1056 matches found
CVE-2014-4858
Multiple SQL injection vulnerabilities in CWPLogin.aspx in Sabre AirCentre Crew products 2010.2.12.20008 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 username or 2 password field...
CVE-2014-4858
CVE-2014-4858; Sabre AirCentre Crew solutions (version 2010.2.12.20008 and earlier) contain SQL injection vulnerabilities in CWPLogin.aspx, exploitable via the username or password fields. Underlying issue: CWE-89 Improper Neutralization of SQL commands. Impact: remote attacker may bypass authent...
Sabre AirCentre Crew solutions contain a SQL injection vulnerability
Overview Sabre AirCentre Crew solutions version 2010.2.12.20008 and earlier contain an SQL injection vulnerability. Description CWE-89: Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' Sabre AirCentre Crew solutions version 2010.2.12.20008 and earlier are...
SePortal 2.5 - SQL Injection Vulnerabilty
No description provided by source. Exploit: SePortal 2.5 Sql Injection Vulnerabilty Author: jsass Date : 19\03\2014 Contact Twitter: @Kwsecurity Script: http://www.seportal.org/ version: 2.5 Tested on: Linux Ubuntu 12.4 & Windows 7 Dork : Powered by SePortal 2.5 // Searching And Analysis By Kuwai...
PunBB Reputation.php Mod <= 2.0.4 - Blind SQL Injection Exploit
No description provided by source. !/usr/bin/perl 0-Day PunBB Reputation.php Mod = v2.0.4 Remote Blind SQL Injection Exploit Coded By Dante90, WaRWolFz Crew Bug Discovered By: Dante90, WaRWolFz Crew use strict; use LWP::UserAgent; use HTTP::Cookies; use HTTP::Request::Common; use Time::HiRes; use...
Linux x86 - execve /bin/sh - 21 bytes
No description provided by source. / execve /bin/sh - x86/linux - 21 bytes . zeroed argv / envp [email protected] [email protected] thanks : ivan, milo, oldschool crew / int main char sc = \x6a\x0b // push byte +0xb \x58 // pop eax \x99 // cdq \x52 // push edx...
Horde Help Viewer <= 3.1 - Remote Command Execution Exploit
No description provided by source. !/usr/bin/perl Wed Apr 5 21:51:12 CEST 2006 [email protected] Horde help module remote execution telnet 310.27.901.33.1109 1689 thanks horatio for the address USER paranoia PASS total SYST REST 100 REST 0 PWD TYPE A PASV LIST CWD 0days GET horddy.pl w0w this dam...
Ticimax E-Ticaret (SQL Injection)
No description provided by source. Exploit Title: Ticimax E-Ticaret SQL Injection Date: 01.06.2010 Author: Neuromancer Version: app version CVE : if exists Code : exploit code Author: Neuromancer contact : msnatneurom4ncerdotcom From : TURKEY Ticimax e-ticaret Kategori.asp, urundetay.aspLocal SQL...
Chilkat Socket activex 2.3.1.1 - Remote Arbitrary File Creation Exploit
No description provided by source. html titleChilkatSocket.DLL Arbitrary File Creation/titlebrbr body Company Name : Chilkat Software, Inc.brbr Vulnerable DLL : ChilkatSocket.DLLbrbr DLL's version : 2,3,1,1brbr Object Safety Report : br Report for Clsid: 474FCCCD-1B89-4D34-9E09-45807F23289Cbr...
Webcat Multiple Blind SQL Injection Vulnerabilities
No description provided by source. Exploit Title: Webcat - Two Blind SQL Injection Vulnerabilities Google Dork: allinurl: scwebcat/ecat/cmsview.php Date: 6/23/2011 Author: w0rd w0rdatNULL0x00.com Software Link: http://webcat.sourceforge.net/ Tested on: Linux/Windows 7 Vulnerable Parameters: webid...
phpBB Module NoMoKeTos Rules 0.0.1 - Remote File Include Exploit
No description provided by source. !/usr/bin/perl phpBB Module NoMoKeTos Rules 0.0.1 Remote File Include Exploit Coded by bd0rk || SOH-Crew Usage: exploit.pl target cmd shell shell variable Greetings: str0ke, TheJT, Kacper, Lu7k, Maik Vulnerable Code: includeonce$phpbbrootpath...
Joomla Component com_virtuemart 1.0 - SQL Injection Vulnerability (product_id)
No description provided by source. Title: Joomla Component comvirtuemart SQL injection vulnerability productid Author: SOA Crew a.k.a Neo-GabrieL [email protected] visit us: http://indonesianhacker.com/ / Software Information Vendor : http://virtuemart.net/ Download : - Version : 1.0...
gaestebuch 1.2 - Remote File Inclusion Vulnerability
No description provided by source. HINNENDAHL.COM Gaestebuch 1.2 Remote File Inclusion Vulnerability by bd0rk || SOH-Crew www.soh-crew.it.tt Contact: bd0rkathackermail.com Affected-Software: HINNENDAHL.COM Gaestebuch 1.2 Vendor: http://www.hinnendahl.com/ Download:...
Appointment Booking Pro Joomla Component LFI Vulnerability
No description provided by source. Appointment Booking Pro is a native Joomla component ================================= Last login: Tue Jun 7 2010 10:20:22 on ttys000 / / / / / / / / / / / / / : / / / / / / / / / / / / / / / | / / / / / / / / / / / / / // / // / / / / --X-- / / / / / / / /...
IAPR COMMENCE 1.3 - Multiple Remote File Inclusion Vulnerability
No description provided by source. iaprcommence 1.3 RFI --------------------- Author : ShAy6oOoN --------------------- Group : PitBull Crew --------------------- Script : iaprcommence 1.3 --------------------- Download :...
PunBB Affiliates Mod <= 1.1 - Remote Blind SQL Injection Exploit
No description provided by source. !/usr/bin/perl 0-Day PunBB Affiliations.php OUT Mod = v1.1 Remote Blind SQL Injection Exploit Coded By Dante90, WaRWolFz Crew Bug Discovered By: Dante90 & UltraSound, WaRWolFz Crew Product: http://www.punres.org/desc.php?pid=328 use strict; use LWP::UserAgent; u...
PunBB Automatic Image Upload <= 1.3.5 - Remote SQL Injection Exploit
No description provided by source. !/usr/bin/perl 0-Day PunBB Automatic Image Upload = v1.3.5 Remote SQL Injection Exploit Coded By Dante90, WaRWolFz Crew Bug Discovered By: Dante90, WaRWolFz Crew Works only if '$AllowStats = USERGROUP;' is not commented in uploadimgconfig.php FIND LINE: 75...
Oxygen2PHP <= 1.1.3 (member.php) SQL Injection Exploit
No description provided by source. !/usr/bin/perl 0-Day Oxygen2PHP = 1.1.3 member.php Remote SQL Injection Exploit Coded By Dante90, WaRWolFz Crew Bug Discovered By: Dante90, WaRWolFz Crew use LWP::UserAgent; use HTTP::Cookies; use strict; my $UserName = shift or usage; my $HostName =...
SazCart <= 1.5 (cart.php) Remote File Include Vulnerability
No description provided by source. sazcart v1.5 cart.php Remote File include ---Hitamputih crew--- Bug Found By : IbnuSina vendor : http://sazcart.com/site Risk : High Greetz : Solpot,permenhack,barbarosa,cah|gemblunkz,fungmen,setiawan,irvian,meteoroid and all member hitamputih crew community...
phpBB Static Topics <= 1.0 [phpbb_root_path] File Include Vulnerability
No description provided by source. --------------------------------------------------------------------------- phpBB Static Topics = 1.0 phpbbrootpath Remote File Include Vulnerability --------------------------------------------------------------------------- Discovered By Kw3RLn Romanian Securi...