CVE-2010-1265

The CVE-2010-1265 entry describes a SQL injection in Adam Corley dcsFlashGames (com_dcs_flashgames) where the vulnerability is triggered by the catid parameter to index.php. This allows remote attackers to execute arbitrary SQL commands. Affected component is the dcsFlashGames module; no remediat...

Sql injection

SQL injection vulnerability in the jEmbed-Embed Anything comjembed component for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter in a summary action to index.php...

Joomla! Component com_ice - Blind SQL Injection

Joomla! Component comice - Blind SQL Injection !/usr/bin/php 1 $url = $argv1; $r = strlenfilegetcontents$url."+and+1=1--"; echo "\nExploiting:\n"; $w = strlenfilegetcontents$url."+and+1=0--"; $t = abs100-$w/$r100; echo "Username: "; for $i=1; $i $t-1 $count = $i; $i = 30; for $j = 1; $j $count;...

Sql injection

SQL injection vulnerability in the Parkview Consultants SimpleFAQ comsimplefaq component for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter in a display action to index.php...

Joomla IotaPhotoGallery SQL Injection

/ Name : Joomla Component comiotaPhotoGallery Vuln : SQL Injection vulnerability Author : Hamza 'MizoZ' N. Email : mizozxatgmaildotcom Greetz : Zuka , Grey Hat Hackers / SQLI...

Cross site scripting

Cross-site scripting XSS vulnerability in the Marketplace commarketplace component 1.2 for Joomla! allows remote attackers to inject arbitrary web script or HTML via the catid parameter in a showcategory action to index.php...

Cross site scripting

Cross-site scripting XSS vulnerability in submitlink.php in Glitter Central Script allows remote attackers to inject arbitrary web script or HTML via the catid parameter...

CVE-2010-0320

Cross-site scripting XSS vulnerability in submitlink.php in Glitter Central Script allows remote attackers to inject arbitrary web script or HTML via the catid parameter...

CVE-2010-0320

The CVE-2010-0320 entry describes a Cross-site scripting (XSS) vulnerability in Glitter Central Script, specifically in submitlink.php where the catid parameter can be exploited to inject arbitrary web script or HTML. Affected component: Glitter Central Script, function/endpoint: submitlink.php, ...

DELTAScripts PHPLinks SQL Injection

/ Name : DELTAScripts PHPLinks Vuln : SQL Injection Author : Hamza 'MizoZ' N. Email : mizozxatgmaildotcom WebSite : www.greymen.org Greetz : Zuka, all friends & arab hackers / Vulnerability is in the $GET'catid' HOST/PATH/index.php?catid=8+union+all+select+1,2,3,4,5,6--...

DELTAScripts PHPLinks - catid SQL Injection

DELTAScripts PHPLinks - catid SQL Injection / Name : DELTAScripts PHPLinks Vuln : SQL Injection Author : Hamza 'MizoZ' N. Email : mizozxatgmaildotcom WebSite : www.greymen.org Greetz : Zuka, all friends & arab hackers / Vulnerability is in the $GET'catid'...

DELTAScripts PHPLinks - 'catid' SQL Injection

/ Name : DELTAScripts PHPLinks Vuln : SQL Injection Author : Hamza 'MizoZ' N. Email : mizozxatgmaildotcom WebSite : www.greymen.org Greetz : Zuka, all friends & arab hackers / Vulnerability is in the $GET'catid' http://server/PATH/index.php?catid=8+union+all+select+1,2,3,4,5,6--...

EasyGallery - catid Blind SQL Injection

EasyGallery - catid Blind SQL Injection Myiosoft easygallery catid Blind SQL Injection Vulnerability Author: Hussin X Home : www.IQ-TY.com MaiL : [email protected] script : http://myiosoft.com/?1.105.0.0 Exploit : true & false...

Joomla! Component com_kkcontent - Blind SQL Injection

Joomla! Component comkkcontent - Blind SQL Injection Joomla Component comkkcontent Blind SQL Injection Vulnerability Author : Pyske Home : www.cyber-warrior.org Greetz : Fl0riX , M-K-A and All Cyber-Warrior Name : comkkcontent Bug Type : Blind SQL Injection Infection : Admin login bilgileri...

Wbb3 - Blind SQL Injection

!/usr/bin/perl -w use strict; use LWP::Simple; $| = 1; print q ----------------------------------------------- Wbb3 Blind Sql Injection Injection in Announce Plugin Kleinanzeigen Markt Coded By Molli use: ano.pl url user id Announce Catid Google: "inurl:index.php?page=Announceshow" Special greetz...

Active Auction House 3.6 Blind SQL Injection

? ?????????????????????????In The Name Of Allah The Mercifull?????????????????????? ? Tybe: wishlist.asp catid Blind SQL Injection Vulnerability Vendor: www.activewebsoftwares.com Software: Active Auction House v 3.6 author: R3d-D3v!L Date: 17.dec.2009 T!ME: 10:06 pm ? Home: WwW.xP10.ME ? contact...

ActiveBuyandSell 6.2 - buyersend.asp?catid Blind SQL Injection

ActiveBuyandSell 6.2 - buyersend.asp?catid Blind SQL Injection ? ?????????????????????????In The Name Of Allah The Mercifull?????????????????????? ? Tybe: buyersend.asp catid Blind SQL Injection Vulnerability Vendor: :www.activewebsoftwares.com Software: ActiveBuyandSell v 6.2 author: R3d-D3v!L...

ActiveBuyandSell v6.2 (buyersend.asp catid) Blind SQL Injection

Exploit for unknown platform in category web applications ============================================================================= ActiveBuyandSell v6.2 buyersend.asp catid Blind SQL Injection Vulnerability ============================================================================= ?...

Sql injection

SQL injection vulnerability in classified.php in phpBazar 2.1.1fix and earlier allows remote attackers to execute arbitrary SQL commands via the catid parameter, a different vector than CVE-2008-3767...

CVE-2009-4221

SQL injection vulnerability in classified.php in phpBazar 2.1.1fix and earlier allows remote attackers to execute arbitrary SQL commands via the catid parameter, a different vector than CVE-2008-3767...