CVE-2010-4986

The CVE-2010-4986 entry concerns the Simple Document Management System (SDMS). The affected component is the PHP page detail.php, where the doc_id parameter is vulnerable to SQL injection. Root cause: improper handling of user-supplied doc_id leading to arbitrary SQL execution. Documented impact ...

CVE-2010-4908

SQL injection vulnerability in detail.php in Virtue Shopping Mall allows remote attackers to execute arbitrary SQL commands via the prodid parameter...

Sql injection

SQL injection vulnerability in detail.php in Virtue Shopping Mall allows remote attackers to execute arbitrary SQL commands via the prodid parameter...

Gap Infotech Team SQL Injection

Exploit Title: Gap Infotech Team SQL Injection Vulnerability -Google Dork-: "Powered by: Gap Infotech Team" Date: 2011-18-09 Author: nGa Sa Lu GaNgst3r Service Link: http://www.gapinfotech.com Tested on: Vista Platform : php Google Dork : "Powered by: Gap Infotech Team"...

Saudisoftech detail.php SQLInjection Vulnerability

Exploit for php platform in category web applications + Exploit Title: Saudisoftech detail.php SQLInjection Vulnerability + Data : 2011-04-25 + Author : Net.Edit0r + DisCovered By: 3H34N + E-mail : email protected and email protected + dork : "Designed By: SAUDI SOFTECH" id= + Versian : All Ver +...

Saudisoftech SQL Injection

Exploit Title: Saudisoftech detail.php SQLInjection Vulnerability + Data : 2011-04-25 + Author : Net.Edit0r + DisCovered By: 3H34N + E-mail : [email protected] and [email protected] + dork : "Designed By: SAUDI SOFTECH" id= + Versian : All Ver + Category : Web Apps SQl + My Home :...

Honey Soft Web Solution - Multiple Vulnerabilities

----------------------------------------------------------------------------------------- Honey Soft detail.php?proddetail= & products.php?catid= SQL-i/XSS Multiple Vulnerabilities -----------------------------------------------------------------------------------------...

PHP Classifieds ADS - sid Blind SQL Injection

PHP Classifieds ADS - sid Blind SQL Injection Title: PHP CLASSIFIEDS ADS Price: $49 Link : http://www.sellatsite.com/sellatsite/phpclass.asp Author: BorN To K!LL - h4ck3r 3xploit: /detail.php?sid=Blind-Injection 3xample: http://www.example.com/classi/detail.php?sid=80 and 1=1-- // True ,,...

Axis IT Group SQL Injection Vulnerability

Exploit for php platform in category web applications ========================================= Axis IT Group SQL Injection Vulnerability ========================================= Author :: DrgpxX Group :: Aras cyber Army Email :: email protected Discover :: 23 june 2010 Critical Lvl :: high...

Pre Multi-Vendor Shopping Malls SQL Injection Vulnerability

Exploit for php platform in category web applications =========================================================== Pre Multi-Vendor Shopping Malls SQL Injection Vulnerability =========================================================== Source: Pre Multi-Vendor Shopping Malls SQL Injection...

Webthaiapp Blind SQL Injection

--==+==================================================+==-- --==+ Webthaiapp detail.phpcat Blind Sql injection Vulnerability +==-- --==+==================================================+==-- Date : 30-04-2010 -=-=--=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= AUTHOR: Xeleno...

SiteDone Custom Edition 2.0 Cross Site Scripting / SQL Injection

SiteDone Custom Edition 2.0 SQL Injection & XSS Vulnerability http://www.sitedone.com ----------------------------------------------------------------------------------------------- Bug founded by d3v1l Avram Marius Date: 18.03.2010 http://security-sh3ll.blogspot.com...

SiteDone Custom Edition 2.0 SQL Injection & XSS Vulnerability

Exploit for unknown platform in category web applications ============================================================= SiteDone Custom Edition 2.0 SQL Injection & XSS Vulnerability ============================================================= SiteDone Custom Edition 2.0 SQL Injection & XSS...

SiteDone Custom Edition 2.0 - SQL Injection / Cross-Site Scripting

SiteDone Custom Edition 2.0 SQL Injection & XSS Vulnerability http://www.sitedone.com ----------------------------------------------------------------------------------------------- Bug founded by d3v1l Avram Marius Date: 18.03.2010 http://security-sh3ll.blogspot.com...

XOOPS Module dictionary 2.0.18 - detail.php SQL Injection

XOOPS Module dictionary 2.0.18 - detail.php SQL Injection XOOPS Module dictionary 2.0.18 detail.php SQL Injection Vulnerability XOOPS Version: XOOPS 2.0.18 http://www.xoops.org/modules/repository/ AUTHOR : Palyo34 HOME : http://www.1923turk.biz DORK : allinurl: "modules/dictionary/detail.php?id"...

XOOPS Dictionary 2.0.18 SQL Injection

XOOPS Module dictionary 2.0.18 detail.php SQL Injection Vulnerability XOOPS Version: XOOPS 2.0.18 http://www.xoops.org/modules/repository/ AUTHOR : Palyo34 HOME : http://www.1923turk.biz DORK : allinurl: "modules/dictionary/detail.php?id" EXPLOIT :...

XOOPS Module dictionary 2.0.18 (detail.php) SQL Injection Vulnerability

No description provided by source. !/usr/bin/env python coding: utf-8 from pocsuite.net import req from pocsuite.poc import POCBase, Output from pocsuite.utils import register import re class TestPOCPOCBase: vulID = '18845' ssvid version = '1.0' author = 'kikay' vulDate = '2009-12-30' createDate ...

XOOPS Module dictionary 2.0.18 - 'detail.php' SQL Injection

XOOPS Module dictionary 2.0.18 detail.php SQL Injection Vulnerability XOOPS Version: XOOPS 2.0.18 http://www.xoops.org/modules/repository/ AUTHOR : Palyo34 HOME : http://www.1923turk.biz DORK : allinurl: "modules/dictionary/detail.php?id" EXPLOIT :...

Lizard Cart Multiple SQL Injection Exploit

No description provided by source. Exploit Title: Lizard Cart Multiple SQL Injection Exploit Date: 20-12-2009 Author: cr4wl3r Software Link: http://sourceforge.net/projects/lizardcart/ Version: N/A Tested on: GNU/LINUX Code detail.php $dbResult = mysqlquery"select from products where id='$id'"; P...

Lizard Cart Multiple SQL Injection Exploit

Exploit for unknown platform in category web applications ========================================== Lizard Cart Multiple SQL Injection Exploit ========================================== Exploit Title: Lizard Cart Multiple SQL Injection Exploit Date: 20-12-2009 Author: cr4wl3r Software Link:...