Instant Photo Gallery SQL inj. vuln.

Instant Photo Gallery SQL inj. vuln. Vuln. dicovered by : r0t Date: 30 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/instant-photo-gallery-sql-inj-vuln.html Vendor:http://www.instantphotogallery.com affected version:v1 and prior Product Description: Instant Photo Gallery is a new...

Jax Calendar 1.34 vuln.

Jax Calendar 1.34 vuln. Vuln. dicovered by : r0t Date: 29 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/jax-calendar-134-vuln.html Vendor:http://www.jtr.de/scripting/php/calendar/indexeng.html affected version:1.34 and prior Product Description: Jax Calendar is an online calendar...

Softbiz Resource Repository Script SQL vuln.

Softbiz Resource Repository Script SQL vuln. Vuln. dicovered by : r0t Date: 28 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/softbiz-resource-repository-script-sql.html Vendor:http://www.softbizscripts.com/resource-repository-script-features.php affected version: 1.1 and prior...

Enterprise Connector SQL inj. vuln

Enterprise Connector SQL inj. vuln. Vuln. dicovered by : r0t Date: 28 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/enterprise-connector-sql-inj-vuln.html Vendor:http://www.enterpriseheart.com/site/modules/news/ affected version:1.0.2 and prior Vuln. description: Input passed to...

JBB SQL inj. vuln.

JBB SQL inj. vuln. Vuln. dicovered by : r0t Date: 28 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/jbb-sql-inj-vuln.html Vendor:http://www.joelh.de/jbb/ affected version: jbb 0.9.9rc3 and prior Vuln. description: Input passed to the "nr" parameter in "topiczeigen.php", "forum"...

Babe Logger V2 Sql inj. vuln.

Babe Logger V2 Sql inj. vuln. Vuln. dicovered by : r0t Date: 28 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/babe-logger-v2-sql-inj-vuln.html Vendor:http://13scripts.com/ affected version: V2 and prior Product Description: This script is geared towards babe blog type sites but c...

Entergal MX V2.0 SQL vuln.

Entergal MX V2.0 SQL vuln. Vuln. dicovered by : r0t Date: 26 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/entergal-mx-v20-sql-vuln.html Vendor:www.entergal.com affected version: v2.0 and prior Product description: Entergal Directory MX for PHP is the ultimate solution for making...

HelpDeskPoint Free Help Desk Software SQL inj.

HelpDeskPoint Free Help Desk Software SQL inj. Vuln. dicovered by : r0t Date: 25 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/helpdeskpoint-free-help-desk-software.html Vendor:http://helpdeskpoint.com affected version: 2.38 and prior Product Description: HelpDeskPoint.com Welcom...

pdjk-support suite sql inj.

pdjk-support suite sql inj. Vuln. dicovered by : r0t Date: 25 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/pdjk-support-suite-sql-inj.html Vendor:http://support.pdjkeelan.com/ affected vesion: 1.1a retail edition and prior. Product Description: The pdjk-support suite is a full...

ActiveCampaign SupportTrio SQL inj.

ActiveCampaign SupportTrio SQL inj. Vuln. dicovered by : r0t Date: 24 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/activecampaign-supporttrio-sql-inj.html Vendor:http://www.activecampaign.com/supporttrio/ affected version: 1.4 and prior Vuln. description: Input passed to the...

Comdev Vote Caster 3.1 - index.php SQL Injection

Comdev Vote Caster 3.1 - index.php SQL Injection source: https://www.securityfocus.com/bid/15563/info Comdev Vote Caster is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successf...

Survey Wizard "sid" SQL injection vuln.

Survey Wizard "sid" SQL injection vuln. Vuln. dicovered by : r0t Date 23 nov. 2005 Original advisory:http://pridels.blogspot.com/2005/11/survey-wizard-sid-sql-injection-vuln.html Vendor:http://www.phplabs.com/ Product link:http://www.phplabs.com/scripts.php?script=Survey20Wizard affected version:...

Commodity Rentals 2.x "user_id" Sql inj.

Vuln. dicovered by : r0t Date: 23 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/commodity-rentals-2x-userid-sql-inj.html Vendor:http://www.commodityrentals.com/ affected version: 2.x and prior Product Description: CommodityRentals is the most comprehensive Online Rental Business...

PT-2005-4445 · Xmb · Xmb

Name of the Vulnerable Software and Affected Versions: XMB version 1.9.2 Description: The issue allows remote attackers to obtain the installation path. This is achieved by providing an invalid fid parameter in a newthread action to the post.php file. Recommendations: For XMB version 1.9.2,...

PT-2005-4372 · Mambo · Mambo

Name of the Vulnerable Software and Affected Versions: Mambo versions 4.5.2 through 4.5.2.3 Description: The issue allows remote attackers to obtain the installation path of the application via a URL that causes the application to return an error. Recommendations: For Mambo versions 4.5.2 through...

Walla TeleSite 3.0 - ts.exe?sug SQL Injection

Walla TeleSite 3.0 - ts.exe?sug SQL Injection source: https://www.securityfocus.com/bid/15419/info Walla TeleSite is prone to multiple input validation vulnerabilities. These are due to a lack of proper sanitization of user-supplied input. Walla TeleSite is prone to information and path disclosur...

Webhints 1.03 - Remote Command Execution (Perl) (3)

!/usr/bin/perl -w emanuele@blackbox:$ perl M4DR007-hints.pl www.madroot.edu.ms Security Group WebHints Software hints.cgi Remote Command Execution Vulnerability Affected version: = all code by MadSheep 06.11.2005 hostname: localhost port: default: 80 80 path: /cgi-bin/ /cgi-bin/ your ip for rever...

E-Cart <= 1.1 (index.cgi) Remote Command Execution Exploit

Exploit for cgi platform in category web applications ========================================================== E-Cart ; print "port: default: 80\n"; chomp$port=; $port=80 if $port =/\D/ ; $port=80 if $port eq "" ; print "path: /cgi-bin/ecart/\n"; chomp$path=; print "your ip for reverse connect:...

miranda_popupplus_overflow.txt

Title: PopUp Plus plugin for Miranda Instant Messenger Buffer Overflow Risk: High Date: 06-04-2005 Publisher: m0fo editor at sec.org.il Vendor: zazoo zazoo at ua.fm URL: http://miranda-im.org/download/details.php?action=viewfile&id=1170. Miranda Instant Messenger is application that provides...

Zoom Media Gallery 2.1.2 - 'index.php' SQL Injection

source: https://www.securityfocus.com/bid/13094/info zOOm Media Gallery is reportedly affected by a remote SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result ...