Online Community CMS by I-net - SQL Injection

Exploit Title: Online Community CMS by I-net SQL Injection Vulnerability Date: 16-03-2010 Author: Th3 RDX Software Link: www.i-netsolution.com/online-community-php-scripts.html Version: Tested on: Projects Made By Them category: webapp Code :...

ShortCMS 1.2.0 - SQL Injection

Informatique inside ShortCMS : SQL injection Version : 1.2.0 Last Version of 11/02/2010 and ALL version. Author : Thibow Contact : Thibow4tlinformatique-insidedotcom Location : France Website : http://www.informatique-inside.com Solution : Secure your parameters in printView page of News . : :::I...

Calendarix 0.8.20071118 - SQL Injection

Informatique inside Calendarix : SQL injection Version : 0.8.20071118 et infrieur Author : Thibow Contact : Thibow4tlinformatique-insidedotcom Location : France Website : http://www.informatique-inside.com Dork : "inurl:calday.php?op=day&catview=" Solution : Update: http://www.calendarix.com/ . :...

IBM DB2 'REPEAT()' Heap Buffer Overflow Vulnerability

The host is installed with IBM DB2 and is prone to Buffer Overflow vulnerability. OpenVAS Vulnerability Test $Id: gbibmdb2bofvulnlinfeb10.nasl 5306 2017-02-16 09:00:16Z teissa $ IBM DB2 'REPEAT' Heap Buffer Overflow Vulnerability Authors: Antu Sanadi Copyright: Copyright c 2010 Greenbone Networks...

TelebidAuctionScript Blind SQL Injection

TelebidauctionScriptaid Blind SQL Injection Vulnerability Author : Hussin X Home : www.IQ-TY.com email : [email protected] Vendor : http://www.telebidauctionscript.com/ Demo : http://server/allauctions.php?aid=2+and+1=1 true http://server/allauctions.php?aid=2+and+1=0 false :: Table ::...

PHP Live! 3.2.1/2 x Remote Blind SQL Injection Exploit

PHP Live! 3.2.1/2 x Remote Blind SQL Injection Exploit. Webapps exploit for php platform !/usr/bin/perl Original discover author banner PhpLive 3.2.1/2 x Blind SQL injection -X | |/ / || |/ | / | \ \ \ / / | \ / / \ | ' | | || | / | \ // / / / | , / ||\|||| ||| // // / // Red n'black i...

Fedora 9 : phpMyAdmin-3.2.0.1-1.fc9 (2009-7337)

The first security release for phpMyAdmin 3.2.0: - security XSS: Insufficient output sanitizing in bookmarks This version contains a number of small new features and some bug fixes: - core better support for vendor customisation based on what Debian needs - rfe warn when session.gcmaxlifetime is...

CVE-2009-2107

Multiple cross-site scripting XSS vulnerabilities in index.php in Webmedia Explorer webmex 5.09 and 5.10 allow remote attackers to inject arbitrary web script or HTML via event handlers such as onmouseover in the 1 search or 2 tag parameters; 3 arbitrary invalid parameter names that are not...

Mandriva Update for postgresql MDKSA-2007:037-1 (postgresql)

Check for the Version of postgresql OpenVAS Vulnerability Test Mandriva Update for postgresql MDKSA-2007:037-1 postgresql Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

Mandriva Update for postgresql MDKSA-2007:037-1 (postgresql)

Check for the Version of postgresql OpenVAS Vulnerability Test Mandriva Update for postgresql MDKSA-2007:037-1 postgresql Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

Ubuntu Update for postgresql-7.4/-8.0/-8.1 vulnerabilities USN-417-1

Ubuntu Update for Linux kernel vulnerabilities USN-417-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN4171.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for postgresql-7.4/-8.0/-8.1 vulnerabilities USN-417-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

smNews 1.0 Auth Bypass/Column Truncation Vulnerabilities

No description provided by source. 0x01 Informations: Name : smNews Download : http://downloads.sourceforge.net/simplequizz/simpleQuizz.zip?modtime=1229788692&bigmirror=0 Vulnerability : Auth Bypass/Column Truncation Author : x0r Contact : [email protected] Notes : Proud to be Italian // Greet...

smNews 1.0 Authentication Bypass

0x01 Informations: Name : smNews Download : http://downloads.sourceforge.net/simplequizz/simpleQuizz.zip?modtime=1229788692&bigmirror=0 Vulnerability : Auth Bypass/Column Truncation Author : x0r Contact : [email protected] Notes : Proud to be Italian // Greetz : Str0ke, 0x02 Bug: Bugged file i...

smNews 1.0 - Authentication Bypass Column Truncation

smNews 1.0 - Authentication Bypass Column Truncation 0x01 Informations: Name : smNews Download : http://downloads.sourceforge.net/simplequizz/simpleQuizz.zip?modtime=1229788692&bigmirror=0 Vulnerability : Auth Bypass/Column Truncation Author : x0r Contact : [email protected] Notes : Proud to b...

smNews 1.0 Auth Bypass/Column Truncation Vulnerabilities

Exploit for unknown platform in category web applications ======================================================== smNews 1.0 Auth Bypass/Column Truncation Vulnerabilities ======================================================== 0x01 Informations: Name : smNews Download :...

smNews 1.0 - Authentication Bypass / Column Truncation

0x01 Informations: Name : smNews Download : http://downloads.sourceforge.net/simplequizz/simpleQuizz.zip?modtime=1229788692&bigmirror=0 Vulnerability : Auth Bypass/Column Truncation Author : x0r Contact : [email protected] Notes : Proud to be Italian // Greetz : Str0ke, 0x02 Bug: Bugged file i...

CVE-2009-0261

Stack-based buffer overflow in EffectMatrix Total Video Player 1.31 allows user-assisted attackers to execute arbitrary code via a Skins\DefaultSkin\DefaultSkin.ini file with a large ColumnHeaderSpan value...

Virgin Media SQL Injection

----------------------------------------------------------------------------------------------- + Virginmedia.com suffers from a remote SQL injection vulnerability + Author: Rohit Bansal --------------------------------------------------------------------------------------- Host Information Serve...

CVE-2008-5847

Constructr CMS 3.02.5 and earlier stores passwords in cleartext in a MySQL database, which allows context-dependent attackers to obtain sensitive information by reading the hash column...

Design/Logic Flaw

Constructr CMS 3.02.5 and earlier stores passwords in cleartext in a MySQL database, which allows context-dependent attackers to obtain sensitive information by reading the hash column...