65 matches found
Sql injection
Multiple SQL injection vulnerabilities in index.cfm in ColdGen ColdUserGroup 1.06 allow remote attackers to execute arbitrary SQL commands via the 1 ArticleID or 2 LibraryID parameter...
CVE-2010-4916: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in index.cfm in ColdGen ColdUserGroup 1.06 allow remote attackers to execute arbitrary SQL commands via the 1 ArticleID or 2 LibraryID parameter...
ColdUserGroup 1.06 - Blind SQL Injection
ColdUserGroup 1.06 - Blind SQL Injection !/usr/bin/python ColdGen - coldusergroup v1.06 0day Remote Blind SQL Injection Exploit Vendor: http://www.coldgen.com/ Found by: mrme ----------------------------------------------- Script provided 'as is', without any warranty. Use for educational purpose...
SiteDone Custom Edition 2.0 SQL Injection & XSS Vulnerability
Exploit for unknown platform in category web applications ============================================================= SiteDone Custom Edition 2.0 SQL Injection & XSS Vulnerability ============================================================= SiteDone Custom Edition 2.0 SQL Injection & XSS...
CVE-2009-4650: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the Webee Comments comwebeecomment component 1.1.1, 1.2, and 2.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the articleId parameter in a default action to index2.php. NOTE: some of these details are obtained from third party informatio...
weenCompany - SQL Injection
weenCompany - SQL Injection weenCompany SQL Injection Vulnerability Vendor: http://www.weentech.com/ Author: Gamoscu Site: www.1923turk.biz Site: http://gamoscu.wordpress.com/ Dork:"Created by weenCompany" Exploit: http://server/index.php?moduleid=m2newsSQL-inj&articleid=1 Greetz: Manas58 Baybora...
weenCompany SQL Injection Vulnerability
Exploit for unknown platform in category web applications ======================================= weenCompany SQL Injection Vulnerability ======================================= weenCompany SQL Injection Vulnerability Vendor: http://www.weentech.com/ Author: Gamoscu Dork:"Created by weenCompany"...
Cross site scripting
Cross-site scripting XSS vulnerability in edit.php in wellyblog allows remote attackers to inject arbitrary web script or HTML via the articleid parameter in an add action...
CVE-2008-5205
Cross-site scripting XSS vulnerability in edit.php in wellyblog allows remote attackers to inject arbitrary web script or HTML via the articleid parameter in an add action...
CVE-2008-5205
Cross-site scripting XSS vulnerability in edit.php in wellyblog allows remote attackers to inject arbitrary web script or HTML via the articleid parameter in an add action...
CVE-2008-5205: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in edit.php in wellyblog allows remote attackers to inject arbitrary web script or HTML via the articleid parameter in an add action...
CVE-2008-2865
SQL injection vulnerability in index.php in Kalptaru Infotech PHP Site Lock 2.0 allows remote attackers to execute arbitrary SQL commands via the articleid parameter in a showarticle action...
CVE-2008-2865: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in index.php in Kalptaru Infotech PHP Site Lock 2.0 allows remote attackers to execute arbitrary SQL commands via the articleid parameter in a showarticle action...
Unfixed XSS vulnerability at www.daronet.co.il
Security researcher wir3less-hack3r, has submitted on 19/06/2008 a cross-site-scripting XSS vulnerability affecting www.daronet.co.il, which at the time of submission ranked 360893 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 10/06/2009. It ...
CVE-2008-2692: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the yvComment comyvcomment component 1.16.0 and earlier for Joomla! allows remote attackers to execute arbitrary SQL commands via the ArticleID parameter in a comment action to index.php...
CVE-2008-2498: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in index.php in Mambo before 4.6.4, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 articleid and 2 mcname parameters. NOTE: some of these details are obtained from third party information...
Unfixed XSS vulnerability at www.dead-sea.org.il
Security researcher wir3less-hack3r, has submitted on 27/04/2008 a cross-site-scripting XSS vulnerability affecting www.dead-sea.org.il, which at the time of submission ranked 1367080 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 19/06/2008. ...
Sql injection
SQL injection vulnerability in index.php in Neat weblog 0.2 allows remote attackers to execute arbitrary SQL commands via the articleId parameter in a show action, probably related to the showArticle function in lib/libarticle.include.php...
CVE-2008-1639: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in index.php in Neat weblog 0.2 allows remote attackers to execute arbitrary SQL commands via the articleId parameter in a show action, probably related to the showArticle function in lib/libarticle.include.php...
