LulieBlog 1.0.1 - Remote Authentication Bypass

LulieBlog 1.0.1 - Remote Authentication Bypass -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- LulieBlog 1.0.1 delete id Remote Admin Bypass Vulnerability -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- bug found by ka0x contact: D.O.M TEAM 2008 we are: ka0x, an0de,...

CVE-2007-6577

Multiple SQL injection vulnerabilities in index.php in zBlog 1.2 allow remote attackers to execute arbitrary SQL commands via 1 the categ parameter in a categ action or 2 the article parameter in an articles action...

Eurologon CMS Multiple SQL Injection

--------------------------------------------------------------- / | | / | / |/ | | |/ | | / | | | | | |/ | | // | || | ||| /| / / | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg...

Eurologon CMS - Multiple SQL Injections

--------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg --------------------------------------------------------------- Eurologon...

Analysis of Ronin article system V2. 3-vulnerability warning-the black bar safety net

| Author: ice of origin Description: articles have been published in hackers manual 0 7 year 1 1 period, reproduced please specify the source of! Own just to learn ASP, Hey, no one taught, really cool! It does not, see for yourself a few books, and non-security on each issue analysis of ASP...

Samurai download and Samurai articles of the exploit-vulnerability warning-the black bar safety net

One injection vulnerability You can fast forward to see First just point a software download The official update to 2. 4, but the official himself then, but there are also vulnerabilities Oh The download address of the Copy to the next kid inside, I changed%6 9 See? there is no change before is n...

Article Directory - 'index.php' Remote File Inclusion

dork:inurl:index.php%"Submit%Articles"%"Member%Login"%"Top%Authors" dork:inurl:index.php?pagedb=rss expl:index.php?page=shell? original post:http://darkcode.ath.cx/f0rum/ind3x.php?action=vthread&forum=12&topic=114 author:[email protected] greetz:d3hydr8, whoami pace milw0rm.com 2007-07-24...

SquirrelMail G/PGP Encryption Plug-in 2.0 Command Execution Vuln

Exploit for unknown platform in category web applications ================================================================ SquirrelMail G/PGP Encryption Plug-in 2.0 Command Execution Vuln ================================================================ SquirrelMail G/PGP Encryption Plug-in Remote...

CVE-2007-3311

SQL injection vulnerability in print.php in the Articles 1.02 and earlier module for Xoops allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

SQL injection vulnerability in print.php in the Articles 1.02 and earlier module for Xoops allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2007-3311

SQL injection vulnerability in print.php in the Articles 1.02 and earlier module for Xoops allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2007-3311

The CVE-2007-3311 entry concerns the XOOPS Articles Module (version 1.02 and earlier). The vulnerability is a SQL Injection in print.php via the id parameter, caused by insufficient input sanitization. This allows a remote attacker to execute arbitrary SQL commands against the backend database. P...

CVE-2007-2554

Associated Press AP Newspower 4.0.1 and earlier uses a default blank password for the MySQL root account, which allows remote attackers to insert or modify news articles via shows.tblscript...

Default credentials

Associated Press AP Newspower 4.0.1 and earlier uses a default blank password for the MySQL root account, which allows remote attackers to insert or modify news articles via shows.tblscript...

CVE-2007-2554

CVE-2007-2554 affects Associated Press (AP) Newspower 4.0.1 and earlier. The root cause is a default blank MySQL root password, enabling remote attackers to insert or modify news articles via shows.tblscript. The observed impact is potential unauthenticated data integrity compromise (article inse...

Xoops module Articles <= 1.02 (print.php id) SQL Injection Exploit

No description provided by source. !/usr/bin/perl -w Xoops All Version -Articles- Print.PHP ID Blind SQL Injection Exploit And PoC Type : SQL Injection Release Date : 2007-03-26 Product / Vendor : http://support.sirium.net/ Bug : http://localhost/script/modules/articles/print.php?id=x AND 1=1 or...

XOOPS module Articles 1.03 - index.php?cat_id SQL Injection

XOOPS module Articles 1.03 - index.php?catid SQL Injection !/usr/bin/perl Script Name: Xoops module Articles : "; $dir = ; chop...

XOOPS module Articles 1.03 - 'index.php?cat_id' SQL Injection

!/usr/bin/perl Script Name: Xoops module Articles : "; $dir = ; chop $dir; if $dir = /exit/ print "-- Exploit FailedYou...

XOOPS module Articles 1.02 - print.php?id SQL Injection

XOOPS module Articles 1.02 - print.php?id SQL Injection !/usr/bin/perl -w Xoops All Version -Articles- Print.PHP ID Blind SQL Injection Exploit And PoC Type : SQL Injection Release Date : 2007-03-26 Product / Vendor : http://support.sirium.net/ Bug :...

XOOPS Articles Module print.php id Parameter SQL Injection

The remote host is running the Articles module, a third-party module for XOOPS. The version of this module installed on the remote host fails to properly sanitize user-supplied input to the 'id' parameter of the 'modules/articles/print.php' script before using it to build a database query...