Sql injection

SQL injection vulnerability in x/login in JungleScripts Ajax Short Url Script allows remote attackers to execute arbitrary SQL commands via the username parameter...

CVE-2009-4727

CVE-2009-4727 details a SQL injection in JungleScripts Ajax Short Url Script, affecting the x/login path via the username parameter. The Vulnerability is described as allowing remote attackers to execute arbitrary SQL commands, signaling a potentially high impact. The NVD entry assigns a CVSS v2 ...

CVE-2009-4727

SQL injection vulnerability in x/login in JungleScripts Ajax Short Url Script allows remote attackers to execute arbitrary SQL commands via the username parameter...

CSICE Cross Site Request Forgery / Cross Site Scripting

http://www.csice.org/ Suffers from XSS and CSRF cross site scripting and cross site request forgery attacks. The vulnerability lies in the Post comment filelds in the following page move to this page 'only for authenticated user' http://www.csice.org/student/subjects.html and choose a subject and...

CSICE XSS and CSRF Vulnerability

Exploit for unknown platform in category web applications ================================ CSICE XSS and CSRF Vulnerability ================================ http://www.csice.org/ Suffers from XSS and CSRF cross site scripting and cross site request forgery attacks. The vulnerability lies in the...

LiveStreet v0.2 Xss Vulnerability

Exploit for unknown platform in category web applications ================================= LiveStreet v0.2 Xss Vulnerability ================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1...

UBUNTU-CVE-2010-0288

A typo in the administrator permission check in the ACL Manager plugin plugins/acl/ajax.php in DokuWiki before 2009-12-25b allows remote attackers to gain privileges and access closed wikis by editing current ACL statements, as demonstrated in the wild in January 2010...

Multiple vulnerabilities in third party extensions

Several vulnerabilities have been found in the following third party TYPO3 extensions: Event Manager eventmanagement, Game Article DB gamearticledb, Simple career mlcareer, Surprise Calendar mlsurprisecalendar, Search Api Ajax Google searchajaxgoogle, Download Manager sprdownloadmanager Release...

Ajax Manset Haber Sistemi 3 Administrative Bypass

============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | // \ || || // \ || || ============================================================================== » Note : LionTurk.Turkblog.com Resmi Web Sitem :D...

dokuwiki 2009-12-25 - Multiple Vulnerabilities

Reported: 13-01-2010 Patched: 13-01-2010 Released: 14-01-2010 Vulnerable version : http://www.splitbrain.org/media/projects/dokuwiki/dokuwiki-2009-12-25.tgz Patched version: http://www.splitbrain.org/media/projects/dokuwiki/dokuwiki-2009-12-25b.tgz Author: whitesheep Contact: [email protected]...

Max's AJAX File Uploader Shell Upload

| | Max's AJAX File Uploader Remote File Upload Vulnerability | | Author : ViRuSMaN | | Contact : [email protected] | | Home : Islam-Attack.CoM , HackTeach.OrG | | Download : http://www.ajaxf1.com/download.html?dl=12 | | | | Exp : | | 1- Upload Your Shell yourshell.php | | 2- Pwd Your Shell...

Maxs AJAX File Uploader Remote File Upload Vulnerability

No description provided by source. | | Max's AJAX File Uploader Remote File Upload Vulnerability | | Author : ViRuSMaN | | Contact : [email protected] | | Home : Islam-Attack.CoM , HackTeach.OrG | | Download : http://www.ajaxf1.com/download.html?dl=12 | | | | Exp : | | 1- Upload Your Shell...

Maxs AJAX File Uploader - Arbitrary File Upload

Maxs AJAX File Uploader - Arbitrary File Upload | | Max's AJAX File Uploader Remote File Upload Vulnerability | | Author : ViRuSMaN | | Contact : [email protected] | | Home : Islam-Attack.CoM , HackTeach.OrG | | Download : http://www.ajaxf1.com/download.html?dl=12 | | | | Exp : | | 1- Upload Your She...

Maxs AJAX File Uploader Remote File Upload Vulnerability

Exploit for unknown platform in category web applications ======================================================== Maxs AJAX File Uploader Remote File Upload Vulnerability ======================================================== | | Max's AJAX File Uploader Remote File Upload Vulnerability | |...

Maxs AJAX File Uploader - Arbitrary File Upload

| | Max's AJAX File Uploader Remote File Upload Vulnerability | | Author : ViRuSMaN | | Contact : [email protected] | | Home : Islam-Attack.CoM , HackTeach.OrG | | Download : http://www.ajaxf1.com/download.html?dl=12 | | | | Exp : | | 1- Upload Your Shell yourshell.php | | 2- Pwd Your Shell...

CVE-2009-4089

telepark.wiki 2.4.23 and earlier allows remote attackers to bypass authorization and 1 delete arbitrary pages via a modified pageID parameter to ajax/deletePage.php or 2 delete arbitrary comments via a modified pageID parameter to ajax/deleteComment.php...

CVE-2009-4090

CVE-2009-4090 affects Telepark.wiki prior to or equal to 2.4.23. The flaw is an unrestricted file upload in ajax/addComment.php that allows an attacker to upload a file with a NULL byte in the name, enabling remote code execution. Multiple connected sources (NVD entry, OpenVAS NASL, CVE mirrors) ...

CVE-2009-4089

Telepark.wiki versions 2.4.23 and earlier are affected. Affected component: ajax/deletePage.php (modified pageID) allows deletion of arbitrary pages; ajax/deleteComment.php (modified pageID) allows deletion of arbitrary comments. Root cause: insufficient access control in Telepark.wiki web endpoi...

Telepark Wiki 2.4.23 XSS / Code Execution

Abysssec Inc Public Advisory Title : Telepark Wiki Multiple Remote Vulnerabilities Affected Version : ",$POST'wikiFileName',strfileuploaded.".\n"; for bypass you can use : image.jpg%00.php note : use group variable for changing directory to another writeable directory FIXED: line 22: if...

Telepark Wiki v2.4.23 Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ===================================================== Telepark Wiki v2.4.23 Multiple Remote Vulnerabilities ===================================================== Title : Telepark Wiki Multiple Remote Vulnerabilities Affected Version :...