Tainos Webdesign (All Scripts) - SQL Injection / Cross-Site Scripting / HTML Injection

------------------------------------------------------------------------------------------- Tainos Webdesign All Scripts SQL/XSS/HTML Injection Vulnerability ------------------------------------------------------------------------------------------- Author: CoBRa21 Mail: [email protected]...

CVE-2010-1733

Multiple SQL injection vulnerabilities in OCS Inventory NG before 1.02.3 allow remote attackers to execute arbitrary SQL commands via 1 multiple inventory fields to the search form, reachable through index.php; or 2 the "Software name" field to the "All softwares" search form, reachable through...

Compgamer SQL Injection Vulnerability

Exploit for php platform in category web applications ===================================== Compgamer SQL Injecti0n Vulnerability ===================================== ALLH AKBAR Exploit Title: Compgamer SQL Injecti0n Vulnerability -::DESCRIPTION Date: 4 de mayo de 2010 -::DATE Author: JM511 Emai...

Clicksor - SQL Injection

ALLH AKBAR Exploit Title: Clicksor SQL Injecti0n Vulnerability -::DESCRIPTION Date: 4 de mayo de 2010 -::DATE Author: JM511 EmaiL : [email protected] , [email protected] -::AUTHOR From :\ Saudi Arabia , Greetz to: GoLdeN-Z3r0 , Dr.Exe , Sec-q8 , Shi5 aL Hacker , SaFa7 al3nzee , BlacK DeaTh Home :...

Clicksor - SQL Injection

Clicksor - SQL Injection ALLH AKBAR Exploit Title: Clicksor SQL Injecti0n Vulnerability -::DESCRIPTION Date: 4 de mayo de 2010 -::DATE Author: JM511 EmaiL : [email protected] , [email protected] -::AUTHOR From :\ Saudi Arabia , Greetz to: GoLdeN-Z3r0 , Dr.Exe , Sec-q8 , Shi5 aL Hacker , SaFa7 al3nz...

All browsers - Crash

All browsers - Crash =============================== All browsers 0day Crash Exploit =============================== + Discovered By: Inj3ct0r Team @Title: All browsers 0day Crash Exploit @Site: http://site.securityspl0its.com/ - http://forum.securityspl0its.com/ - http://inj3ct0r.com/ @Exploit f...

All Browsers - Long Unicode DoS PoC

Exploit for multiple platform in category dos / poc =================================== All Browsers - Long Unicode DoS PoC =================================== DrIDE - All Browsers - Long Unicode DoS PoC function boom //The number of strings increases the amount of memory consumed, quicker crash...

Joomla Table JX Cross Site Scripting

Exploit Title: Joomla Component Table JX XSS Vulnerabilities Date: 01.05.2010 Author: Valentin Category: webapps/0day Version: Tested on: CVE : Code : :::::::::::::::::::::::::::::::::::::: 0x1 :::::::::::::::::::::::::::::::::::::: General Information Advisory/Exploit Title = Joomla Component...

All browsers - Crash

=============================== All browsers 0day Crash Exploit =============================== + Discovered By: Inj3ct0r Team @Title: All browsers 0day Crash Exploit @Site: http://site.securityspl0its.com/ - http://forum.securityspl0its.com/ - http://inj3ct0r.com/ @Exploit for all browsers Teste...

phpegasus 'config.php' Arbitrary File Upload Vulnerability

phpegasus is prone to a vulnerability that lets attackers upload arbitrary files because the application fails to adequately sanitize user-supplied input. An attacker can exploit this vulnerability to upload arbitrary code and run it in the context of the webserver process. This may facilitate...

InfoLink Blog (XSS/URL Redirecting) Multiple Vulnerability

Exploit for php platform in category web applications ========================================================== InfoLink Blog XSS/URL Redirecting Multiple Vulnerability ==========================================================...

mysqldumper Local File Vulnerability

Exploit for php platform in category web applications ==================================== mysqldumper Local File Vulnerability ==================================== mysqldumper Local File Vulnerability Software : all version Software site: : http://www.mysqldumper.net/ Author : tetikci $ miktolyn...

SafeSHOP 1.5.6 - Cross-Site Scripting / Multiple Cross-Site Request Forgery Vulnerabilities

Exploit Title: SafeSHOP | www.DigitalWhisper.co.il Software Link: safeshop.co.il Version: = 1.5.6 Tested on: ASP Cross Site Scripting Cross-Site Scripting attacks are a type of injection problem, in which malicious scripts are injected into the otherwise benign and trusted web sites. Cross-site...

CVE-2009-4747

PHP remote file inclusion vulnerability in public/code/cphtml2xhtmlbasic.php in All In One Control Panel AIOCP 1.4.001 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter, a different vector than CVE-2009-3220...

post Card - catid SQL Injection

post Card - catid SQL Injection post Card catid Remote SQL Injection Vulnerability Author: Hussin X Home : www.iqs3cur1ty.com & www.iq-ty.com MaiL : [email protected] script : http://webbdomain.com/php/postcarden/index2.php script : http://webbdomain.com/php/postcardir/index2.php version : a...

eGroupWare 1.6.002 and eGroupWare premium line 9.1 - Multiple Vulnerabilities

Advisory Name: Remote Command Execution in EGroupware Vulnerability Class: Remote Command Execution Release Date: 2010-03-09 Affected Applications: Confirmed in EGroupware 1.4.001+.002 and 1.6.001+.002. EGroupware Premium Line 9.1 and 9.2 is also affected. Other versions may also be affected...

LDF (Default.asp) Sql Injection Vulnerability

Product : LDF vendor : www.ldf.22.cn Vulnerable Versions : All Default.asp Page has an issue on validating "Page" parameter , It could be exploited by attacker & attacker can inject arbitrary Sql Commands http://www.example.com/ldf path/default.asp?page=SQL COMMAND...

Vox blog Cross Site Scripting Vulnerability

Exploit for unknown platform in category web applications =========================================== Vox blog Cross Site Scripting Vulnerability =========================================== Exploit Title: Vox blog Cross Site Scripting Vulnerability Author: Phenom Software Link: Version: Tested on...

Vito CMS - SQL Injection

.:. Author : [email protected] .:. Contact: [email protected], [email protected] .:. Home : www.evilzone.org .:. Script : Vito CMS .:. Info link: http://kameleon-lab.com/vito-cms.php .:. Versions: ALL .:. Bug Type : Sql Injection .:. Risk: High .:. Tested on : Windows & Linux === Exploit === ....

Arab Network Tech CMS SQL Injection

:::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: Exploit Title : Arab Network Tech. ANT CMS SQL Injection Author : Tr0y-x Script Site : www.antpage.com Version : All Versions Tested on : Windows & Linux Dork : inurl:apages.php My home : WwW.SeC-WaR.CoM...