AlienVault OSSIM 3.1 Reflected XSS and Blind SQL Injection

No description provided by source. !/usr/bin/python ''' AlienVault has a reflected XSS vulnerability in the url parameter of top.php. Proof of Concept: Enticing a logged in user to visit the following URL where an attacker is hosting an cookie grabber will allow for the hijacking of the user...

BPGames 1.0 - Blind SQL Injection

No description provided by source. x===================================================================x | AntiSecuritydotorg | x===================================================================x | Title : BPGames 1.0 blind SQL Injection Exploit | | Software : BPGames | | Vendor :...

XOOPS Module PopnupBlog <= 2.52 (postid) BLIND SQL Injection Exploit

No description provided by source. html head titleXOOPS Module PopnupBlog = 2.52 postid BLIND SQL Injection Exploit/title script type=text/javascript //'=============================================================================================== //'Script Name: XOOPS Module PopnupBlog = 2.52...

PostNuke FormExpress Module Blind SQL Injection

No description provided by source. Date: 17/03/2010 Software Link: http://sourceforge.net/projects/pn-formexpress/ Version: 0.3.2 PostNuke ContentExpress Module Blind Sql Injection Reported by Sharif University of Technology CSIRT Vulnerability Analysis and Penetration Testing Group cert.sharif.e...

Pardal CMS <= 0.2.0 - Blind SQL Injection Exploit

No description provided by source. --+++=============================================================+++-- --+++====== Pardal CMS = 0.2.0 Blind SQL Injection Exploit ======+++-- --+++=============================================================+++-- ?php function usage echo \nPardal CMS = 0.2.0...

tsep <= 0.942.02 Multiple Vulnerabilities

No description provided by source. TSEP =0.942.02 Vulnerabilities http://tsep.sourceforge.net Dork: powered by TSEP - The Search Engine Project ceLwaux 30.06.2009, uasc.org.ua Blind SQL-Inj /admin/rankform.php ----------------------------------------------------------------------------- 23: //...

MyPHP Forum <= 3.0 Edit Topics/Blind SQL Injection Vulnerabilities

No description provided by source. / ----------------------------------------------------------------------------------- MyPHP Forum Final = 3.0 Edit Topics/Blind SQL Injection Remote Vulnerabilities ----------------------------------------------------------------------------------- Discovered By...

Webmobo WB News System Blind SQL Injection

No description provided by source. Exploit Title: Webmobo News System Blind SQL Injection Date: 2011 Author: Eyup CELIK Version: All Version Tested on: All versions are Vulnerability Web Site: www.eyupcelik.com.tr ISSUE Blind SQL Injection can be done using the command input Vulnerable Page:...

Joomla Component ccBoard 1.2-RC Multiple Vulnerabilities

No description provided by source. Exploit Title: Joomla Component comccboard Multiple Vulnerabilities Date: 13 Nov 2010 Author: jdc Category: webapps/0day Version: 1.2-RC Download: http://codeclassic.org/the-downloads/joomla-extensionscomponents/292-ccboard-bulletin-board-forum.html Persistent X...

Joomla Component com_hotbrackets Blind SQL Injection Vulnerability

Joomla Component comhotbrackets Blind SQL injection Vulnerability author : Fl0riX Name : comhotbrackets Bug Type : Blind SQL Injection Infection : Admin login bilgileri alnabilir. Demo Vuln. : TRUE+ » http://server/index.php?option=comhotbrackets&id=1 and 1=1 FALSE- »...

Joomla Component jotloader <= 1.2.1.a Blind SQL injection Exploit

No description provided by source. !/usr/bin/perl use LWP::UserAgent; use Getopt::Long; if!$ARGV1 print \n; print ooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooo\n; print o Joomla Component jotloader Blind SQL Injection Exploit o\n; print o Author:His0k4 ALGERIAN HaCkeR o\n; print o...

Pay Per Watch & Bid Auktions System BLIND SQL Injection auktion.php (id_auk)

No description provided by source...

Joomla Component com_bfsurvey_pro (catid) Blind SQL Injection Exploit

No description provided by source. ?php inisetmaxexecutiontime,0; printr' \|/// \ - - // @ @ ----oOOo---oOOo--------------------------- @=Author : FL0RiX @=Greez : Wretch-x,Dr.KaCaK & All Friends @=Bug : : combfsurveypro catid Blind SQL Injection Exploit @=WARNING! : : php fl0rix.php...

Joomla PaymentsPlus - Mtree 2.1.5 - Blind SQL Injection Vulnerability

No description provided by source. Critical Level : HIGH Vendor Url : http://paymentsplus.com.au/ Author : Sid3^effects aKa HaRi shellc99atyahoo.com special thanks to : r0073r inj3ct0r.com,L0rd CruSad3r,MaYur,MA1201,KeDar,Sonic,gunslinger greetz to :www.topsecure.net ,All ICW members and my frien...

siu guarani Multiple Vulnerabilities

No description provided by source. multiple remote vulnerabilities siu guarani general information ------------------- bug type : multiple remote vulnerabilities software name : SIU Guarani vendor : SIU www.siu.edu.ar authors : proudhon & Ubik date : the 341st day of the year 2008 contact : N/A...

Joomla Component com_na_content 1.0 - Blind SQL Injection Vulnerability

No description provided by source. Joomla Component comnacontent 1.0 Blind SQL Injection Vuln Author: xoron Exploit: /index.php?option=comnacontent&task=view&id=1 having 1=0 /index.php?option=comnacontent&task=view&id=1 having 1=1 or /index.php?option=comnacontent&task=view&id=1 and...

Joomla Component com_avosbillets Blind SQL Injection Vulnerability

No description provided by source. ------------------- header data start ------------------- Joomla Component comavosbillets Blind SQL Injection Vulnerability Author : Pyske Home : www.cyber-warrior.orghttp://www.cyber-warrior.org Greetz : Fl0riX , M-K-A, F0RTYS3V3N ,BlackApple , KaBaDaY and All...

Independent Escort CMS Blind SQL Injection Vunerability

No description provided by source...

zeroboard4 pl8 (07.12.17) Multiple Vulnerabilities

No description provided by source. ZeroBoard4 pl8 07.12.17 Multiple Remote/Local Vulnerability bY [email protected] thx to : Flyh4t / ZeroBoard4 VERSION pl8 07.12.17is most famous and widely used bulletin board system of Korea. It is freely available for all platforms that supports PHP and MySQL...

Imperva SecureSphere Web Application Firewall MX 9.5.6 - Blind SQL Injection

No description provided by source. Blind SQL Injection to Imperva SecureSphere Web Application Firewall MX ======================================================================= ADVISORY INFORMATION Title: Blind SQL Injection on Imperva SecureSphere Web Application Firewall MX Discovery date:...