CVE-2007-6127

Multiple SQL injection vulnerabilities in project alumni 1.0.9 and earlier allow remote attackers to execute arbitrary SQL commands via the year parameter to 1 view.page.inc.php, which is reachable through a view action to index.php; or 2 the year parameter to news.page.inc.php, which is reachabl...

projectalumni-sqlxss.txt

project-alumni sql injection & xss author : tomplixsee [email protected] -------------------------------------------------------------------------- affected software version : project alumni 1.0.9, 1.0.8, or lower?? download : https://sourceforge.net/projects/project-alumni/ vulnerability...

project alumni <= 1.0.9 Remote XSS / SQL Injection Vulnerability

No description provided by source. project-alumni sql injection & xss author : tomplixsee [email protected] ------------------------------------------------------------------------------------------------------------- affected software version : project alumni v1.0.9, v1.0.8, or lower??...

project alumni <= 1.0.9 Remote XSS / SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================ project alumni = 1.0.9 Remote XSS / SQL Injection Vulnerability ================================================================ project-alumni sql injection & xss author :...

project alumni 1.0.9 - Cross-Site Scripting SQL Injection

project alumni 1.0.9 - Cross-Site Scripting SQL Injection project-alumni sql injection & xss author : tomplixsee [email protected] ------------------------------------------------------------------------------------------------------------- affected software version : project alumni v1.0.9,...

project alumni 1.0.9 - Cross-Site Scripting / SQL Injection

project-alumni sql injection & xss author : tomplixsee [email protected] ------------------------------------------------------------------------------------------------------------- affected software version : project alumni v1.0.9, v1.0.8, or lower?? download :...

MS Internet Explorer Object Tag Exploit (MS03-020)

No description provided by source. !/usr/bin/perl Proof of concept exploit on IE 5.x - 6.x by Alumni IE-Object longtype dynamic call oferflow url://$shellcode'/'x48jmp %ptrsh the flaw actually exists in URLMON.DLL when converting backslashes to wide char, this can be seen on stack dump near...