4228 matches found
CVE-2010-4905: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in articledetails.php in Softbiz Article Directory Script allows remote attackers to execute arbitrary SQL commands via the sbizid parameter...
Jarida 1.0 - Multiple Vulnerabilities
Jarida 1.0 - Multiple Vulnerabilities Exploit Title: Jarida 1.0 SQL Injection Date : 26 September 2011 Author : Ptrace Security Gianni Gnesa gnix Contact : researchatptrace-securitydotcom Software Link: http://sourceforge.net/projects/jarida/ Version : 1.0 Tested on : CentOS 5.6 01...
Jarida 1.0 Multiple Vulnerabilities
Exploit for php platform in category web applications Exploit Title: Jarida 1.0 SQL Injection Date : 26 September 2011 Author : Ptrace Security Gianni Gnesa gnix Contact : researchatptrace-securitydotcom Software Link: http://sourceforge.net/projects/jarida/ Version : 1.0 Tested on : CentOS 5.6 0...
M Number of the article management system of 0day-vulnerability warning-the black bar safety net
!-- include file="include/head. asp" - 1 4.& lt;!-- include file="include/ubb2html. asp" - 1 5.& lt;% 1 6. Dim...
WordPress Plugin iCopyright(R) Article Tools 1.1.4 - SQL Injection
WordPress Plugin iCopyrightR Article Tools 1.1.4 - SQL Injection Exploit Title: WordPress iCopyrightR Article Tools plugin getresults"SELECT FROM $posttable JOIN $usertable on $posttable.postauthor=$usertable.ID WHERE $posttable.ID = '$icopyrightpostid'";...
WordPress iCopyright Article Tools 1.1.4 SQL Injection
Exploit Title: WordPress iCopyrightR Article Tools plugin getresults"SELECT FROM $posttable JOIN $usertable on $posttable.postauthor=$usertable.ID WHERE $posttable.ID = '$icopyrightpostid'";...
WordPress iCopyright(R) Article Tools plugin <= 1.1.4 SQL Injection
Exploit for php platform in category web applications Exploit Title: WordPress iCopyrightR Article Tools plugin getresults"SELECT FROM $posttable JOIN $usertable on $posttable.postauthor=$usertable.ID WHERE $posttable.ID = '$icopyrightpostid'"; 0day.today 2018-01-03...
WordPress Plugin iCopyright(R) Article Tools 1.1.4 - SQL Injection
Exploit Title: WordPress iCopyrightR Article Tools plugin getresults"SELECT FROM $posttable JOIN $usertable on $posttable.postauthor=$usertable.ID WHERE $posttable.ID = '$icopyrightpostid'";...
AlstraSoft E-Friends Social Networking Script Cross Site Scripting
Exploit Title: AlstraSoft E-Friends Social Networking Script Stored XSS Date: 2011 Author: Eyup CELIK Version: All Version Tested on: All versions are Vulnerability ISSUE Cross Site Scripting can be done using the command input Vulnerable Page: Article Modules Exploit: "/ POC:...
CentOS Update for httpd CESA-2010:0168 centos5 i386
The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Linux kernel 3.0 - 343 changes made by Microsoft developer K. Y. Srinivasan
Linux kernel 3.0 - 343 changes made by Microsoft developerK. Y. Srinivasan Linux Kernal Change Logs figures were published on Thursday in an LWN.net article : 343 Changes made by Microsoft developer K. Y. Srinivasan 1,085 change provided by independent developers Red Hat provided 1,000 Changes in...
vBulletin CMS 4.1.1 Recent Articles Cross Site Scripting
============================================================ vBulletin 4 CMS Recent Articles widget XSS Vulnerability ============================================================ Title : vBulletin 4 CMS Recent Articles widget XSS Vulnerability Software : http://www.vbulletin.com Tested on : versi...
NO. 0 0 1 school website management system Build 1 1 0 6 2 8 injection vulnerability-vulnerability warning-the black bar safety net
NO. 0 0 1 school website management system modules: 1. Administrator information:website basic information setting, the principal mailbox, etc., database backup,user management, departments and permissions management, etc. 2. School profile:the level of classification, you can add a campus...
Fire article back office management system V2. 1 cookie injection-vulnerability warning-the black bar safety net
Publishing author: dark-on formula Vulnerability type: cookie injection Vulnerability Description: The fire article back office management system V2. 1 program using a common anti-injection procedures, only the post get to filter lead to a cookie injection vulnerability. Vulnerability analysis:...
dedecms 5.7 the background to get SHELL vulnerability-vulnerability warning-the black bar safety net
Vulnerability description: dedecms 5.7 teach the previous version has been greatly improved, fix for 5. 6 The following version serious uploaded 0day; quite tasteless, the premise is to have background permissions. Since the system comes with a file Manager Plug-In does not filter the file upload...
DiscuzX1.5 门户管理权限SQL注入漏洞
简要描述： DiscuzX1.5 门户管理权限SQL注入漏洞 详细说明： DiscuzX1.5 门户管理权限SQL注入漏洞 详细说明： source\include\portalcp\portalcparticle.php //90行 if$G'gpconver' $converfiles = unserializestripcslashes$G'gpconver'; $setarr'pic' = $converfiles'pic'; $setarr'thumb' = $converfiles'thumb'; $setarr'remote' = $converfiles'remote';...
PHP-Nuke 8.x <= "chng_uid" Blind SQL Injection Vulnerability
PHP-Nuke is a Web Portal System or content management system. The goal of PHP-Nuke is to have an automated web site to distribute news and articles with users system. Each user can submit comments to discuss the articles. Main features include: web based admin, surveys, top page, access stats pag...
DiscuzX1.5 有权限SQL注入BUG
简要描述： DiscuzX1.5 有权限SQL注入BUG 详细说明： source\include\portalcp\portalcparticle.php //90行 if$G'gpconver' $converfiles = unserializestripcslashes$G'gpconver'; $setarr'pic' = $converfiles'pic'; $setarr'thumb' = $converfiles'thumb'; $setarr'remote' = $converfiles'remote'; 可以看出变量 $converfiles 没有...
Phpbuddies arbitrary file upload vulnerability-vulnerability warning-the black bar safety net
Phpbuddies is an open-source article Directory System, Phpbuddies in the presence of arbitrary file upload vulnerability that could result in an attacker access to the web shell. +info: Phpbuddies 0day Arbitrary Upload File Vulnerability Author : Xr0b0t [email protected] Homepage :...
Bitweaver 2.8.1 Cross Site Scripting
exploit title: persistant xss in bitweaver2.8.1 date: 22.o2.2o11 author: lemlajt software : bitweaver @ sourceforge.net version: 2.8.1 tested on: linux cve : PoC : 1. submit an article POST http://localhost/www/cmsadmins/bitweaver2.8.1/bitweaver/articles/edit.php form-data;...