minitwitter 0.3-beta - SQL Injection / Cross-Site Scripting

|| || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH! ---------------------------------------------------------------------------------------------- | MULTIPLE...

Flash Quiz Beta 2 Multiple Remote SQL Injection Vulnerabilities

No description provided by source. || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH! ------------------...

CVE-2009-1749

Catviz 0.4.0 beta 1 contains multiple XSS in index.php, exploitable via the userman_form and webpages_form parameters. Root cause is improper handling of these inputs, allowing remote injection of arbitrary script/HTML. The vulnerability affects the ability to inject content into pages consumed b...

CVE-2009-1746

SQL injection vulnerability in berita.php in Dian Gemilang DGNews 3.0 Beta allows remote attackers to execute arbitrary SQL commands via the id parameter in a detail action...

CVE-2009-1746

CVE-2009-1746 describes an SQL injection in Dian Gemilang DGNews 3.0 Beta, via the id parameter in berita.php’s detail action, enabling remote arbitrary SQL execution. The underlying issue is a vulnerability in berita.php allowing attacker-controlled input to alter SQL queries. Affected product/v...

Flash Quiz Beta 2 Multiple Remote SQL Injection Vulnerabilities

No description provided by source. || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH! ----------------------------------...

Flash Quiz Beta 2 - Multiple SQL Injections

Flash Quiz Beta 2 - Multiple SQL Injections || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH!...

CVE-2009-1379

Use-after-free vulnerability in the dtls1retrievebufferedfragment function in ssl/d1both.c in OpenSSL 1.0.0 Beta 2 allows remote attackers to cause a denial of service openssl sclient crash and possibly have unspecified other impact via a DTLS packet, as demonstrated by a packet from a server tha...

DGNews 3.0 Beta SQL Injection

DGNews 3.0 Beta berita.php Remote SQL Injection Vulnerability http://diangemilang.com/news/berita.php?view=detail&id=-28+union+select+1,version,3,4,5,6,7,8,9,10,11-- mysql 5 : Download :- http://www.diangemilang.com/download/comment.php?dlid=33&ENGINEsessID=2fcff934ccb74a561cd4c5df3dacd345...

DGNews 3.0 Beta (id) Remote SQL Injection Vulnerability

No description provided by source. DGNews 3.0 Beta berita.php Remote SQL Injection Vulnerability http://diangemilang.com/news/berita.php?view=detail&id=-28+union+select+1,version,3,4,5,6,7,8,9,10,11-- mysql 5 : Download :-...

DGNews 3.0 Beta (id) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ======================================================= DGNews 3.0 Beta id Remote SQL Injection Vulnerability ======================================================= DGNews 3.0 Beta berita.php Remote SQL Injection Vulnerability...

DGNews 3.0 Beta - id SQL Injection

DGNews 3.0 Beta - id SQL Injection DGNews 3.0 Beta berita.php Remote SQL Injection Vulnerability http://diangemilang.com/news/berita.php?view=detail&id=-28+union+select+1,version,3,4,5,6,7,8,9,10,11-- mysql 5 : Download :-...

GrabIt Stack Based Buffer Overflow Vulnerability

GrabIt is prone to stack-based buffer overflow vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

DGNews 3.0 Beta - 'id' SQL Injection

DGNews 3.0 Beta berita.php Remote SQL Injection Vulnerability http://diangemilang.com/news/berita.php?view=detail&id=-28+union+select+1,version,3,4,5,6,7,8,9,10,11-- mysql 5 : Download :- http://www.diangemilang.com/download/comment.php?dlid=33&ENGINEsessID=2fcff934ccb74a561cd4c5df3dacd345...

PT-2009-2273 · Tribiq · Tribiq Cms

Name of the Vulnerable Software and Affected Versions: Tribiq CMS version 5.0.9a beta Description: The issue allows remote attackers to bypass authentication and gain administrative access. This is achieved by setting the COOKIE LAST ADMIN USER and COOKIE LAST ADMIN LANG cookies. Recommendations:...

Stack overflow

Stack-based buffer overflow in the NZB importer feature in GrabIt 1.7.2 Beta 3 and earlier allows remote attackers to execute arbitrary code via a crafted DTD reference in a DOCTYPE element in an NZB file...

Grabit 1.7.2 Beta 3 SEH Overwrite

!/usr/bin/perl Grabit ./$file" || die "\nCan't open $file: $!"; print nzb "$header1" . "\x41" x 248 . "$nextseh" . "$seh" . "$shellcode"; close nzb; sleep 1; print "\nFile $file successfully created!\n";...

ProjectCMS 1.1b Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications =============================================== ProjectCMS 1.1b Multiple Remote Vulnerabilities =============================================== ---------------------------------------------------------------------------------------------- ...

Grabit <= 1.7.2 beta 3 NZB file parsing stack overflow

Grabit = 1.7.2 beta 3 NZB file parsing stack overflow Impact: Remote code execution Version: = 1.7.2 beta 3 Description Grabit is a popular Windows usenet client designed for downloading binary files. It has support for NZB files, which a user would usually acquire from an external source. Versio...

projectCMS 1.1b - Multiple Vulnerabilities

|| || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH! ---------------------------------------------------------------------------------------------- | MULTPLE REMO...