1784 matches found
TheBlog 2.0 - Multiple Vulnerabilities
= 5, on SQL codes to insert, you must replace all: TYPE=MyISAM By: ENGINE=InnoDB -+- We discovered multiple vulnerabilities on this system. All in index.php, vars: SQL Injection index.php?id=sqli index.php?cat=sqli index.php?archives=sqli without "-" XSS Persistent stored When reading a post,...
PHPNet 1.8 SQL Injection
SQL Injection This exploit is for a vulnerability in ler.php, but are the same vulnerability on imprimir.php and imagem.php. ler.php?id=SQLi imprimir.php?id=SQLi imagem.php?id=SQLi Usage: php file.php http://server/path/ Login bypass In login page, you can bypass the login using "SQLi strings". G...
PHPNet 1.8 - ler.php SQL Injection
PHPNet 1.8 - ler.php SQL Injection SQL Injection This exploit is for a vulnerability in ler.php, but are the same vulnerability on imprimir.php and imagem.php. ler.php?id=SQLi imprimir.php?id=SQLi imagem.php?id=SQLi Usage: php file.php http://server/path/ Login bypass In login page, you can bypas...
SN News 1.2 SQL Injection
\n"; echo "Example:\n"; echo "php $argv0 http://www.website.com/snnews\n"; exit; $target = $argv1; ifsubstr$target, strlen$target-1!="/" $target .= "/"; $inject = $target . "visualiza.php?id=-0'%20"; $token = uniqid; $tokenhex = hex$token; echo " Trying to get informations...\n"; $infos =...
SN News 1.2 - visualiza.php SQL Injection
SN News 1.2 - visualiza.php SQL Injection \n"; echo "Example:\n"; echo "php $argv0 http://www.website.com/snnews\n"; exit; $target = $argv1; ifsubstr$target, strlen$target-1!="/" $target .= "/"; $inject = $target . "visualiza.php?id=-0'%20"; $token = uniqid; $tokenhex = hex$token; echo " Trying t...
SN News (visualiza.php) <= 1.2 SQL Injection Vulnerability
Exploit for php platform in category web applications \n"; echo "Example:\n"; echo "php $argv0 http://www.website.com/snnews\n"; exit; $target = $argv1; ifsubstr$target, strlen$target-1!="/" $target .= "/"; $inject = $target . "visualiza.php?id=-0'%20"; $token = uniqid; $tokenhex = hex$token; ech...
SN News 1.2 - 'visualiza.php' SQL Injection
\n"; echo "Example:\n"; echo "php $argv0 http://www.website.com/snnews\n"; exit; $target = $argv1; ifsubstr$target, strlen$target-1!="/" $target .= "/"; $inject = $target . "visualiza.php?id=-0'%20"; $token = uniqid; $tokenhex = hex$token; echo " Trying to get informations...\n"; $infos =...
Mnews 1.1 SQL injection
\n"; echo "Example:\n"; echo "php $argv0 http://www.website.com/mnews\n"; exit; $target = $argv1; ifsubstr$target, strlen$target-1!="/" $target .= "/"; $inject = $target . "view.php?id=-0'%20"; $token = uniqid; $tokenhex = hex$token; echo " Trying to get informations...\n"; $infos =...
Mnews 1.1 - 'view.php' SQL Injection
\n"; echo "Example:\n"; echo "php $argv0 http://www.website.com/mnews\n"; exit; $target = $argv1; ifsubstr$target, strlen$target-1!="/" $target .= "/"; $inject = $target . "view.php?id=-0'%20"; $token = uniqid; $tokenhex = hex$token; echo " Trying to get informations...\n"; $infos =...
NewsAdd <=1.0 Multiple SQL Injection Vulnerabilities
Exploit for php platform in category web applications Exploit Title: NewsAdd =1.0 Multiple SQL Injection Google Dork: ----------------------------------- Date: 2012/05/29 Author: WhiteCollarGroup Software Link: http://phpbrasil.com/script/3tCyUs1JeL1M/newsadd--mysql Version: 1.0 Tested on: Debian...
Jaow <= 2.4.5 blind and fix-vulnerability warning-the black bar safety net
Title: Jaow = 2.4.5 Blind Sql Injection Download address: http://www.jaow.net/telechargements/JaowV2.4.5.zip Affected version: 2.4.5 Test platform: Debian GNU/Linux Author: kallimero Description Jaow is a CMS that can manage sites of small sizes, thanks to its simple, commented code you can easil...
Jaow 2.4.5 - Blind SQL Injection
Exploit Title: Jaow = 2.4.5 Blind Sql Injection Google Dork: intext:"propuls� par jaow 2.4.5" Date: 23/05/2012 Software Link: http://www.jaow.net/telechargements/JaowV2.4.5.zip Version: 2.4.5 Tested on: Debian GNU/Linux Author: kallimero = Introduction = Jaow is a CMS that can manage sites of sma...
CVE-2012-2317
The Debian phpcryptrevamped.patch patch for PHP 5.3.x, as used in the php5 package before 5.3.3-7+squeeze4 in Debian GNU/Linux squeeze, the php5 package before 5.3.2-1ubuntu4.17 in Ubuntu 10.04 LTS, and the php5 package before 5.3.5-1ubuntu7.10 in Ubuntu 11.04, does not properly handle an empty...
CVE-2012-0216
The default configuration of the apache2 package in Debian GNU/Linux squeeze before 2.2.16-6+squeeze7, wheezy before 2.2.22-4, and sid before 2.2.22-4, when modphp or modrivet is used, provides example scripts under the doc/ URI, which might allow local users to conduct cross-site scripting XSS...
CVE-2012-0216
The default configuration of the apache2 package in Debian GNU/Linux squeeze before 2.2.16-6+squeeze7, wheezy before 2.2.22-4, and sid before 2.2.22-4, when modphp or modrivet is used, provides example scripts under the doc/ URI, which might allow local users to conduct cross-site scripting XSS...
CVE-2012-0216
The default configuration of the apache2 package in Debian GNU/Linux squeeze before 2.2.16-6+squeeze7, wheezy before 2.2.22-4, and sid before 2.2.22-4, when modphp or modrivet is used, provides example scripts under the doc/ URI, which might allow local users to conduct cross-site scripting XSS...
CVE-2012-0216
The CVE-2012-0216 entry concerns the Debian Apache2 package: when using mod_php or mod_rivet, the default config exposes example scripts under doc/ that can enable local XSS, privilege escalation, or information disclosure via localhost HTTP requests. Affected releases include Debian Squeeze (<...
CVE-2012-0216
The default configuration of the apache2 package in Debian GNU/Linux squeeze before 2.2.16-6+squeeze7, wheezy before 2.2.22-4, and sid before 2.2.22-4, when modphp or modrivet is used, provides example scripts under the doc/ URI, which might allow local users to conduct cross-site scripting XSS...
libpng chunk decompression integer overflow vulnerability
Overview The libpng library contains an integer overflow vulnerability that may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description The Portable Network Graphics PNG image format is used as an alternative to other image formats such as the Graphi...
PT-2012-1022
Name of the Vulnerable Software and Affected Versions CVS versions 1.11 through 1.12 Description The issue concerns multiple vulnerabilities in the CVS package of the Debian GNU/Linux operating system, which can be exploited remotely to compromise the confidentiality, integrity, and availability ...