Joomla! Component JVideo 0.3.x - SQL Injection

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Joomla Component comjvideo userid SQL-injection Vulnerability ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ + Author : Chip D3 Bi0s + Greetz : d4n!ux + xjeshua + eCORE + Painboy + rayok3nt ...

212Cafe WebBoard 2.90 Beta - view.php Directory Traversal

212Cafe WebBoard 2.90 Beta - view.php Directory Traversal source: https://www.securityfocus.com/bid/44510/info 212cafe WebBoard is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input. Remote attackers can use a specially crafted request with...

Joomla! Component JVideo 0.3.x - SQL Injection

Joomla! Component JVideo 0.3.x - SQL Injection ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Joomla Component comjvideo userid SQL-injection Vulnerability ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ + Author : Chip D3 Bi0s + Greetz :...

MiniTwitter 0.3-Beta (SQL/XSS) Multiple Remote Vulnerabilities

No description provided by source. || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH! ------------------...

minitwitter 0.3-beta - SQL Injection / Cross-Site Scripting

|| || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH! ---------------------------------------------------------------------------------------------- | MULTIPLE...

Flash Quiz Beta 2 Multiple Remote SQL Injection Vulnerabilities

No description provided by source. || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH! ------------------...

CVE-2009-1749

Catviz 0.4.0 beta 1 contains multiple XSS in index.php, exploitable via the userman_form and webpages_form parameters. Root cause is improper handling of these inputs, allowing remote injection of arbitrary script/HTML. The vulnerability affects the ability to inject content into pages consumed b...

CVE-2009-1746

SQL injection vulnerability in berita.php in Dian Gemilang DGNews 3.0 Beta allows remote attackers to execute arbitrary SQL commands via the id parameter in a detail action...

CVE-2009-1746

CVE-2009-1746 describes an SQL injection in Dian Gemilang DGNews 3.0 Beta, via the id parameter in berita.php’s detail action, enabling remote arbitrary SQL execution. The underlying issue is a vulnerability in berita.php allowing attacker-controlled input to alter SQL queries. Affected product/v...

Flash Quiz Beta 2 - Multiple SQL Injections

Flash Quiz Beta 2 - Multiple SQL Injections || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH!...

Flash Quiz Beta 2 Multiple Remote SQL Injection Vulnerabilities

No description provided by source. || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH! ----------------------------------...

CVE-2009-1379

Use-after-free vulnerability in the dtls1retrievebufferedfragment function in ssl/d1both.c in OpenSSL 1.0.0 Beta 2 allows remote attackers to cause a denial of service openssl sclient crash and possibly have unspecified other impact via a DTLS packet, as demonstrated by a packet from a server tha...

DGNews 3.0 Beta SQL Injection

DGNews 3.0 Beta berita.php Remote SQL Injection Vulnerability http://diangemilang.com/news/berita.php?view=detail&id=-28+union+select+1,version,3,4,5,6,7,8,9,10,11-- mysql 5 : Download :- http://www.diangemilang.com/download/comment.php?dlid=33&ENGINEsessID=2fcff934ccb74a561cd4c5df3dacd345...

DGNews 3.0 Beta (id) Remote SQL Injection Vulnerability

No description provided by source. DGNews 3.0 Beta berita.php Remote SQL Injection Vulnerability http://diangemilang.com/news/berita.php?view=detail&id=-28+union+select+1,version,3,4,5,6,7,8,9,10,11-- mysql 5 : Download :-...

DGNews 3.0 Beta - 'id' SQL Injection

DGNews 3.0 Beta berita.php Remote SQL Injection Vulnerability http://diangemilang.com/news/berita.php?view=detail&id=-28+union+select+1,version,3,4,5,6,7,8,9,10,11-- mysql 5 : Download :- http://www.diangemilang.com/download/comment.php?dlid=33&ENGINEsessID=2fcff934ccb74a561cd4c5df3dacd345...

GrabIt Stack Based Buffer Overflow Vulnerability

GrabIt is prone to stack-based buffer overflow vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

DGNews 3.0 Beta - id SQL Injection

DGNews 3.0 Beta - id SQL Injection DGNews 3.0 Beta berita.php Remote SQL Injection Vulnerability http://diangemilang.com/news/berita.php?view=detail&id=-28+union+select+1,version,3,4,5,6,7,8,9,10,11-- mysql 5 : Download :-...

DGNews 3.0 Beta (id) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ======================================================= DGNews 3.0 Beta id Remote SQL Injection Vulnerability ======================================================= DGNews 3.0 Beta berita.php Remote SQL Injection Vulnerability...

PT-2009-2273 · Tribiq · Tribiq Cms

Name of the Vulnerable Software and Affected Versions: Tribiq CMS version 5.0.9a beta Description: The issue allows remote attackers to bypass authentication and gain administrative access. This is achieved by setting the COOKIE LAST ADMIN USER and COOKIE LAST ADMIN LANG cookies. Recommendations:...

Stack overflow

Stack-based buffer overflow in the NZB importer feature in GrabIt 1.7.2 Beta 3 and earlier allows remote attackers to execute arbitrary code via a crafted DTD reference in a DOCTYPE element in an NZB file...