Ultrastats 0.2.142 - 'players-detail.php' Blind SQL Injection

!/usr/bin/perl use LWP::UserAgent; use Getopt::Long; ! Discovered.: DNX ! Vendor.....: http://www.shooter-szene.de | http://www.ultrastats.org ! Detected...: 29.06.2008 ! Reported...: 04.07.2008 ! Response...: xx.xx.2008 ! Background.: UltraStats is a very flexable log analyzing tool for Call of...

Ultrastats <= 0.2.142 (players-detail.php) Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ====================================================================== Ultrastats = 0.2.142 players-detail.php Blind SQL Injection Exploit ====================================================================== !/usr/bin/perl use...

CVE-2008-2790

SQL injection vulnerability in detail.php in MountainGrafix easyTrade 2.x allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-2277

CVE-2008-2277 describes an SQL injection in the web application module: a vulnerability in the file/function detail.php of the Feedback and Rating Script 1.0 . The flaw allows remote attackers to inject arbitrary SQL through the listingid parameter, potentially compromising database contents and ...

XOOPS Module Recipe (detail.php id) SQL Injection Vulnerability

No description provided by source. XOOPS Project-RecetteRecipe2.2 SQL Injection Vulnerability AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 MA脻L : [email protected] DORK 1 : allinurl :"modules/recipe" EXPLOIT :...

XOOPS Module Recipe (detail.php id) SQL Injection Vulnerability

Exploit for unknown platform in category web applications =============================================================== XOOPS Module Recipe detail.php id SQL Injection Vulnerability =============================================================== XOOPS Project-RecetteRecipe2.2 SQL Injection...

mcGallery 1.1 - detail.php?lang Cross-Site Scripting

mcGallery 1.1 - detail.php?lang Cross-Site Scripting source: https://www.securityfocus.com/bid/28587/info mcGallery is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary...

Sql injection

SQL injection vulnerability in detail.php in iTechBids Gold 6.0 allows remote attackers to execute arbitrary SQL commands via the itemid parameter...

CVE-2008-0776

SQL injection vulnerability in detail.php in iTechBids Gold 6.0 allows remote attackers to execute arbitrary SQL commands via the itemid parameter...

ITechBids 6.0 (detail.php item_id) SQL Injection Vulnerability

No description provided by source. ITechBids v.6.0 Gold Edition Sql Injection Exploit AUTHOR:SoSo H H Iraqi-Cracker Script Site: http://itechscripts.com/ Price:$125.00 Exploit in: detail.php?itemid==SQL Example:...

CVE-2008-0776

SQL injection vulnerability in detail.php in iTechBids Gold 6.0 allows remote attackers to execute arbitrary SQL commands via the itemid parameter...

itechbids60-sql.txt

ITechBids v.6.0 Gold Edition Sql Injection Exploit AUTHOR:SoSo H H Iraqi-Cracker Script Site: http://itechscripts.com/ Price:$125.00 Exploit in: detail.php?itemid==SQL Example:...

ITechBids 6.0 - item_id SQL Injection

ITechBids 6.0 - itemid SQL Injection ITechBids v.6.0 Gold Edition Sql Injection Exploit AUTHOR:SoSo H H Iraqi-Cracker Script Site: http://itechscripts.com/ Price:$125.00 Exploit in: detail.php?itemid==SQL Example:...

ITechBids 6.0 (detail.php item_id) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================== ITechBids 6.0 detail.php itemid SQL Injection Vulnerability ============================================================== ITechBids v.6.0 Gold Edition Sql Injection Exploit...

Astanda Directory Project 1.2 (link_id) SQL Injection Vulnerability

Exploit for unknown platform in category web applications =================================================================== Astanda Directory Project 1.2 linkid SQL Injection Vulnerability ===================================================================...

Scott Manktelow Design Stride 1.0 Courses - 'detail.php' Multiple SQL Injections

source: https://www.securityfocus.com/bid/26036/info Stride 1.0 Courses is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the application,...

mcLinksCounter 1.2 Remote File Include by iNs

App Name : mcLinksCounter 1.2 HomePage: http://www.phpforums.net Vuln type : Remote File Include RFI Vuln Discovered by : iNs BUG: on file stats.php ,login.php ,detail.php : include "$langfile"; PoC: http://www.site.com/path/stats.php?langfile=sH3lLz? iNs @ uNkn0wn.eu Gr33tz t0: uNkn0wn.eu - iD -...

Sql injection

SQL injection vulnerability in detail.php in Pre Shopping Mall 1.0 allows remote attackers to execute arbitrary SQL commands via the prodid parameter...

Pre Shopping Mall 1.0 Remote SQL Injection Vulnerability

No description provided by source. ============================================== Pre Shopping Mall v1.0 Remote SQL Injection ============================================== Found: Cyber-Security.org ============================================== Exploit:...

Pre Shopping Mall 1.0 Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ======================================================== Pre Shopping Mall 1.0 Remote SQL Injection Vulnerability ======================================================== ============================================== Pre Shopping Mall v1....