3604 matches found
MiniTwitter 0.2-Beta SQL Injection
--------------------------------------------------------------------- MULTIPLE SQL INJECTION VULNERABILITIES --MiniTwitter v0.2-Beta-- --------------------------------------------------------------------- CMS INFORMATION: --WEB: http://mt.bioscriptsdb.com/ --DOWNLOAD:...
CVE-2009-1500
SQL injection vulnerability in index.php in ProjectCMS 1.0 Beta allows remote attackers to execute arbitrary SQL commands via the sn parameter...
MiniTwitter 0.2b - Multiple SQL Injections
MiniTwitter 0.2b - Multiple SQL Injections || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH!...
ProjectCMS 1.0b - 'index.php?sn' SQL Injection
|| || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH! ---------------------------------------------------------------------------------------------- | SQL INJECTIO...
[SECURITY] Fedora 9 Update: Miro-2.0.3-4.fc9
Miro is a free application that turns your computer into an internet TV video player. This release is still a beta version, which means that there are some bugs, but we're moving quickly to fix them and will be releasing bug fixes on a regular basis...
Invision Power Board 3.0.0b5 XSS
================================================================================ Found : brainpillow Dork : "Powered By IP.Board 3.0.0 Beta 5" Visit : brainpillow.cc, forum.antichat.ru, raz0r.name Greetz: slider, halkfild, m0nzt3r, c411k, ettee Mail : [email protected] Note: works on IE 6,7,8...
CVE-2009-1444
CVE-2009-1444 describes a PHP remote file inclusion vulnerability in WebPortal CMS 0.8-beta, affecting indexk.php via the lib_path parameter to execute arbitrary PHP code. The CVE entry cites a network attack vector with low complexity and no authentication, producing partial confidentiality, int...
Invision Power Board (IP.Board) 3.0.0b5 - Active Cross-Site Scripting Full Path Disclosure
Invision Power Board IP.Board 3.0.0b5 - Active Cross-Site Scripting Full Path Disclosure ================================================================================ Found : brainpillow Dork : "Powered By IP.Board 3.0.0 Beta 5" Visit : brainpillow.cc, forum.antichat.ru, raz0r.name Greetz:...
WysGui CMS 1.2 BETA(Insecure Cookie Handling)--Blind-sql-injection-exploit-->
!/usr/bin/perl --------------------------------------------------------- WysGui CMS 1.2 BETAcookie BSQL --------------------------------------------------------- CMS INFORMATION: --WEB: http://wysgui.com/ --DOWNLOAD: http://sourceforge.net/projects/wysgui/ --DEMO: http://wysgui.com/demo/...
CVE-2009-1277
CVE-2009-1277 concerns Gravity Board X (GBX) 2.0 Beta. The vulnerability is a SQL injection in index.php via the member_id parameter in a viewprofile action, enabling remote attackers to execute arbitrary SQL commands. The entry notes that a separate board_id issue is covered by CVE-2008-2996. Co...
CVE-2009-1278
Gravity Board X (GBX) 2.0 BETA has a static code injection in forms/ajax/configure.php that allows remote attackers to inject arbitrary PHP code into config.php via the configure action to index.php. Affected: GBX 2.0 BETA; vulnerable file: forms/ajax/configure.php. Root cause: configuration work...
Dynamic Flash Forum 1.0 Beta Multiple Remote Vulnerabilities
Exploit for unknown platform in category web applications ============================================================ Dynamic Flash Forum 1.0 Beta Multiple Remote Vulnerabilities ============================================================ Salvatore "drosophila" Fresta + Application: Dynamic Fla...
Sql injection
Multiple SQL injection vulnerabilities in Shader TV Beta allow remote authenticated administrators to execute arbitrary SQL commands via the sid parameter to 1 kanal.asp, 2 google.asp, and 3 hakk.asp in yonet/; and allow remote attackers to execute arbitrary SQL commands via the 4 username or 5...
CVE-2008-6641: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in Shader TV Beta allow remote authenticated administrators to execute arbitrary SQL commands via the sid parameter to 1 kanal.asp, 2 google.asp, and 3 hakk.asp in yonet/; and allow remote attackers to execute arbitrary SQL commands via the 4 username or 5...
CVE-2008-6606
The CVE-2008-6606 entry describes a SQL injection in MatPo Link 1.2 Beta, via the id parameter in view.php, allowing remote attackers to execute arbitrary SQL commands. The NVD entry lists a base score of 7.5 (HIGH) with network attack vector and no authentication, and partial impacts on confiden...
osCommerce 2.2/3.0 - 'oscid' Session Fixation
source: https://www.securityfocus.com/bid/34348/info osCommerce is prone to a session-fixation vulnerability. Attackers can exploit this issue to hijack a user's session and gain unauthorized access to the affected application. The following are vulnerable: osCommerce 2.2 osCommerce 3.0 Beta Othe...
Safari 3.2.2/4b (nested elements) XML Parsing Remote Crash Exploit
Exploit for unknown platform in category dos / poc ================================================================== Safari 3.2.2/4b nested elements XML Parsing Remote Crash Exploit ================================================================== Author : Ahmed Obied - Tested using: - Safari...
Apple Safari 3.2.2/4b - nested elements XML Parsing Remote Crash
Author : Ahmed Obied [email protected] - Tested using: - Safari 3.2.2 on Windows - Safari 4 BETA on Windows Usage : python safari.py port import sys, socket from BaseHTTPServer import HTTPServer, BaseHTTPRequestHandler class RequestHandlerBaseHTTPRequestHandler: def getexploitself: exploit = ...
[SECURITY] Fedora 9 Update: Miro-2.0.3-2.fc9
Miro is a free application that turns your computer into an internet TV video player. This release is still a beta version, which means that there are some bugs, but we're moving quickly to fix them and will be releasing bug fixes on a regular basis...