Symantec IM Manager LoggedInUsers.lgx Definition File SQL Injections (CVE-2010-0112)

Symantec IM Manager is a software-based proxy to secure, manage, and log IM messages for enterprise and public IM protocols. It provides real-time threat protection against IM viruses, worms, and other types of attacks delivered through IM messages. An SQL injection vulnerability has been reporte...

SQL Injection Vulnerability in TomatoCMS

High-Tech Bridge SA Security Research Lab has discovered vulnerability in TomatoCMS which could be exploited to execute arbitrary SQL commands in applications database. 1 SQL injection vulnerability in TomatoCMS An input validation error exists in the "q" parameter in /news/search. A remote...

Crea Blog Backup Disclosure

======================================================================================== | Title : Crea Blog = by Pass / Download Backup Vulnerability | Author : indoushka | email : [email protected] | Dork : Ce blog a été mis à disposition par CreaBlog | Tested on: windows SP2 Français V.Pnx...

Dvbbs 8.2 SQL injection 0day

DVBBS是一款由WWW.ASPSKY.NET开发和维护的开放源码Asp论坛程序。 Dvbbs 8.2 暂无 请参考官方补丁 www.dvbbs.net 发帖子，标题为下面的sql语句，然后点评论。0为中立, 1为支持, 2为反对 都行。 这时sql语句被执行 库名：a','',1,'akai','2008-2-4','',2;update//dvuser//set//useremail=dbname//where//username='akai'-- 复制代码加前台和后台管理员：a','',1,'akai','2008-2-4','',2;update dvuser set...

Dvbbs 8.2 SQL injection 0day-vulnerability warning-the black bar safety net

This vulnerability was first in the old General forum to see now online are published, the vulnerability is who found the I forget Use: Posting, the title for the following sql statement, and then comments. 0 for neutral, 1 for support, 2 for the opposition. At this time sql statement is executed...

phpCollegeExchange 0.1.5c Multiple SQL Injection Vulnerabilities

phpCollegeExchange 0.1.5c Multiple SQL Injection Vulnerabilities Name phpCollegeExchange Vendor http://phpcollegeex.sourceforge.net Versions Affected 0.1.5c Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact salvatorefresta at gmail dot com Date 2009-12-11 X...

eoCMS SQL injection vulnerability

No description provided by source. eoCMS SQL injection vulnerability 1. General information eoCMS is an open source code software which is used to develop Internet forum http://eocms.com/. On October 15, 2009, Bkis Security detected a SQL injection vulnerability in some functions of eoCMS. This i...

OCS Inventory NG 1.02 SQL Injection

OCS Inventory NG - Multiple SQL Injections May 30 2009 Product Open Computer and Software OCS Inventory NG http://www.ocsinventory-ng.org/ Vulnerable Versions OCS Inventory NG 1.02 Unix Vendor Status Vendor has been notified and the vulnerability has been fixed. Details The Open Computer and...

OCS Inventory NG 1.02 - Multiple SQL Injections

OCS Inventory NG 1.02 - Multiple SQL Injections OCS Inventory NG - Multiple SQL Injections May 30 2009 Product Open Computer and Software OCS Inventory NG http://www.ocsinventory-ng.org/ Vulnerable Versions OCS Inventory NG 1.02 Unix Vendor Status Vendor has been notified and the vulnerability ha...

Invision Power Board 'name'参数SQL注入漏洞

BUGTRAQ ID: 31288 CNCAN ID：CNCAN-2008092307 Invision Power Board是一款基于PHP的论坛程序。 Invision Power Board不正确处理用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，获得敏感信息或可操作数据库。 问题是脚本对'name'参数缺少过滤，构建恶意的SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息。 Invision Power Services Invision Power Board 2.3.5 Invision Power Services Invision Power Boa...

VHCS 2.4.7.1 - vhcs2_daemon Remote Code Execution

VHCS 2.4.7.1 - vhcs2daemon Remote Code Execution !/usr/bin/php -q http://acid-root.new.fr/ [email protected] Exploit: + Logged in Administrator + The administrator has 2 resellers / Changing dareseller's password / Trying to connect as dareseller:thatpwnz + Login successful + The reseller...

Cacti SQL注入漏洞

Cacti是一款基于PHP的WEB应用程序。 Cacti不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞进行SQL注入攻击，可获得敏感信息或操作数据库。 问题是由于脚本对用户提交的WEB参数缺少过滤，提交恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息或可能操作数据库。 Planet Technology WSW-2401 0.8.6 h Planet Technology WSW-2401 0.8.6 g Cacti Cacti 0.8.7 Cacti Cacti 0.8.6 fCacti Cacti 0.8.6 c Cacti Cacti 0.8.5 aCact...

CVE-2007-1603

admin/contest.php in Weekly Drawing Contest 0.0.1 allows remote attackers to bypass authentication, and insert new contest information into a database, via a direct POST request...

seditio110-sql.txt

--Security Report-- Advisory: Seditio http://www.victim.com/users.php?m=profile&a=avatarselect&x=XVALUE&id=default.gifSQL...

Invision Power Board 2.x.x < 04-25-06 Multiple Vulnerabilities

The installation of Invision Power Board on the remote host fails to sanitize input to the 'ck' parameter of the 'index.php' script before using it in database queries. An unauthenticated attacker may be able to leverage this issue to disclose sensitive information, modify data, or launch attacks...

ASP-Rider Default.asp SQL Injection

Vendor : http://www.asp-rider.com Vulnerable Versions : 1.6 Where is the bug ---------------------- in default.asp : refsss=splitrefererssss, "/",-1,1 refererdomain=refsss2 strsql="Select From tblrefererd where domain='" & refererdomain & "'" objrs.open strsql, objconn,3,3 ----------------------...

[HSC Security Group] SQL Injection in Product Cart 2.6

Hackers Center Security Group http://www.hackerscenter.com/ Zinho's Security Advisory Desc: SQL Injection in Product Cart 2.6 Risk: Medium to High An SQL injection affects Product Cart 2.6. Database Manipulation is possible. viewPrd.asp?idcategory=' Vendor: http://www.earlyimpact.com/ "Our...

pc26sql.txt

--Alt-Boundary-21084.11145145 Content-type: text/plain; charset=US-ASCII Content-transfer-encoding: 7BIT Content-description: Mail message body Hackers Center Security Group http://www.hackerscenter.com/ Zinho's Security Advisory Desc: SQL Injection in Product Cart 2.6 Risk: Medium to High An SQL...

waraxe-2005-SA042.txt

================================================================================ waraxe-2005-SA042 ================================================================================ Multiple vulnerabilities in Coppermine Photo Gallery 1.3.2...

[EXPL] Invision Power Board SQL Injection Vulnerability &#40;member_id, Exploit&#41;

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...