By : ShaFuck31 Thanks : Dekolax , DesquneR , ST@ReXT , SaboTaqe Vulnerable file : giris.asp Manual connect : Go to Admin Panel Login ----- http://victim.com/path to...

Metyus Okul Ynetim Sistemi V.1.0 (tr) Sql injection Vuln.

LiderHack.Org script name : Metyus Okul Ynetim Sistemi V.1.0 tr Script Download : http://www.maxiasp.com/scriptler.asp?ktno=1 Risk : High Found By : ShaFuck31 Thanks : Dekolax , DesquneR , ST@ReXT , SaboTaqe Vulnerable file : uyegirisislem.asp Manual connect : Go to Admin Panel Login -----...

Aspee Ziyareti Defteri (tr) Sql injection Vuln.

LiderHack.Org Script name : Aspee Ziyaretзi Defteri tr Script Download : http://aspindir.com/goster/4575 Risk : High Found By : ShaFuck31 Thanks : Dekolax , DesquneR , ST@ReXT , SaboTaqe Vulnerable file : giris.asp Manual connect : Go to Admin Panel Login ----- http://victim.com/path to...

UltraSite 1.0 (update.asp) Remote SQL Injection Vulnerability

Title : UltraSite 1.0 update.asp Remote SQL Injection Vulnerability Author : ajann Admin Panel= http://target/path//update.asp?id=SQL Example: //update.asp?id=-120union20select200,0,0,username,password,0,0,0,0,0,0,0,0,020from20members20where20id20like207 """"""""""""""""""""" ajann,Turkey ... Im...