PHP Inventory 1.2 - Remote (Auth Bypass) SQL Injection Vulnerabiity

No description provided by source...

RTTucson Quotations Database Script (Auth Bypass) SQL Injection Vulnerability

No description provided by source. RTTucson Quotations Database Script Auth Bypass SQL Injection Vulnerability By cr4wl3r http://bastardlabs.info Script: http://www.rttucson.com/files.html Bugs found /quotations/admin/include/login.php --------------------------- 36 if $POST'submit' 37 38 $Userna...

acute control panel 1.0.0 (sql/rfi) Multiple Vulnerabilities

No description provided by source. + Acute Control Panel 1.0.0 RFI/SQL Injection Auth Bypass + Discovered By SirGod + www.mortal-team.org + www.h4cky0u.org + Remote File Inclusion Vulnerable code in container.php ----------------------------------------------------------- ?php...

phpMySport 1.4 - Multiple Vulnerabilities (SQLi, Auth Bypass, Path Disclosure)

No description provided by source. Vulnerability ID: HTB22770 Reference: http://www.htbridge.ch/advisory/sqlinjectioninphpmysport.html Product: phpMySport Vendor: phpMySport http://phpmysport.sourceforge.net/ Vulnerable Version: 1.4 Vendor Notification: 21 December 2010 Vulnerability Type: SQL...

qdPM 7.0 - Arbitrary PHP File Upload Vulnerability

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...

opennews 1.0 (sqli/rce) Multiple Vulnerabilities

No description provided by source. + OpenNews 1.0 SQLI/RCE Multiple Remote Vulnerabilities + Discovered By SirGod + http://insecurity-ro.org + http://h4cky0u.org + Download : http://sourceforge.net/projects/opennews-sun/ + SQL Injection Auth Bypass - Note : magicquotesgpc = off - PoC...

U&M Software JustBookIt 1.0 Auth Bypass Vulnerability

No description provided by source. ============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || || ==============================================================================...

RiotPix <= 0.61 (Auth Bypass) SQL Injection Vulnerability

No description provided by source. RiotPix = 0.61 Bypass ---------------------------------------------------------- Discovered By: ZoRLu msn: [email protected] Date: 06.01.09 Home: z0rlu.blogspot.com / www.experl.com N0T: YALNIZLIK, YiTiRDi ANLAMINI YALNIZLIGIMDA : EN ONEMLi N0T: demolarI...

ClanTiger <= 1.1.1 (Auth Bypass) SQL Injection Vulnerability

No description provided by source. || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH! ---------------------...

Avaya WinPDM UniteHostRouter <= 3.8.2 - Remote Pre-Auth Command Execute

No description provided by source. Abysssec Public Exploit more info www.abysssec.com Avaya WinPDM UniteHostRouter = 3.8.2 Remote Pre-Auth Command Execute A boundary error in the Unite Host Router service UniteHostRouter.exe when processing certain requests can be exploited to cause a stack-based...

EgyPlus 7ml <= 1.0.1 (Auth Bypass) SQL Injection Vulnerability

No description provided by source. || || | || o,7 || . o7 || q||| o\, : / / . =By: Qabandi =Email: iqaahotmail.fr From Kuwait, PEACE... =Vuln: EgyPlus 7ml = 1.0.1 - Cookie Auth Bypass SQL injection vulnerability CABSIV =INFO: http://egyplus.org/article-2.htm =Download:...

I-Rater Pro/Plantinum 4.0 - (Auth Bypass) SQL Injection Vulnerability

No description provided by source. I-Rater Platinum V4 By : Hakxer Greetz : ExH , ProViDoR , Error Code , Bright D@rk , Stealth , Kof2002 , Datafr34ck3r , HcJ , Virushima I-Rater Platinum V4 Auth bypass Sql injection poc : http://www.i-rater.com/platinumadmin.html in username : admin 'or' 1=1 in...

PHotoLa Gallery <= 1.0 (Auth Bypass) SQL Injection Vulnerability

No description provided by source. ============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || || ==============================================================================...

Zen Tracking <= 2.2 (Auth Bypass) SQL Injection Vulnerability

No description provided by source. + Zen Tracking = 2.2 Auth Bypass SQL Injection Vulnerability + Discovered by cr4wl3r cr4wl3r!linuxmail.org + Download : http://scripts.ringsworld.com/calendars/zentimetracking/ + Vuln Code : userlogin.php if !empty$POST'password' $username =$POST'username';...

clickandemail (sql/xss) Multiple Vulnerabilities

No description provided by source. -------------------------------AlpHaNiX---------------------------------- Found By : AlpHaNiX website : www.offensivetrack.org contact : AlpHaATHACKERDOTBZ script : ClickAndEmaiL download : null Demo : http://icash.ch/ClickAndEmailDEMO Exploits : --=SQL...

GNU Anubis 3.6.x/3.9.x auth.c auth_ident() Function Overflow

No description provided by source. source: http://www.securityfocus.com/bid/9772/info GNU Anubis has been reported prone to multiple buffer overflow and format string vulnerabilities. It has been conjectured that a remote attacker may potentially exploit these vulnerabilities to have arbitrary co...

phpMDJ 1.0.3 - SQL Injection Vulnerability

No description provided by source. ,--------------------------------------------------------------, Vulnerable Script : phpMDJ 1.0.3 \ Download : http://www.weboac.be/phpmdj/docs/phpmdj1.0.3.zip \ Vulnerability : Remote Sql Injection ...

chipmunk topsites (auth bypass/xss) Multiple Vulnerabilities

No description provided by source. Chipmunk Topsites Auth Bypass SQL Injection & XSS Multiple Remote Vuln. ---------------------------------------------------------- Discovered By: ZoRLu msn: [email protected] Home: www.z0rlu.blogspot.com N0T: YALNIZLIK, YiTiRDi ANLAMINI YALNIZLIGIMDA : N0T:...

PHPDomainRegister 0.4a-RC2-dev - Multiple Vulnerabilities

No description provided by source. Title = PHPDomainRegister v0.4a-RC2-dev = SQL AuthSQL InjectXSS Author = Or4nG.M4n Download = http://garr.dl.sourceforge.net/project/phpdr/v0.4b%20-%20RC2.rar This Bug Powered By : GooGLe Thnks : +----------------------------------+ | xSs m4n i-Hmx Cyber-Crystal...

propertymax pro free (sql/xss) Multiple Vulnerabilities

No description provided by source. + PropertyMax Pro FREE SQL/XSS Multiple Remote Vulnerabilities + Discovered By SirGod + www.mortal-team.org + www.h4cky0u.org + SQL Injection Auth Bypass Conditions : magicquotesgpc = off Go to : http://127.0.0.1/path/admin Login as : Username : 'or''=' Password...