activeprice-blindsql.txt

----------------------------بسم الله الرحمن الرحيم------------------------------ Tybe:reviews.aspx ProductID Blind SQL Injection Vulnerability Vendor:www.activewebsoftwares.com Software: Active Price Comparison v 4 author: я3d D3v!L Date: 28.11.2008 Home: www.ahacker.biz contact: N/A...

Active Price Comparison v 4 (ProductID) Blind SQL Injection Vulnerability

Exploit for unknown platform in category web applications ========================================================================= Active Price Comparison v 4 ProductID Blind SQL Injection Vulnerability ========================================================================= Tybe:reviews.aspx...

Active Price Comparison v 4 (ProductID) Blind SQL Injection Vulnerability

No description provided by source. ----------------------------بسم الله الرحمن الرحيم------------------------------ Tybe:reviews.aspx ProductID Blind SQL Injection Vulnerability Vendor:www.activewebsoftwares.com Software: Active Price Comparison v 4 author: я3d D3v!L Date:...

Active Price Comparison 4 - 'ProductID' Blind SQL Injection

----------------------------بسم الله الرحمن الرحيم------------------------------ Tybe:reviews.aspx ProductID Blind SQL Injection Vulnerability Vendor:www.activewebsoftwares.com Software: Active Price Comparison v 4 author: я3d D3v!L Date: 28.11.2008 Home: www.ahacker.biz...

Active Price Comparison 4 - ProductID Blind SQL Injection

Active Price Comparison 4 - ProductID Blind SQL Injection ----------------------------بسم الله الرحمن الرحيم------------------------------ Tybe:reviews.aspx ProductID Blind SQL Injection Vulnerability Vendor:www.activewebsoftwares.com Software: Active Price Comparison v 4 autho...

Active Price Comparison 4 - ProductID Blind SQL Injection Vulnerability

Active Price Comparison v 4 ProductID Blind SQL Injection Vulnerability. CVE-2008-5638,CVE-2008-5975. Webapps exploit for php platform ----------------------------بسم الله الرحمن الرحيم------------------------------ Tybe:reviews.aspx ProductID Blind SQL Injection Vulnerability...

Active Price Comparison 4 (Auth Bypass) SQL Injection Vulnerability

Exploit for unknown platform in category web applications =================================================================== Active Price Comparison 4 Auth Bypass SQL Injection Vulnerability =================================================================== Tybe:Auth Bypass Remote SQL Injection...

Active Price Comparison 4 (Auth Bypass) SQL Injection Vulnerability

No description provided by source. ----------------------------بسم الله الرحمن الرحيم------------------------------ Tybe:Auth Bypass Remote SQL Injection Vulnerability Vendor:www.activewebsoftwares.com Software: Active Price Comparison v 4 author: я3d D3v!L Date: 28.11.2008...

Active Price Comparison 4 - Authentication Bypass

Active Price Comparison 4 - Authentication Bypass ----------------------------بسم الله الرحمن الرحيم------------------------------ Tybe:Auth Bypass Remote SQL Injection Vulnerability Vendor:www.activewebsoftwares.com Software: Active Price Comparison v 4 author: я3d D3v!L Date...

rakhi-sql.txt

■ Prince Comparison Script : Shopping card @.@ AuToR: XaDoS Contact M&: xados at hotmail dot it B§g: Remote Sql inJection SIte vuln: http://willscript.com/rjbikenew/index.php @.@ str0ke OnlY me no help for this ;- /...

Active Price Comparison 4 - Authentication Bypass

----------------------------بسم الله الرحمن الرحيم------------------------------ Tybe:Auth Bypass Remote SQL Injection Vulnerability Vendor:www.activewebsoftwares.com Software: Active Price Comparison v 4 author: я3d D3v!L Date: 28.11.2008 Home: www.ahacker.biz contact: N/A...

CVE-2008-4558

Array index error in VLC media player 0.9.2 allows remote attackers to overwrite arbitrary memory and execute arbitrary code via an XSPF playlist file with a negative identifier tag, which passes a signed comparison...

Code injection

Array index error in VLC media player 0.9.2 allows remote attackers to overwrite arbitrary memory and execute arbitrary code via an XSPF playlist file with a negative identifier tag, which passes a signed comparison...

CVE-2008-4359

lighttpd before 1.4.20 compares URIs to patterns in the 1 url.redirect and 2 url.rewrite configuration settings before performing URL decoding, which might allow remote attackers to bypass intended access restrictions, and obtain sensitive information or possibly modify data...

CVE-2008-4360

moduserdir in lighttpd before 1.4.20, when a case-insensitive operating system or filesystem is used, performs case-sensitive comparisons on filename components in configuration options, which might allow remote attackers to bypass intended access restrictions, as demonstrated by a request for a...

CVE-2008-4359

lighttpd before 1.4.20 compares URIs to patterns in the 1 url.redirect and 2 url.rewrite configuration settings before performing URL decoding, which might allow remote attackers to bypass intended access restrictions, and obtain sensitive information or possibly modify data...

CVE-2008-4359

lighttpd before 1.4.20 compares URIs to patterns in the 1 url.redirect and 2 url.rewrite configuration settings before performing URL decoding, which might allow remote attackers to bypass intended access restrictions, and obtain sensitive information or possibly modify data...

USN-646-1: rdesktop vulnerabilities

It was discovered that rdesktop did not properly validate the length of packet headers when processing RDP requests. If a user were tricked into connecting to a malicious server, an attacker could cause a denial of service or possible execute arbitrary code with the privileges of the user...

FreeBSD Security Advisory (FreeBSD-SA-06:25.kmem.asc)

The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-06:25.kmem.asc SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Comparison Engine Power 'product.detail.php' SQL注入漏洞

BUGTRAQ ID: 29768 CNCAN ID：CNCAN-2008061904 Comparison Engine Power是一款基于PHP的WEB应用程序。 Comparison Engine Power不正确处理用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，可能获得敏感信息或操作数据库。 问题是'product.detail.php'脚本对用户提交给WEB参数缺少过滤，构建恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息或操作数据库。 Kalptaru Infotech Comparison Engine Power 1.0 目前没有解决方案提供...