DELTAScripts PHP Classifieds 7.5 - SQL Injection

DELTAScripts PHP Classifieds 7.5 - SQL Injection deltascripts phpclassifieds Remote Sql inj. detail.php siteid ---------------------------------------------------------- Discovered By: ZoRLu Date: 06.11.2008 Home: www.z0rlu.blogspot.com contact: [email protected] N0T: YALNIZLIK, YiTiRDi ANLAMI...

WEBBDOMAIN WebShop 1.02 - SQL Injection Cross-Site Scripting

WEBBDOMAIN WebShop 1.02 - SQL Injection Cross-Site Scripting -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= IN THE NAME OF ALLAH -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=...

WEBBDOMAIN WebShop 1.02 (SQL/XSS) Multiple Vulnerabilities

Exploit for unknown platform in category web applications ========================================================== WEBBDOMAIN WebShop 1.02 SQL/XSS Multiple Vulnerabilities ==========================================================...

IranMC ( detail.php?Kala ) Remote SQL injection Vulnerability

IRANIAN THE BEST HACKERS IN THE WORLD Remote SQL injection Vulnerability IranMC detail.php Kala AuTh0r : Ehsanhp200 H0ME : www.only-4dl.tk Email : [email protected] Script : http://iranmc.org/index.php?id=7 Persian Gulf 4 Ever! Dork : inurl:detail.php?kala= Exploite:...

iranmcdetail-sql.txt

IRANIAN THE BEST HACKERS IN THE WORLD Remote SQL injection Vulnerability IranMC detail.php Kala AuTh0r : Ehsanhp200 H0ME : www.only-4dl.tk Email : [email protected] Script : http://iranmc.org/index.php?id=7 Persian Gulf 4 Ever! Dork : inurl:detail.php?kala= Exploite:...

AJ Auction Pro Platinum Skin #2 (detail.php item_id) SQL Injection ulnerability

No description provided by source. AJ Auction Pro Platinum Skin 2 detail.php itemid Remote SQL Injection Vulnerability POC : /detail.php?itemid=-1+UNION+SELECT+1,2,3,4,concatusername,0x3a,password, 6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35...

ajauctionpro-sql.txt

AJ Auction Pro Platinum Skin 2 detail.php itemid Remote SQL Injection Vulnerability POC : /detail.php?itemid=-1+UNION+SELECT+1,2,3,4,concatusername,0x3a,password, 6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35...

easyLink 1.1.0 (detail.php) Remote SQL Injection Vulnerability

No description provided by source. ================================================================================ easyLink V1.1.0 detail.php Remote SQL Injection Vulnerability ================================================================================ Discovered By: Egypt Coder home :...

easylink-sql.txt

================================================================================ easyLink V1.1.0 detail.php Remote SQL Injection Vulnerability ================================================================================ Discovered By: Egypt Coder home : WWW.Sec-Area.com Mail:...

easyLink 1.1.0 (detail.php) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================== easyLink 1.1.0 detail.php Remote SQL Injection Vulnerability ============================================================== Discovered By: Egypt Coder Dork: Engine powered by...

easyLink 1.1.0 - detail.php SQL Injection

easyLink 1.1.0 - detail.php SQL Injection ================================================================================ easyLink V1.1.0 detail.php Remote SQL Injection Vulnerability ================================================================================ Discovered By: Egypt Coder home...

Sql injection

Multiple SQL injection vulnerabilities in Mobius for Mimsy XG 1 1.4.4.1 and earlier allow remote attackers to execute arbitrary SQL commands via 1 the id parameter to browse.php or 2 the s parameter in an exhibitions action to detail.php...

Unfixed XSS vulnerability at www.mastrangelo.ca

Security researcher xylitol, has submitted on 28/07/2008 a cross-site-scripting XSS vulnerability affecting www.mastrangelo.ca, which at the time of submission ranked 13253478 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 29/07/2008. It is...

mobius-sql.txt

:::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ dunatstrcpy.pl Mobius = 1.4.4.1 Remote SQL Injection Vulnerability Script: Mobius Web Publishing Software Script site:...

Mobius <= 1.4.4.1 (browse.php id) Remote SQL Injection Vulnerability

No description provided by source. :::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ dunatstrcpy.pl Mobius = 1.4.4.1 Remote SQL Injection Vulnerability Script: Mobius Web Publishing Software Scrip...

Mobius 1.4.4.1 - SQL Injection

:::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ dunatstrcpy.pl Mobius = 1.4.4.1 Remote SQL Injection Vulnerability Script: Mobius Web Publishing Software Script site:...

Mobius 1.4.4.1 - SQL Injection

Mobius 1.4.4.1 - SQL Injection :::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ dunatstrcpy.pl Mobius = 1.4.4.1 Remote SQL Injection Vulnerability Script: Mobius Web Publishing Software Script...

ultrastats-blindsql.txt

!/usr/bin/perl use LWP::UserAgent; use Getopt::Long; ! Discovered.: DNX ! Vendor.....: http://www.shooter-szene.de | http://www.ultrastats.org ! Detected...: 29.06.2008 ! Reported...: 04.07.2008 ! Response...: xx.xx.2008 ! Background.: UltraStats is a very flexable log analyzing tool for Call of...

UltraStats 'players-detail.php' SQL注入漏洞

BUGTRAQ ID: 30212 CNCAN ID：CNCAN-2008071501 UltraStats是一款基于PHP的WEB应用程序。 UltraStats不正确处理用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，可能获得敏感信息或操作数据库。 问题由于'players-detail.php'脚本对用户提交给WEB参数缺少过滤，构建恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息或操作数据库。 UltraStats 0.2.142 目前没有解决方案提供：...

Ultrastats <= 0.2.142 (players-detail.php) Blind SQL Injection Exploit

No description provided by source. !/usr/bin/perl use LWP::UserAgent; use Getopt::Long; ! Discovered.: DNX ! Vendor.....: http://www.shooter-szene.de | http://www.ultrastats.org ! Detected...: 29.06.2008 ! Reported...: 04.07.2008 ! Response...: xx.xx.2008 ! Background.: UltraStats is a very...