Iciniti Store - SQL Injection

No description provided by source. Sense of Security - Security Advisory - SOS-12-003 Release Date. 06-Mar-2012 Last Update. - Vendor Notification Date. 28-Jul-2011 Product. Iciniti Store Platform. Windows Affected versions. 4.3.3683.31484 verified, and possibly others Severity Rating. High Impac...

OpenCart - Change User Password CSRF Vulnerability

No description provided by source. Exploit Title : OpenCart CSRF Date : 2013/4/2 Exploit Author : Saadat Ullah ? [email protected] Software Link : http://www.opencart.com/index.php?route=download/download : https://github.com/opencart Software web : www.opencart.com Author HomePage :...

MiniHttpServer Web Forum & File Sharing Server 4.0 Add User Exploit

No description provided by source. /================================================================ MiniHTTPServer.NET 's Web Forum & File Sharing Server Power Pack 4 latest version available for sale on their website http://www.minihttpserver.net/bbs/index.php has multiple vulnerabilities with...

PlaySMS <= 0.9.9.2 - CSRF

No description provided by source. Exploit Title : PlaySMS = 0.9.9.2 CSRF Date : 2013/12/9 Exploit Author : Saadat Ullah ? [email protected] Software Link : http://playsms.org/ Author HomePage: http://security-geeks.blogspot.com/ Tested on: Server : Apache/2.2.15 PHP/5.3.3 Cross-site...

Ziepod+ 1.0 Cross Application Scripting

No description provided by source. !/usr/bin/python import thread import socket |------------------------------------------------------------------| | | | / / / / | | / / / / / / / \ / / / / \ | | / // // / / / / / // / / / / / // / // / / / / / / | | /// //,// // //,// // // | | | |...

aoblogger 2.3 create.php Unauthenticated Entry Creation

No description provided by source. source: http://www.securityfocus.com/bid/16286/info AOblogger is prone to multiple input-validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Successful exploitation of these vulnerabilities...

E-Vendejo 0.2 Articles.PHP SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/26330/info E-Vendejo is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

Ripe Website Manager 0.8.x pages/delete_page.php id Parameter SQL Injection

No description provided by source. source: http://www.securityfocus.com/bid/25406/info Ripe Website Manager is prone to multiple input-validation vulnerabilities, including HTML- and SQL-injection issues. Exploiting these issues could allow an attacker to steal cookie-based authentication...

Soholaunch Pro <= 4.9 r36 Remote File Inclusion Vulnerabilities

\ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV57$2006 ----------------------------------------------------------------------------------------------- ECHOADV57$2006Soholaunch Pro =4.9 r36 Multiple Remote File Inclusion Vulnerability...

ProFTPD 1.3 'mod_sql' Username SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/33722/info ProFTPD is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to manipulate SQL...

IBM Algorithmics RICOS 4.5.0 < 4.7.0 - Multiple Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Multiple severe vulnerabilities product: IBM Algorithmics RICOS vulnerable version: 4.5.0 - 4.7.0 fixed version: 4.7.0.03 CV...

Motorola SBG901 Wireless Modem - CSRF Vulnerability

Exploit for hardware platform in category web applications Exploit Title : Motorola SBG901 Wireless Modem CSRF Vulnerability Google dork : N/A Exploit Author: Blessen Thomas Date : 06/01/2014 Vendor Homepage : http://www.arrisi.com/modems/ Software Link : N/A Version : Motorola SBG901 Wireless...

Motorola SBG901 Wireless Modem Cross Site Request Forgery

Exploit Title : Motorola SBG901 Wireless Modem CSRF Vulnerability Google dork : N/A Exploit Author: Blessen Thomas Date : 06/01/2014 Vendor Homepage : http://www.arrisi.com/modems/ Software Link : N/A Version : Motorola SBG901 Wireless modem Tested on : Windows 7 CVE : CVE-2014-3778 Type of...

ZeroCMS 1.0 (article_id) SQL Injection Vulnerability

Summary ZeroCMS is a very simple Content Management System built using PHP and MySQL. Description Input passed via the 'articleid' GET parameter to zeroviewarticle.php script is not properly sanitised before being used in SQL queries. This can be exploited to manipulate SQL queries by injecting...

Discuz blasting disregard CAPTCHA-vulnerability warning-the black bar safety net

? php classfuckdz publicfunctionsgk$user $a=filegetcontents"http://www.soyun.org/chaapi.php?so=$user&auto="; $a=iconv"UTF-8", "GB2312//IGNORE", $a; pregmatchall"/7%".& lt;/isU",$a,$arr; unset$arr0; foreach$arras$key=$r return$r; publicfunctiongetuid$host,$uid $ip= rand1 0 0, 2 4 4.'.'. rand1 0 0,...

CIS Manager 'email' Parameter SQL Injection Vulnerability

CIS Manager is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

74cms 逻辑漏洞导致sql注入2

简要描述： 74cmsv3.4.20140410逻辑漏洞导致sql注入 详细说明： /include/funpersonal.php346-373 $resumework=getresumework$uid,$pid; $resumetraining=getresumetraining$uid,$pid; $resumephoto=$resumebasic'photoimg'; if !empty$resumework$percent=$percent+13; if !empty$resumetraining$percent=$percent+13; if...

逐浪CMS SQL Update/CMS2 V1.3 V1.4 V1.5、 CMS6.0均受影响

简要描述： 话说 上次提交直接给忽略 那只好拿官方Demo做测试 另外此洞在2008年就已经存在 详细说明： 此问题为UPdate类型 文件 /user/usershop/StockList.aspx 问题参数 Item 问题代码如下 protected void Button3Clickobject sender, EventArgs e string text = base.Request.Form"Item"; if !string.IsNullOrEmptytext && this.bll.delstocktext------------------此处...

Oracle MySQL Multiple Unspecified vulnerabilities - 02 (May 2014) - Windows

Oracle MySQL is prone to multiple unspecified vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle MySQL Multiple Unspecified vulnerabilities - 01 (May 2014) - Windows

Oracle MySQL is prone to multiple unspecified vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...