1017 matches found
AJ Auction Pro OOPD 2.x (store.php id) SQL Injection Exploit
Exploit for unknown platform in category web applications ============================================================ AJ Auction Pro OOPD 2.x store.php id SQL Injection Exploit ============================================================ !/usr/bin/perl o AJ Auction Pro OOPD 2.x SQL Injection...
AJ Auction Pro OOPD 2.x SQL Injection
!/usr/bin/perl o AJ Auction Pro OOPD 2.x SQL Injection Exploit Software : AJ Auction Pro OOPD 2.x Vendor : http://www.ajsquare.com/ Author : NoGe Contact : nogedotcodeatgmaildotcom Blog : http://evilc0de.blogspot.com o Usage root@noge: perl ajpro.pl www.target.com o Dork "Powered By AJ Auction Pr...
AJ Auction Pro OOPD 2.x - id SQL Injection
AJ Auction Pro OOPD 2.x - id SQL Injection !/usr/bin/perl o AJ Auction Pro OOPD 2.x SQL Injection Exploit Software : AJ Auction Pro OOPD 2.x Vendor : http://www.ajsquare.com/ Author : NoGe Contact : nogedotcodeatgmaildotcom Blog : http://evilc0de.blogspot.com o Usage root@noge: perl ajpro.pl...
AJ Auction Pro OOPD 2.x (store.php id) SQL Injection Exploit
No description provided by source. !/usr/bin/perl o AJ Auction Pro OOPD 2.x SQL Injection Exploit Software : AJ Auction Pro OOPD 2.x Vendor : http://www.ajsquare.com/ Author : NoGe Contact : nogedotcodeatgmaildotcom Blog : http://evilc0de.blogspot.com o Usage root@noge: perl ajpro.pl www.target.c...
AJ Auction Pro OOPD 2.x - 'id' SQL Injection
!/usr/bin/perl o AJ Auction Pro OOPD 2.x SQL Injection Exploit Software : AJ Auction Pro OOPD 2.x Vendor : http://www.ajsquare.com/ Author : NoGe Contact : nogedotcodeatgmaildotcom Blog : http://evilc0de.blogspot.com o Usage root@noge: perl ajpro.pl www.target.com o Dork "Powered By AJ Auction Pr...
CVE-2008-6965
AJ Square AJ Auction OOPD, Pro Platinum Skin 1, Pro Platinum Skin 2, and Web 2.0 send a redirect but do not exit when certain scripts are called directly, which allows remote attackers to bypass authentication via a direct request to 1 site.php, 2 auction.php, 3 mail.php, 4 feesetting.php, 5...
CVE-2008-6966
AJ Square AJ Auction Pro Platinum Skin 1 sends a redirect but does not exit when it is called directly, which allows remote attackers to bypass authentication via a direct request to admin/user.php...
Authentication flaw
AJ Square AJ Auction Pro Platinum Skin 1 sends a redirect but does not exit when it is called directly, which allows remote attackers to bypass authentication via a direct request to admin/user.php...
CVE-2008-6966
The CVE-2008-6966 entry concerns AJ Square AJ Auction Pro Platinum Skin #1, where a redirect is not exited when accessed directly, enabling a remote attacker to bypass authentication via a direct request to admin/user.php. The issue is tied to improper flow control after a redirect, allowing an a...
CVE-2008-6965
AJ Square AJ Auction OOPD, Pro Platinum Skin 1, Pro Platinum Skin 2, and Web 2.0 send a redirect but do not exit when certain scripts are called directly, which allows remote attackers to bypass authentication via a direct request to 1 site.php, 2 auction.php, 3 mail.php, 4 feesetting.php, 5...
CVE-2008-6965
CVE-2008-6965 affects AJ Square AJ Auction OOPD, Pro Platinum Skin #1, Pro Platinum Skin #2, and Web 2.0. The issue is that a redirect is issued but the script does not exit when certain admin script files (site.php, auction.php, mail.php, fee_setting.php, earnings.php, insertion_fee_settings.php...
CVE-2008-6966
AJ Square AJ Auction Pro Platinum Skin 1 sends a redirect but does not exit when it is called directly, which allows remote attackers to bypass authentication via a direct request to admin/user.php...
AJ Auction Pro OOPD 3.0 - txtkeyword Cross-Site Scripting
AJ Auction Pro OOPD 3.0 - txtkeyword Cross-Site Scripting source: https://www.securityfocus.com/bid/43273/info AJ Auction Pro OOPD is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execut...
Auction Website Script SQL Injection
0000000000000000000000000000000000 000000000000000000000 00000000000000000000000000000000000 0000000000000000 00000000000000000000000000000000 + Auction Website Script cateid SQL Injection Vulnerability + Software : Auction Website Script + Author : 599eme Man + Contact : [email protected] + Thanks :...
Willscript Auction Website Script - 'category.php' SQL Injection
source: https://www.securityfocus.com/bid/43254/info Willscript Auction Website Script is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to execute arbitrary code,...
Willscript Auction Website Script - category.php SQL Injection
Willscript Auction Website Script - category.php SQL Injection source: https://www.securityfocus.com/bid/43254/info Willscript Auction Website Script is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting...
AJ Auction Pro OOPD 3.0 - 'txtkeyword' Cross-Site Scripting
source: https://www.securityfocus.com/bid/43273/info AJ Auction Pro OOPD is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting...
AJ Auction Pro 3.0 - 'txtkeyword' Cross-Site Scripting
source: https://www.securityfocus.com/bid/35968/info AJ Auction Pro is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the contex...
AJ Auction Pro 3.0 - txtkeyword Cross-Site Scripting
AJ Auction Pro 3.0 - txtkeyword Cross-Site Scripting source: https://www.securityfocus.com/bid/35968/info AJ Auction Pro is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code...