Sql injection

SQL injection vulnerability in the auto BE User Registration autobeuser extension 0.0.2 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2008-6459

CVE-2008-6459 affects TYPO3’s auto BE User Registration (autobeuser) extension 0.0.2 and earlier. The issue is an SQL injection vulnerability that allows remote attackers to execute arbitrary SQL commands via unspecified vectors, potentially impacting confidentiality, integrity, and availability....

Joomla! Component Volunteer 2.0 - SQL Injection

Joomla Component comvolunteerjobid SQL-injection Author : boom3rang Site : www.khg-crew.ws Greetz : H!tm@N, KHG, chs, redc00de, pr0xy-ki11er, LiTTle-Hack3r, L1RIDON1. ---------------------------------------- ! Volunteer ! 05.04.2007 ! John Pan ! [email protected] ! 2.0 Example:...

Goople Cms 1.7 Insecure Cookie Handling Vulnerability

Exploit for unknown platform in category web applications ===================================================== Goople Cms 1.7 Insecure Cookie Handling Vulnerability ===================================================== Author : BeyazKurt Script : Goople Cms 1.7 Download :...

VulnCheck KEV: CVE-2008-4250

The Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, and 7 Pre-Beta allows remote attackers to execute arbitrary code via a crafted RPC request that triggers the overflow during path canonicalization, as exploited in the...

AJ HYIP ACME (comment.php artid) SQL Injection Vulnerability

No description provided by source. proud to be muslim rEm0te sql injction VulnErability ajhyip manager script AuTh0r : security fears team Home : WwW.alsonaa.com members: HeB4RieH , germay...

CVE-2008-3570

PHP remote file inclusion vulnerability in index.php in Africa Be Gone ABG 1.0a allows remote attackers to execute arbitrary PHP code via a URL in the abgpath parameter...

CVE-2008-3570

PHP remote file inclusion vulnerability in index.php in Africa Be Gone ABG 1.0a allows remote attackers to execute arbitrary PHP code via a URL in the abgpath parameter...

CVE-2008-3570

CVE-2008-3570 affects Africa Be Gone (ABG) 1.0a. The vulnerability is a PHP remote file inclusion in index.php exploited via the abg_path parameter, enabling an attacker to execute arbitrary PHP code by supplying a URL. The capabilites and impact are described in the NVD entry (base score 7.5, HI...

ABG Blocking Script 1.0a - 'abg_path' Remote File Inclusion

================================================================= ========Africa Be Gone version 1.0a Remote File Inclusion======== ================================================================= Vendor: http://www.africabegone.com Download:...

ABG Blocking Script 1.0a - abg_path Remote File Inclusion

ABG Blocking Script 1.0a - abgpath Remote File Inclusion ================================================================= ========Africa Be Gone version 1.0a Remote File Inclusion======== ================================================================= Vendor: http://www.africabegone.com...

ABG Blocking Script 1.0a (abg_path) Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ======================================================================= ABG Blocking Script 1.0a abgpath Remote File Inclusion Vulnerability =======================================================================...

abg-rfi.txt

================================================================= ========Africa Be Gone version 1.0a Remote File Inclusion======== ================================================================= Vendor: http://www.africabegone.com Download:...

ABG Blocking Script 1.0a (abg_path) Remote File Inclusion Vulnerability

No description provided by source. ================================================================= ========Africa Be Gone version 1.0a Remote File Inclusion======== ================================================================= Vendor: http://www.africabegone.com Download:...

revokebbrc11-sql.txt

!/usr/bin/python """ ================================================================================================= / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / ================================================================================================= This is a public Exploit...

exbb-lfirfi.txt

==================================================================================================== / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / ==================================================================================================== This is a public Exploit...

ExBB 0.22 - Local/Remote File Inclusion

==================================================================================================== / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / ==================================================================================================== This is a public Exploit...

Unfixed XSS vulnerability at www.college2.be

Security researcher T-Ping, has submitted on 18/09/2007 a cross-site-scripting XSS vulnerability affecting www.college2.be, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/09/2007. It is currently...

Sophos Antivirus UPX及BZIP文件解析拒绝服务漏洞

BUGTRAQ ID: 25428 Sophos Anti-Virus是一款适用于多种操作系统的杀毒软件。 Sophos Anti-Virus在处理畸形格式的UPX和BZIP文件时存在漏洞，远程攻击者可能利用此漏洞导致应用程序不可用。 如果用户受骗打开了恶意的UPX压缩可执行文件或BZIP压缩文档的话，就可能触发死循环，导致引擎崩溃或临时文件耗尽所有磁盘空间。 Sophos Anti-Virus 2.48.0 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.sophos.com/...

Oracle 9i/10g DBMS_METADATA.GET_DDL SQL Injection Exploit

No description provided by source. !/usr/bin/perl Remote Oracle DBMSMETADAT.GETDDL exploit 9i/10g Grant or revoke dba permission to unprivileged user Tested on "Oracle Database 10g Enterprise Edition Release 10.1.0.3.0" REF: http://www.securityfocus.com/bid/16287 AUTHOR: Andrea "bunker"...