litecommerce-sql.txt

litecommerce Copyright © 2004 - Remote SQL Injection Vendor : http://www.litecommerce.com/ Found By : k1tk4t - k1tk4t4tnewhack.org Location : Indonesia -- newhackdotorg @irc.dal.net Dork : Powered by LiteCommerce POC;...

litecommerce 2004 - category_id SQL Injection

litecommerce 2004 - categoryid SQL Injection litecommerce Copyright © 2004 - Remote SQL Injection Vendor : http://www.litecommerce.com/ Found By : k1tk4t - k1tk4t4tnewhack.org Location : Indonesia -- newhackdotorg @irc.dal.net Dork : Powered by LiteCommerce POC;...

Mambo Component SimpleFAQ 2.11 - SQL Injection

Mambo Component SimpleFAQ V2.11 - Remote SQL Injection Vendor : http://www.parkviewconsultants.com/ Found By : k1tk4t - k1tk4t4tnewhack.org Location : Indonesia -- newhackdotorg @irc.dal.net Dork : inurl:"index.php?option=comsimplefaq" exploit;...

Unfixed XSS vulnerability at www.xpmediacentre.com.au

Security researcher st@rext, has submitted on 08/10/2007 a cross-site-scripting XSS vulnerability affecting www.xpmediacentre.com.au, which at the time of submission ranked 135307 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/10/2007. It i...

auracms-sql.txt

AuraCMS Forum Module - Remote SQL Injection Vendor : http://auracms.org/ Download : http://iwan.or.id/redirect/download/36.html -- Forum Module Found By : k1tk4t - k1tk4t4tnewhack.org Location : Indonesia -- newhackdotorg @irc.dal.net Dork : inurl:"?pilih=forum" file; /forum/komentar.php bug at...

AuraCMS [Forum Module] Remote SQL Injection Vulnerability

No description provided by source. AuraCMS Forum Module - Remote SQL Injection Vendor : http://auracms.org/ Download : http://iwan.or.id/redirect/download/36.html -- Forum Module Found By : k1tk4t - k1tk4t4tnewhack.org Location : Indonesia -- newhackdotorg @irc.dal.net Dork : inurl:"?pilih=forum"...

AuraCMS [Forum Module] - Remote SQL Injection

AuraCMS Forum Module - Remote SQL Injection Vendor : http://auracms.org/ Download : http://iwan.or.id/redirect/download/36.html -- Forum Module Found By : k1tk4t - k1tk4t4tnewhack.org Location : Indonesia -- newhackdotorg @irc.dal.net Dork : inurl:"?pilih=forum" file; /forum/komentar.php bug at...

AuraCMS Forum Module - SQL Injection

AuraCMS Forum Module - SQL Injection AuraCMS Forum Module - Remote SQL Injection Vendor : http://auracms.org/ Download : http://iwan.or.id/redirect/download/36.html -- Forum Module Found By : k1tk4t - k1tk4t4tnewhack.org Location : Indonesia -- newhackdotorg @irc.dal.net Dork : inurl:"?pilih=foru...

AuraCMS Forum Module - SQL Injection

AuraCMS Forum Module - Remote SQL Injection Vendor : http://auracms.org/ Download : http://iwan.or.id/redirect/download/36.html -- Forum Module Found By : k1tk4t - k1tk4t4tnewhack.org Location : Indonesia -- newhackdotorg @irc.dal.net Dork : inurl:"?pilih=forum" file; /forum/komentar.php bug at...

commute-xss.txt

Aria-Security Tilte: community Cross-site Scripting XSS proof Of Concept : local/path/require/smallhead.php?retun=Xss-script...

[Aria-security] community Cross-site Scripting (XSS)

Aria-Security Tilte: community Cross-site Scripting XSS www.Aria-security.Com For English www.Aria-Security.net For Persian Author: YouYou Software: Commute The best community Site Script: http://sourceforge.net/projects/commutese/ proof Of Concept : local/path/require/smallhead.php?retun=Xss-scr...

CrystalPlayer 1.98 - .mls Local Buffer Overflow

CrystalPlayer 1.98 - .mls Local Buffer Overflow !/usr/bin/perl Crystal Player 1.98 Playlist.mls File Local Buffer Overflow Exploit Source:: http://www.crystalplayer.com/CrystalPro.exe Credit To Timq For The Vulnerability POC By Arham Muhammad While Debugging EIP And EBP Successfully Gets...

MySQL Community Server 5.0 < 5.0.45 Multiple Vulnerabilities

The version of MySQL Community Server installed on the remote host is reportedly affected by a denial of service vulnerability that can lead to a server crash with a specially crafted password packet. It is also affected by a privilege escalation vulnerability because 'CREATE TABLE LIKE' does not...

PR07-20: Webroot disclosure on Webbler CMS

PR07-20: Webroot disclosure on Webbler CMS This advisory has been published following consultation with UK CPNI formerly known as NISCC Date Found: 14th June 2007 Successfully tested on: Webbler CMS version 3.1.3. Earlier versions are possibly affected as well. Note: the version number is usually...

bwired - 'index.php?newsID' SQL Injection

/ \ / \ | | | | | | | | | | | / | | | | | | | ' / | | ' \ / \ | | | | || | || | | | \ | | | | / | , |/ /|| ||| |||| / | |/ Program Title bwired - Remote SQL Injection Note There is also XSS, PHPSESSID session fixation, and cookie manipulation which I will not go into.. The admin hash will be...

Code injection

MySQL Community Server before 5.0.45 allows remote attackers to cause a denial of service daemon crash via a malformed password packet in the connection protocol...

CVE-2007-3776

Cisco Unified Communications Manager CUCM, formerly CallManager and Unified Presence Server CUPS allow remote attackers to obtain sensitive information via unspecified vectors that reveal the SNMP community strings and configuration settings, aka 1 CSCsj20668 and 2 CSCsj25962...

CVE-2007-3780

MySQL Community Server before 5.0.45 allows remote attackers to cause a denial of service daemon crash via a malformed password packet in the connection protocol...

CVE-2007-3782

MySQL Community Server before 5.0.45 allows remote authenticated users to gain update privileges for a table in another database via a view that refers to this external table...

CVE-2007-3781

MySQL Community Server before 5.0.45 does not require privileges such as SELECT for the source table in a CREATE TABLE LIKE statement, which allows remote authenticated users to obtain sensitive information such as the table structure...