CVE-2010-5009

SQL injection vulnerability in index.php in UTStats Beta 4 and earlier allows remote attackers to execute arbitrary SQL commands via the pid parameter in a matchp action...

CVE-2010-5009

CVE-2010-5009 affects UTStats Beta 4 and earlier, where index.php is vulnerable to SQL injection via the pid parameter in the matchp action. The issue allows remote attackers to execute arbitrary SQL commands, enabling partial data confidentiality and integrity impact with no authentication and n...

vBulletin 4.1.7 Beta 1 Remote File Inclusion

==================================================== vBulletin® Version 4.1.7 Beta 1 Mullti Vulnerability ==================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=--=-=0 0 . .--. .--. .---. . 1 1 .'| / | 0 0 | --: --: / .-.| .-. . . 1 1 | / | | | 0 0...

OWASP Mantra - c0c0n 11 and AppSecLatam 11 Release

OWASP Mantra - c0c0n 11 and AppSecLatam 11 Release The third beta of OWASP Mantra Security Toolkit has been released. One of the main features of this version is the multi-language support. Mantra now supports Hindi and Spanish, in addition to English. If you can give us a helping hand by...

Filmis 0.2 Beta - Multiple Vulnerabilities

Filmis 0.2 Beta - Multiple Vulnerabilities =================================================================================== Filmis - Version 0.2 Beta SQL Injection and XSS Vulnerabilities =================================================================================== Exploit Title: Filmis ...

Filmis 0.2 Beta - Multiple Vulnerabilities

=================================================================================== Filmis - Version 0.2 Beta SQL Injection and XSS Vulnerabilities =================================================================================== Exploit Title: Filmis - Version 0.2 Beta SQL Injection and XSS...

Filmis 0.2 Beta Multiple Vulnerabilities

Exploit for php platform in category web applications Exploit Title: Filmis - Version 0.2 Beta SQL Injection and XSS Vulnerabilities Author: M.Jock3R USE MY ONLINE SQLI SCAN TOOLCODED By ME : http://dzcode.tk/sql.php To discover that such exploit Download ScriptOfficial site:...

CVE-2010-4857

CVE-2010-4857 affects CAG CMS 0.2 Beta; the weakness is a SQL injection in click.php triggered via the itemid parameter. The vulnerability allows remote attackers to send crafted input to execute arbitrary SQL commands against the underlying database. The issue is documented across multiple sourc...

CVE-2010-4857

SQL injection vulnerability in click.php in CAG CMS 0.2 Beta allows remote attackers to execute arbitrary SQL commands via the itemid parameter...

CVE-2009-5090

SQL injection vulnerability in editcomments.php in Bloggeruniverse Beta 2, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter and possibly other unspecified vectors...

Sql injection

SQL injection vulnerability in editcomments.php in Bloggeruniverse Beta 2, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter and possibly other unspecified vectors...

CVE-2009-5090

SQL injection vulnerability in editcomments.php in Bloggeruniverse Beta 2, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter and possibly other unspecified vectors...

CVE-2009-5090

CVE-2009-5090 documents a SQL injection in Bloggeruniverse Beta 2, affecting the editcomments.php handler. The vulnerability allows remote attackers to inject arbitrary SQL via the id parameter when magic_quotes_gpc is disabled. Affected component: Bloggeruniverse (Beta 2) web module; vulnerable ...

Bitdefender 2011 File Vault - Buffer Overflow Vulnerability

Document Title: =============== Bitdefender 2011 File Vault - Buffer Overflow Vulnerability References: =========== Download: http://www.vulnerability-lab.com/resources/videos/262.wmv View: http://www.youtube.com/watch?v=98eA1cIAO8k Release Date: ============= 2011-09-01 Vulnerability Laboratory ...

马克斯CMS(Maxcms) admin_inc.asp SQL注入漏洞

在文件admin/ admininc.asp中： Sub checkPower //第103行 dim loginValidate,rsObj : loginValidate = "maxcms2.0" err.clear on error resume next set rsObj=conn.db"select mrandom,mlevel from premanager where musername='"&rCookie"musername"&"'","execute" rCookie函数在文件inc/ CommonFun.asp中 Function rCookiecookieNa...

DEBIAN-CVE-2011-3127

WordPress 3.1 before 3.1.3 and 3.2 before Beta 2 does not prevent rendering for 1 admin or 2 login pages inside a frame in a third-party HTML document, which makes it easier for remote attackers to conduct clickjacking attacks via a crafted web site...

CVE-2011-3126

WordPress 3.1 before 3.1.3 and 3.2 before Beta 2 allows remote attackers to determine usernames of non-authors via canonical redirects...

DEBIAN-CVE-2011-3129

The file upload functionality in WordPress 3.1 before 3.1.3 and 3.2 before Beta 2, when running "on hosts with dangerous security settings," has unknown impact and attack vectors, possibly related to dangerous filenames...

DEBIAN-CVE-2011-3122

Unspecified vulnerability in WordPress 3.1 before 3.1.3 and 3.2 before Beta 2 has unknown impact and attack vectors related to "Media security."...

CVE-2011-3122

CVE-2011-3122 affects WordPress 3.1.x (before 3.1.3) and WordPress 3.2 Beta 2, with media/security-related issues described as unspecified in the initial record. The connected advisories confirm multiple vulnerabilities across WordPress releases and recommend upgrading to newer upstream versions ...