133 matches found
Discuz! Underworld career plugin injection vulnerability-vulnerability warning-the black bar safety net
Plugin version: 2.2 2.5 Register a forum ID IE submit the following code blackband. php? mode=yule&action=enjoy&id=2 and 1=2 union select 1,0x2D312C67726F757069643D312C61646d696e69643d31,3,4/ Promoted to administrator discuz7. 0. 0 background to give webshell method If it is discuz6. 0 the...
Nwahy Dir 2.1 Change Admin Password
......................"; else /code - Works On : 1. Nwahy Articles v1 2. Nwahy scripts v1 3. Nwahy book v1 - Note : Path to Control Panel "/admincp/" . / errorreporting0; iniset"maxexecutiontime",0; iniset"defaultsockettimeout",5; function Usage print "\n\n"; print...
MyEgy Script SQL Injection
MyEgy Explo!t ..style1 text-align: center; function doitsi,co forvar n =1;n My Egy Explo!t By : Karar alShaMi & Sheko Victim: input name="site" type="text" style="width: 253px" value="...
Mlffat 2.1 (Auth Bypass / Cookie) SQL Injection Vulnerability
Exploit for unknown platform in category web applications ============================================================= Mlffat 2.1 Auth Bypass / Cookie SQL Injection Vulnerability ============================================================= MLFFAT 2.1 - insecure Cookie Handling Buy:...
Cross site scripting
Cross-site scripting XSS vulnerability in the hookcntrlrerroroutput function in modules/page/hooks/listeners.php in the admincp component in TangoCMS 2.2.x aka Eagle before 2.2.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: some of these details ar...
CVE-2009-0862
Cross-site scripting XSS vulnerability in the hookcntrlrerroroutput function in modules/page/hooks/listeners.php in the admincp component in TangoCMS 2.2.x aka Eagle before 2.2.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: some of these details ar...
CVE-2009-0862
TangoCMS (admincp) is affected by a cross-site scripting (XSS) vulnerability in hook_cntrlr_error_output() inside modules/page/hooks/listeners.php, affecting TangoCMS 2.2.x prior to 2.2.4. The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. OpenVAS re...
CVE-2008-6256
SQL injection vulnerability in admincp/admincalendar.php in vBulletin 3.7.3.pl1 allows remote authenticated administrators to execute arbitrary SQL commands via the holidayinforecurring parameter, a different vector than CVE-2005-3022...
Sql injection
Multiple SQL injection vulnerabilities in vBulletin 3.7.4 allow remote authenticated administrators to execute arbitrary SQL commands via the 1 answer parameter to admincp/verify.php, 2 extension parameter in an edit action to admincp/attachmentpermission.php, and the 3 iperm parameter to...
[waraxe-2008-SA#069] - Multiple Sql Injection in vBulletin 3.7.4
waraxe-2008-SA069 - Multiple Sql Injection in vBulletin 3.7.4 =============================================================================== Author: Janek Vind "waraxe" Date: 17. November 2008 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-69.html Description of vulnerable software:...
waraxe-2008-SA069.txt
waraxe-2008-SA069 - Multiple Sql Injection in vBulletin 3.7.4 =============================================================================== Author: Janek Vind "waraxe" Date: 17. November 2008 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-69.html Description of vulnerable software:...
My Gaming Ladder <= 7.5 (ladderid) SQL Injection Vulnerability
Exploit for unknown platform in category web applications ============================================================== My Gaming Ladder = 7.5 ladderid SQL Injection Vulnerability ==============================================================...
belong-bypass.txt
Name : Belong Site Builder 0.1b Bypass Admincp Download From : http://www.belongsoftware.co.uk/ Or Direct Link : http://www.belongsoftware.co.uk/sitebuilderv01beta.zip Found By : RoMaNcYxHaCkEr We Are H-T TeaM Houssamix - ToXiC Home Page : Not Yet : Tryag.cc/cc No-Hack.net V99x.com/vb...
IPTBB <= 0.5.4 (viewdir id) Remote Sql Injection Vulnerability
No description provided by source. --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg --------------------------------------------------------------- Remote Sql Injection ---------------------------------------------------------------...
CVE-2007-4412
Multiple cross-site scripting XSS vulnerabilities in Headstart Solutions DeskPRO 3.0.2 allow remote authenticated users to inject arbitrary web script or HTML via unspecified parameters to 1 techs.php, 2 ticketcategory.php, 3 ticketpriority.php, 4 ticketworkflow.php, 5 ticketescalate.php, 6...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in Headstart Solutions DeskPRO 3.0.2 allow remote authenticated users to inject arbitrary web script or HTML via unspecified parameters to 1 techs.php, 2 ticketcategory.php, 3 ticketpriority.php, 4 ticketworkflow.php, 5 ticketescalate.php, 6...
Code injection
Direct static code injection vulnerability in admincp/userhelp.php in Headstart Solutions DeskPRO 3.0.2 allows remote authenticated users to inject arbitrary PHP code into an unspecified file via a newentry value in the do parameter...
Sql injection
SQL injection vulnerability in admincp/attachment.php in Jelsoft vBulletin before 3.6.6 allows remote authenticated administrators to execute arbitrary SQL commands via the "Attached After" field GPC'search''datelineafter' variable, a related issue to CVE-2007-1573...
CVE-2007-2911
SQL injection vulnerability in admincp/attachment.php in Jelsoft vBulletin before 3.6.6 allows remote authenticated administrators to execute arbitrary SQL commands via the "Attached After" field GPC'search''datelineafter' variable, a related issue to CVE-2007-1573...
CVE-2007-2911
SQL injection vulnerability in admincp/attachment.php in Jelsoft vBulletin before 3.6.6 allows remote authenticated administrators to execute arbitrary SQL commands via the "Attached After" field GPC'search''datelineafter' variable, a related issue to CVE-2007-1573...