Sql injection

SQL injection vulnerability in countrydetails.php in Alibaba Clone B2B 3.4 allows remote attackers to execute arbitrary SQL commands via the esid parameter...

CVE-2010-4849

CVE-2010-4849 affects Alibaba Clone B2B 3.4, specifically the countrydetails.php component where the es_id parameter is vulnerable to SQL injection. The root cause is improper input handling that allows remote attackers to inject SQL commands, with potential impact on confidentiality, integrity, ...

CVE-2010-4849

SQL injection vulnerability in countrydetails.php in Alibaba Clone B2B 3.4 allows remote attackers to execute arbitrary SQL commands via the esid parameter...

Scriptlance Clone SQL Injection

Exploit Title: Scriptlance Clone SQL Injection Vulnerability Date: 21/07/2011 Author: Lazmania61 | Bug Researchers Demo : http://www.thewebcraft.com/scriptlanceclone Tested on: Windows 7 Greetz : HeRoTuRk ,Err0r , Darkknight , Bug Researchers Members...

kusaba x 0.9.1 - Multiple Vulnerabilities

kusaba x 0.9.1 - Multiple Vulnerabilities KusabaX XSS and CSRF Vulnerabilites Product: KusabaX and various Futaba channels clone Vendor site: http://kusabax.cultnet.net/ Affected versions: KusabaX " ----------------------------------------------------- Attackers can exploit these weaknesses to...

Ubuntu 9.10 / 10.04 LTS / 10.10 : linux, linux-ec2 vulnerabilities (USN-1041-1)

Ben Hawkes discovered that the Linux kernel did not correctly filter registers on 64bit kernels when performing 32bit system calls. On a 64bit system, a local attacker could manipulate 32bit system calls to gain root privileges. CVE-2010-3301 Dan Rosenberg discovered that the btrfs filesystem did...

Alibaba Clone B2B 3.4 SQL injection vulnerability-vulnerability warning-the black bar safety net

Alibaba Clone B2B is a B2B marketplace trading script, Alibaba Clone B2B 3.4 version of the countrydetails. php existsSQL injectionvulnerabilities that could lead to sensitive information disclosure. +info: Exploit Title:Alibaba v3. 4 clone b2bcountrydetails.php SQL Injection Vulnerability Date:...

Магические методы, сериализация, инъекции в сессию и все-все-все

==-1== Введение Изначально писал для себя, как небольшой сборник полезных идей, в итоге вылилось вот в такую статью. Особого опыта в написании публикаций у меня нет, так что ногами не пинать, я старался Перед переходом к практическим примерам рассмотрим теоретически основы используемых функций...

Alibaba Clone B2B 3.4 - SQL Injection

Exploit Title:Alibaba v3.4 clone b2bcountrydetails.php SQL Injection Vulnerability Date: 29.11.2010 Author: Dr.0rYX and Cr3w-DZ Category: webapps/0day . . \ \ /| | \ /|| / / /\ \ | | | | \ \ \ | \ \ |/ \ \ | | \ / \ | /| | | Y \ // / | \ | | / \ \ / \ || /\ /| || || / /\ / || ||\ / / / /...

PT-2010-4090 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 2.6.35 Description: The issue allows local users to overwrite an append-only file. This can be achieved via a BTRFS IOC CLONE or BTRFS IOC CLONE RANGE ioctl call that specifies the append-only file as a donor...

PT-2010-4091 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 2.6.35 Description: The issue is related to an integer overflow in the btrfs ioctl clone function, which might allow local users to obtain sensitive information. This can be achieved via a BTRFS IOC CLONE RANGE...

Debian DSA-2114-1 : git-core - buffer overflow

The Debian stable point release 5.0.6 included updated packages of the Git revision control system in order to fix a security issue. Unfortunately, the update introduced a regression which could make it impossible to clone or create Git repositories. This upgrade fixes this regression, which is...

OpenJDK Inflater/Deflater clone issues (6745393)

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.225, and 1.3.127 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than...

DSA-2083-1 moin - cross-site scripting

Bulletin has no description...

OpenJDK Inflater/Deflater clone issues (6745393)

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.225, and 1.3.127 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than...

ZeeMatri 3.x - Arbitrary File Upload

ZeeMatri 3.x - Arbitrary File Upload 1 1 0 I'm SONiC member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 Name : ZeeMatri v3x- Arbitrary file upload Vulnerability Date : july 23,2010 Critical Level :VERY HIGH vendor URL :?? http://www.zeeways.co...

ZeeMatri 3x Shell Upload

1 1 0 I'm SONiC member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 Name : ZeeMatri v3x- Arbitrary file upload Vulnerability Date : july 23,2010 Critical Level :VERY HIGH vendor URL :?? http://www.zeeways.com Author : ..:: SONiC ::.. aka...

ZeeMatri 3.x - Arbitrary File Upload

1 1 0 I'm SONiC member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 Name : ZeeMatri v3x- Arbitrary file upload Vulnerability Date : july 23,2010 Critical Level :VERY HIGH vendor URL :?? http://www.zeeways.com Author : ..:: SONiC ::.. aka...

ReVou MicroBlogging Script Auth Bypass Vulnerabilty

Exploit for php platform in category web applications =================================================== ReVou MicroBlogging Script Auth Bypass Vulnerabilty =================================================== Name : ReVou MicroBlogging Script Auth Bypass Vulnerabilty Date : july 6,2010 Critical...

eBay Clone Script 2010 SQL Injection

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : Inj3ct0r.com 0 1 + Support e-mail :...