9827 matches found
MyBB 1.4.2: Multiple Vulnerabilties
====================================================================== Advisory: MyBB 1.4.2 - Multiple Vulnerabilities Release Date: October 27 2008 Application: MyBB Version: MyBB 1.4.2 Platform: PHP Vendor URL: http://www.mybboard.net/ Authors: Kellanved, NeoThermic, Techie-Micheal...
mybbs142-multi.txt
====================================================================== Advisory: MyBB 1.4.2 - Multiple Vulnerabilities Release Date: October 27 2008 Application: MyBB Version: MyBB 1.4.2 Platform: PHP Vendor URL: http://www.mybboard.net/ Authors: Kellanved, NeoThermic, Techie-Micheal...
LoudBlog <= 0.8.0a (ajax.php) SQL Injection Vulnerability (auth)
No description provided by source. !/usr/bin/perl This Exploit requires a valid user name and password of an account regardless of the permissions Author: Xianur0 Affected: All Versions Bug: SQL Injection Doorks: allintext: "powered by LoudBlog" use HTTP::Request::Common qwPOST; use LWP::UserAgen...
WordPress WP Comment Remix Plugin <= 1.4.3 - SQL Injection
Because of this vulnerability in ajaxcomments.php, the attackers can execute arbitrary SQL commands via the "p" parameter. Solution Update the plugin...
drupalajax-sql.txt
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Drupal Ajax Checklist Module SQL Injection Vulnerability Discovery Date: Sept 15, 2008 Security risk: high Exploitable from: Remote Vulnerability: SQL Injection Discovered by: Justin C. Klein Keane Description Drupal http://drupal.org is a robust...
Drupal Module Ajax Checklist 5.x-1.0 - Multiple SQL Injections
source: https://www.securityfocus.com/bid/31384/info The Ajax Checklist module for Drupal is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in SQL queries. Exploiting these issues could allow an attacker to compromise t...
SA-2008-057 - Ajax Checklist - Multiple vulnerabilities
The Ajax Checklist module implements a filter that allows a user to include checkboxes into content. The module does not properly use Drupal's database API and inserts values supplied by users directly into queries. This can be exploited by malicious users with the "update ajax checklists"...
Drupal Module Ajax Checklist 5.x-1.0 - Multiple SQL Injections
Drupal Module Ajax Checklist 5.x-1.0 - Multiple SQL Injections source: https://www.securityfocus.com/bid/31384/info The Ajax Checklist module for Drupal is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in SQL queries...
Gregarius <= 0.5.4 rsargs[] Remote SQL Injection Vulnerability
Exploit for unknown platform in category web applications ============================================================== Gregarius populate" noti.unread & ". RSSMODEUNREADSTATE ." and i.cid= $cid", "", 0, 2, ITEMSORTHINTR...
Remote file inclusion
Multiple PHP remote file inclusion vulnerabilities in Orlando CMS 0.6 allow remote attackers to execute arbitrary PHP code via a URL in the GLOBALSpreloc parameter to 1 modules/core/logger/init.php and 2 AJAX/newscat.php...
vBulletin 3.7.1 PL1 and lower, vBulletin 3.6.10 PL1: XSS in modcp index
====================================================================== Advisory : XSS in modcp index Release Date : June 17th 2008 Application : vBulletin Version : vBulletin 3.7.1 PL1 and lower, vBulletin 3.6.10 PL1 and lower Platform : PHP Vendor URL : http://www.vbulletin.com/ Authors : Jessic...
Orlando CMS 0.6 - Remote File Inclusion
Orlando CMS classes Remote File Include Vulnerabilities Discovered by : Ciph3r MAIL : [email protected] SP TANX4 : Iranian hacker & Kurdish Security TEAM CLASS : remote download cms: http://sourceforge.net/project/showfiles.php?groupid=195547 C0de :...
Exploit for vBulletin "obscure" XSS (3.7.1 & 3.6.10)
====================================================================== Advisory : Exploit for vBulletin "obscure" XSS Release Date : June 13th 2008 Application : vBulletin Version : vBulletin 3.7.1 and lower, vBulletin 3.6.10 and lower Platform : PHP Vendor URL : http://www.vbulletin.com/ Authors...
SA-2008-032 - Magic Tabs - Arbitrary code execution
Magic Tabs provides an implementation of tabs filled via AJAX requests. Malicious users are able to run arbitrary PHP code via URL arguments to Magic Tabs as it does not provide a whitelist of callbacks. Versions affected Magic Tabs for Drupal 5.x prior to Magic Tabs 5.x-1.1 Drupal core is not...
ajaxframe-lfi.txt
:::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ dunatstrcpy.eu Ajax framework by www.zapatec.com Local File Include Vulnerability Script site: http://www.zapatec.com/ Vuln:...
Ajax framework (lang) Local File Inclusion Vulnerability
No description provided by source. :::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ dunatstrcpy.eu Ajax framework by www.zapatec.com Local File Include Vulnerability Script site:...
Ajax Framework - lang Local File Inclusion
Ajax Framework - lang Local File Inclusion :::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ dunatstrcpy.eu Ajax framework by www.zapatec.com Local File Include Vulnerability Script site:...
Ajax Framework - 'lang' Local File Inclusion
:::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ dunatstrcpy.eu Ajax framework by www.zapatec.com Local File Include Vulnerability Script site: http://www.zapatec.com/ Vuln:...
Ajax framework (lang) Local File Inclusion Vulnerability
Exploit for unknown platform in category web applications ======================================================== Ajax framework lang Local File Inclusion Vulnerability ======================================================== :::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$...
KwsPHP - Upload Remote Code Execution
KwsPHP - Upload Remote Code Execution -login -pass -email -file -id \n\n"; print "Url url of KwsPHP script : Ex : www.example.com/kwsphp/\n"; print "Login your account's login need to be allow to upload \n"; print "Pass account's password\n"; print "Email account's email\n"; print "File PHP scrip...