WebMaker SQL Injection Vulnerability

http://www.novicar.ch/ http://www.rwbholding.ch/ http://www.webexpert.ch Exploit Title: WebMaker SQL Injection Google Dork: intext:"Powered by WebMaker" Date: 13.1.2013 Exploit Author: Mormoroth Vendor Homepage: http://www.webexpert.ch Tested on: Windows Affected Version : All versions...

Red Hat patches multiple web application Vulnerabilities

RED HAT has fixed multiple web application security issues that allowed hackers to extract website database using Blind SQL injection. Red Hat also confirmed a cross site scripting and Local File Inclusion Vulnerabilities on their website. Mohamed Ramadan Security Researcher and Trainer...

osTicket 1.7 DPR3 XSS / Disclosure / Redirect / SQL Injection

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...

osTicket 1.6 ST CSRF / SQL Injection

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...

MyBB 1.6.9 - editpost.php?posthash Blind SQL Injection

MyBB 1.6.9 - editpost.php?posthash Blind SQL Injection MyBB...

Joomla Component com_spidercalendar Blind SQL Injection Vulnerability

Exploit for php platform in category web applications Happy New year for all 3 Merry x-mas ! +===================================================================================+ ? Note : No One stay for a one : ! ============================================================================== ?...

Joomla! Component Spider Calendar - date Blind SQL Injection

Joomla! Component Spider Calendar - date Blind SQL Injection Happy New year for all 3 Merry x-mas ! +===================================================================================+ ? Note : No One stay for a one : ! ============================================================================...

Centreon Enterprise Server 2.3.3 < 2.3.9-4 - Blind SQL Injection

!/usr/bin/env python Exploit Title: Centreon 2.3.3 - 2.3.9-4 menuXML.php Blind SQL Injection Exploit Disclosure Date: December 12, 2012 Author: modpr0be @modpr0be Platform: Linux Tested on: Centreon Enterprise Server with Centreon 2.3.9-4 on CentOS 5.5 x8664 Final Software Link:...

Centreon 2.3.x SQL Injection

!/usr/bin/env python Exploit Title: Centreon 2.3.3 - 2.3.9-4 menuXML.php Blind SQL Injection Exploit Disclosure Date: December 12, 2012 Author: modpr0be @modpr0be Platform: Linux Tested on: Centreon Enterprise Server with Centreon 2.3.9-4 on CentOS 5.5 x8664 Final Software Link:...

NGS000241 Technical Advisory: SysAid Helpdesk Pro Blind SQL Injection

======= Summary ======= Name: SysAid Helpdesk Pro - Blind SQL Injection Release Date: 30 November 2012 Reference: NGS00241 Discoverer: Daniel Compton [email protected] Vendor: SysAid Vendor Reference: Systems Affected: SysAid Helpdesk 8.5 Pro Risk: High Status: Published ========...

vBulletin ajaxReg Module - SQL Injection

vBulletin ajaxReg Module - SQL Injection source: https://www.securityfocus.com/bid/56877/info The ajaxReg module for vBulletin is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. A successful exploit may allow an...

SysAid Helpdesk 8.5 Pro SQL Injection

======= Summary ======= Name: SysAid Helpdesk Pro - Blind SQL Injection Release Date: 30 November 2012 Reference: NGS00241 Discoverer: Daniel Compton Vendor: SysAid Vendor Reference: Systems Affected: SysAid Helpdesk 8.5 Pro Risk: High Status: Published ======== TimeLine ======== Discovered: 12...

SysAid Helpdesk 8.5 Pro SQL Injection Vulnerability

SysAid Helpdesk version 8.5 Pro suffers from multiple remote blind SQL injection vulnerabilities. ======= Summary ======= Name: SysAid Helpdesk Pro - Blind SQL Injection Release Date: 30 November 2012 Reference: NGS00241 Discoverer: Daniel Compton Vendor: SysAid Vendor Reference: Systems Affected...

Nagios XI Network Monitor 2011R1.9 SQL Injection Vulnerability

Nagios XI Network Monitor version 2011R1.9 suffers from a remote blind SQL injection vulnerability. ======= Summary ======= Name: Nagios XI Network Monitor - Blind SQL Injection Release Date: 30 November 2012 Reference: NGS00194 Discoverer: Daniel Compton Vendor: Nagios Vendor Reference: 0000282...

Traidnt up 2.0 (report.php trtext) Blind SQL Injection Vulnerability

Traidnt up is a php online upload script assignmessage,charset$errors."انتظر سوف يتم تحويلك للملف مرة أخري".""; $traidnt-display"message.tpl"; else $ip = getenv'REMOTEADDR'; $reportquery = $db-query" INSERT INTO report reportkey ,reportwhy ,reportip VALUES '$fileid', '$trtext', '$ip';";...

PHP-Nuke 8.2 SQL Injection

Exploit Title : Nuke 8.2 Modules Bilnd SQL Injection Vulnerability Author : Ashiyane Digital Security Team Designed By : Remove Home : http://ashiyane.org/ Software Link : http://phpnuke.org/ Security Risk : High - Bilnd SQL Injection Version : All Version Dork :...

Beat Websites Blind Sql Injection Vulnerability

Exploit for php platform in category web applications .:. Author : Metropolis .:. Home : www.metropolis.fr.cr .:. Script : Beat Websites .:. Version : 1.0 .:. Download Script: http://beatwebsites.com/ .:. .:. Information Script: .:. You to Can Make Money Running Your Own Beat Website and Keep 100...

Hacker breach President of Sri Lanka website

Official website of President of Sri Lanka president.gov.lk breached by hacker going by name "Broken-Security", using Blind Sql Injection vulnerability. Vulnerability also posted by hacker on a pastebin note with database dump including table and column names. Dump include the Username and...

MYREphp Vacation Rental Software Multiple Vulnerabilities

Exploit for php platform in category web applications Exploit Title: MYREphp Vacation Rental Software Multiple Vulnerabilities Date: 13.10.201 Exploit Author: d3b4g Vendor Homepage:http://myrephp.com Software Link: http://myrephp.com/vacation/ Tested on: Windows 7 Blog: d3b4g.me...

MYREphp Vacation Rental Software - Multiple Vulnerabilities

MYREphp Vacation Rental Software - Multiple Vulnerabilities Exploit Title: MYREphp Vacation Rental Software Multiple Vulnerabilities Date: 13.10.201 Exploit Author: d3b4g Vendor Homepage:http://myrephp.com Software Link: http://myrephp.com/vacation/ Tested on: Windows 7 Blog: d3b4g.me...