Joomla Component redSHOP 1.5 Blind SQL Injection Vulnerability

Exploit for php platform in category web applications ----------------------------------------------------------------------------- Joomla Component redSHOP 1.5 Blind SQL Injection Vulnerability ----------------------------------------------------------------------------- Author....: fame...

Parodia 6.8 employer-profile.asp Blind SQL Injection Vulnerability

Exploit for asp platform in category web applications Exploit Title: Parodia 6.8 and early SQL injection Date: June 24 2012 Exploit Author:Carlos Mario Penagos Hollmann Vendor Homepage: http://www.parodia.net/ Version: 6.8 CVE : CVE-2011-2751 http://server/' --- blind SQL...

UCCASS 1.8.1 Blind SQL Injection

:::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ posdubatgmail.com 2012-06-22 UCCASS comheader"Filter Survey Results"; echo $survey-filter$REQUEST'sid'; // 2 unfiltered $REQUEST'sid' var echo...

UCCASS 1.8.1 - Blind SQL Injection

UCCASS 1.8.1 - Blind SQL Injection :::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ posdubatgmail.com 2012-06-22 UCCASS comheader"Filter Survey Results"; echo $survey-filter$REQUEST'sid'; // 2...

UCCASS 1.8.1 - Blind SQL Injection

:::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ posdubatgmail.com 2012-06-22 UCCASS comheader"Filter Survey Results"; echo $survey-filter$REQUEST'sid'; // 2 unfiltered $REQUEST'sid' var echo...

MyTickets Blind SQL Injection

count'languages',"id='".$cookies'language'."'" == 0 48. $language = $setting'defaultlanguage'; 49. 50. $language = $cookies'language'; 52. 52. 53. $languagearray = $db-fetch$db-query"SELECT FROM languages WHERE id='".$language."'"; / print...

ADICO CMS v1.1 - Blind SQL Injection Vulnerability

Title: ====== ADICO CMS v1.1 - Blind SQL Injection Vulnerability Date: ===== 2012-05-29 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=582 VL-ID: ===== 582 Common Vulnerability Scoring System: ==================================== 8.3 Introduction: ============= ADICO i...

MyTickets 1.x < 2.0.8 - Blind SQL Injection

count'languages',"id='".$cookies'language'."'" == 0 48. $language = $setting'defaultlanguage'; 49. 50. $language = $cookies'language'; 52. 52. 53. $languagearray = $db-fetch$db-query"SELECT FROM languages WHERE id='".$language."'"; / print...

Blind SQL Injection in Webmatic

High-Tech Bridge SA Security Research Lab has discovered vulnerability in Webmatic, which can be exploited to perform Blind SQL Injection attacks. 1 Blind SQL Injection in Webmatic: CVE-2012-3350 1.1 Input passed via the "Referer:" field of the HTTP header to index.php is not properly sanitised...

XAMPP Windows 1.7.7 multiple XSS/Blind SQL Injection Vulnerabilities

No description provided by source. $------------------------------------------------------------------------------------------------------------ $ XAMPP Windows 1.7.7 multiple XSS/Blind SQL Injection Vulnerabilities $ Author : Sangteamtham $ Home : Hcegroup.net $ Download...

Joomla! Component Joomsport - SQL Injection Arbitrary File Upload

Joomla! Component Joomsport - SQL Injection Arbitrary File Upload source: https://www.securityfocus.com/bid/53944/info The Joomsport component for Joomla! is prone to an SQL-injection vulnerability and an arbitrary file-upload vulnerability because it fails to sanitize user-supplied data...

Joomla Joomsport SQL Injection / Shell Upload

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...

Joomla! Component Joomsport - SQL Injection / Arbitrary File Upload

source: https://www.securityfocus.com/bid/53944/info The Joomsport component for Joomla! is prone to an SQL-injection vulnerability and an arbitrary file-upload vulnerability because it fails to sanitize user-supplied data. Exploiting these issues could allow an attacker to compromise the...

Webspell FIRSTBORN Movie-Addon - Blind SQL Injection

Webspell FIRSTBORN Movie-Addon - Blind SQL Injection ======================================================================================== | Title : Webspell FIRSTBORN Movie-Addon Blind SQL Injection Vulnerability | Author : Easy Laster | Script : Webspell FIRSTBORN Movie-Addon | Site :...

Webspell FIRSTBORN Movie-Addon - Blind SQL Injection

======================================================================================== | Title : Webspell FIRSTBORN Movie-Addon Blind SQL Injection Vulnerability | Author : Easy Laster | Script : Webspell FIRSTBORN Movie-Addon | Site : www.firstborn.de | Price : free | Exploitation : Remote Bli...

WordPress Plugin Google Maps via Store Locator 2.7.1 3.0.1 - Multiple Vulnerabilities

WordPress Plugin Google Maps via Store Locator 2.7.1 3.0.1 - Multiple Vulnerabilities Description : Wordpress Plugins - Google Maps via Store Locator Plus Multiple Vulnerability Version : 2.7.1 - 3.0.1 Link : http://wordpress.org/extend/plugins/store-locator-le/ Plugins :...

WordPress Google Maps via Store Locator Plugin 2.7.1 - 3.0.1 - Multiple Vulnerabilities

WordPress Google Maps via Store Locator plugin is prone to an information disclosure and blind SQL injection vulnerabilities. Solution Update the plugin...

WordPress Plugin Google Maps via Store Locator 2.7.1 < 3.0.1 - Multiple Vulnerabilities

Description : Wordpress Plugins - Google Maps via Store Locator Plus Multiple Vulnerability Version : 2.7.1 - 3.0.1 Link : http://wordpress.org/extend/plugins/store-locator-le/ Plugins : http://downloads.wordpress.org/plugin/store-locator-le.3.0.1.zip Date : 26-05-2012 Google Dork :...

Zoph 0.9pre2 CSRF / File Disclosure / SQL Injection

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...

DDIVRT-2012-44 Epicor Returns Management SOAP-Based Blind SQL Injection

Title ----- DDIVRT-2012-44 Epicor Returns Management SOAP-Based Blind SQL Injection Severity -------- High Date Discovered --------------- April 12, 2012 Discovered By ------------- Digital Defense, Inc. Vulnerability Research Team Credit: Chris Graham and r@b13$ Vulnerability Description...