ProjectCMS 1.1b Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications =============================================== ProjectCMS 1.1b Multiple Remote Vulnerabilities =============================================== ---------------------------------------------------------------------------------------------- ...

projectCMS 1.1b - Multiple Vulnerabilities

|| || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH! ---------------------------------------------------------------------------------------------- | MULTPLE REMO...

MiniTwitter 0.2-Beta SQL Injection

--------------------------------------------------------------------- MULTIPLE SQL INJECTION VULNERABILITIES --MiniTwitter v0.2-Beta-- --------------------------------------------------------------------- CMS INFORMATION: --WEB: http://mt.bioscriptsdb.com/ --DOWNLOAD:...

CVE-2009-1500

SQL injection vulnerability in index.php in ProjectCMS 1.0 Beta allows remote attackers to execute arbitrary SQL commands via the sn parameter...

MiniTwitter 0.2b - Multiple SQL Injections

MiniTwitter 0.2b - Multiple SQL Injections || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH!...

ProjectCMS 1.0b - 'index.php?sn' SQL Injection

|| || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH! ---------------------------------------------------------------------------------------------- | SQL INJECTIO...

[SECURITY] Fedora 9 Update: Miro-2.0.3-4.fc9

Miro is a free application that turns your computer into an internet TV video player. This release is still a beta version, which means that there are some bugs, but we're moving quickly to fix them and will be releasing bug fixes on a regular basis...

Invision Power Board 3.0.0b5 XSS

================================================================================ Found : brainpillow Dork : "Powered By IP.Board 3.0.0 Beta 5" Visit : brainpillow.cc, forum.antichat.ru, raz0r.name Greetz: slider, halkfild, m0nzt3r, c411k, ettee Mail : [email protected] Note: works on IE 6,7,8...

CVE-2009-1444

CVE-2009-1444 describes a PHP remote file inclusion vulnerability in WebPortal CMS 0.8-beta, affecting indexk.php via the lib_path parameter to execute arbitrary PHP code. The CVE entry cites a network attack vector with low complexity and no authentication, producing partial confidentiality, int...

Invision Power Board (IP.Board) 3.0.0b5 - Active Cross-Site Scripting Full Path Disclosure

Invision Power Board IP.Board 3.0.0b5 - Active Cross-Site Scripting Full Path Disclosure ================================================================================ Found : brainpillow Dork : "Powered By IP.Board 3.0.0 Beta 5" Visit : brainpillow.cc, forum.antichat.ru, raz0r.name Greetz:...

WysGui CMS 1.2 BETA(Insecure Cookie Handling)--Blind-sql-injection-exploit-->

!/usr/bin/perl --------------------------------------------------------- WysGui CMS 1.2 BETAcookie BSQL --------------------------------------------------------- CMS INFORMATION: --WEB: http://wysgui.com/ --DOWNLOAD: http://sourceforge.net/projects/wysgui/ --DEMO: http://wysgui.com/demo/...

CVE-2009-1278

Gravity Board X (GBX) 2.0 BETA has a static code injection in forms/ajax/configure.php that allows remote attackers to inject arbitrary PHP code into config.php via the configure action to index.php. Affected: GBX 2.0 BETA; vulnerable file: forms/ajax/configure.php. Root cause: configuration work...

CVE-2009-1277

CVE-2009-1277 concerns Gravity Board X (GBX) 2.0 Beta. The vulnerability is a SQL injection in index.php via the member_id parameter in a viewprofile action, enabling remote attackers to execute arbitrary SQL commands. The entry notes that a separate board_id issue is covered by CVE-2008-2996. Co...

Dynamic Flash Forum 1.0 Beta Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ============================================================ Dynamic Flash Forum 1.0 Beta Multiple Remote Vulnerabilities ============================================================ Salvatore "drosophila" Fresta + Application: Dynamic Fla...

Sql injection

Multiple SQL injection vulnerabilities in Shader TV Beta allow remote authenticated administrators to execute arbitrary SQL commands via the sid parameter to 1 kanal.asp, 2 google.asp, and 3 hakk.asp in yonet/; and allow remote attackers to execute arbitrary SQL commands via the 4 username or 5...

CVE-2008-6606

The CVE-2008-6606 entry describes a SQL injection in MatPo Link 1.2 Beta, via the id parameter in view.php, allowing remote attackers to execute arbitrary SQL commands. The NVD entry lists a base score of 7.5 (HIGH) with network attack vector and no authentication, and partial impacts on confiden...

osCommerce 2.2/3.0 - 'oscid' Session Fixation

source: https://www.securityfocus.com/bid/34348/info osCommerce is prone to a session-fixation vulnerability. Attackers can exploit this issue to hijack a user's session and gain unauthorized access to the affected application. The following are vulnerable: osCommerce 2.2 osCommerce 3.0 Beta Othe...

Safari 3.2.2/4b (nested elements) XML Parsing Remote Crash Exploit

Exploit for unknown platform in category dos / poc ================================================================== Safari 3.2.2/4b nested elements XML Parsing Remote Crash Exploit ================================================================== Author : Ahmed Obied - Tested using: - Safari...

Apple Safari 3.2.2/4b - nested elements XML Parsing Remote Crash

Author : Ahmed Obied [email protected] - Tested using: - Safari 3.2.2 on Windows - Safari 4 BETA on Windows Usage : python safari.py port import sys, socket from BaseHTTPServer import HTTPServer, BaseHTTPRequestHandler class RequestHandlerBaseHTTPRequestHandler: def getexploitself: exploit = ...

[SECURITY] Fedora 9 Update: Miro-2.0.3-2.fc9

Miro is a free application that turns your computer into an internet TV video player. This release is still a beta version, which means that there are some bugs, but we're moving quickly to fix them and will be releasing bug fixes on a regular basis...