408 matches found
Consultech CMS Blind SQL Injection
Exploit Title: Consultech cms Blind Sql Injection Google Dork: inurl:buy-results.asp?agentlistings intext:Powered by Consultech Date: 08/22/2012 Author: Crim3R Vendor Home : http://www.consultech.net/ Tested on: all ================================== the agentlistings parametr is agentlistings to...
Swoopo Gold Shop CMS 8.4.56 - Multiple Web Vulnerabilities
Swoopo Gold Shop CMS 8.4.56 - Multiple Web Vulnerabilities Title: ====== Swoopo Gold Shop CMS v8.4.56 - Multiple Web Vulnerabilities Date: ===== 2012-05-14 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=515 VL-ID: ===== 515 Common Vulnerability Scoring System:...
Most soil buy the system blind and cookie spoofing vulnerability analysis-vulnerability warning-the black bar safety net
Release date: 2010-10. 2 3 Publishing author: l4yn3 Affected versions: unknown Official address: http://www.zuitu.com/ Vulnerability type: Cookie spoofing, SQL injection Vulnerability Description: The most soil group purchase system is a domestic famous group purchase program in the domestic grou...
In Application Security, Good Enough Isn't
SAN FRANCISCO–There’s the old joke about two hunters running from a lion, and the one runner says to the other: we can’t outrun the lion. And his buddy replied, “I don’t have to outrun the lion, I only have to outrun you.” Many, over the years, have applied the same logic to application security:...
Datetopia Buy Dating Site - Cross-Site Scripting
Datetopia Buy Dating Site - Cross-Site Scripting source: https://www.securityfocus.com/bid/42973/info Datetopia Buy Dating Site is prone to a cross-site scripting vulnerability because the it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary...
Datetopia Buy Dating Site - Cross-Site Scripting
source: https://www.securityfocus.com/bid/42973/info Datetopia Buy Dating Site is prone to a cross-site scripting vulnerability because the it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting use...
php168 buy get administrator privileges 0day-vulnerability warning-the black bar safety net
The exploit: the 1. Registered normal user 2. By http://site/buygroup.php?job=buy&gid=3purchase administrator privileges. 3. The background that 2webshell...
Erotik Auktionshaus news.php SQL Injection Vulnerability
Exploit for unknown platform in category web applications ======================================================== Erotik Auktionshaus news.php SQL Injection Vulnerability ======================================================== Erotik Auktionshaus SQL Injection news.php | | ||| | | | | | -| .'| ...
Auktionshaus Gelb 3 - 'news.php' SQL Injection
AuktionshausGelb V.3 SQL Injection news.php | | ||| | | | | | -| .'| || | | | -| | | -| | || ||,|||| ||||| ||| ||||| Script: Auktionshaus Gelb V.3 Vulnerabilities SQL Injection Language: PHP Download: buy this script Founder: ea$y laster Peace to -tmh- ,0qwl ,Crypter ,Dr.ChAoS ,dremicz ,eddy14...
Erotik Auktionshaus - 'news.php' SQL Injection
Erotik Auktionshaus SQL Injection news.php | | ||| | | | | | -| .'| || | | | -| | | -| | || ||,|||| ||||| ||| ||||| Script: Erotik Auktionshaus news.php Vulnerabilities SQL Injection Language: PHP Download: buy this script Founder: ea$y laster Peace to -tmh- ,0qwl ,Crypter ,Dr.ChAoS ,dremicz...
Erotik Auktionshaus - news.php SQL Injection
Erotik Auktionshaus - news.php SQL Injection Erotik Auktionshaus SQL Injection news.php | | ||| | | | | | -| .'| || | | | -| | | -| | || ||,|||| ||||| ||| ||||| Script: Erotik Auktionshaus news.php Vulnerabilities SQL Injection Language: PHP Download: buy this script Founder: ea$y laster Peace to...
CVE-2009-3355
Cross-site scripting XSS vulnerability in profile.php in Datetopia Buy Dating Site 1.0 allows remote attackers to inject arbitrary web script or HTML via the sr parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in profile.php in Datetopia Buy Dating Site 1.0 allows remote attackers to inject arbitrary web script or HTML via the sr parameter...
CVE-2009-3355
CVE-2009-3355 is a cross-site scripting vulnerability in the Datetopia Buy Dating Site 1.0, specifically in profile.php. The issue arises from unsafely handling the s_r parameter, enabling remote attackers to inject arbitrary web script or HTML. Affected software and component: Datetopia Buy Dati...
CVE-2009-2785
Multiple cross-site scripting XSS vulnerabilities in PHP Open Classifieds Script allow remote attackers to inject arbitrary web script or HTML via the 1 page parameter to buy.php and the id parameter to 2 contact.php and 3 tellafriend.php...
Pc4Uploader 9.0 Remote Blind SQL Injection Vulnerability
Exploit for unknown platform in category web applications ======================================================== Pc4Uploader 9.0 Remote Blind SQL Injection Vulnerability ======================================================== From Kuwait PEACE =Vuln: pc4arb - pc4 Uploader = 9.0 Blind SQL...
Sql injection
SQL injection vulnerability in index.php in Hispah Text Links Ads 1.1 allows remote attackers to execute arbitrary SQL commands via the idtl parameter in a buy action. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2008-6155
SQL injection vulnerability in index.php in Hispah Text Links Ads 1.1 allows remote attackers to execute arbitrary SQL commands via the idtl parameter in a buy action. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CafeEngine - catid SQL Injection
CafeEngine - catid SQL Injection // / / / CAFE ENGINE / / / / Remote SQL Injection Vulnerability / / / / / // AUTHOR : SuNHouSe2 ALGERIAN HaCkEr HOME : http://www.snakespc.com VERSION : EASY CAFE ENGINE BUY SCRIPT : http://cafeengine.com/ Price : 10$ EXPLOIT :...