321 matches found
Sql injection
SQL injection vulnerability in detail.php in Virtue Shopping Mall allows remote attackers to execute arbitrary SQL commands via the prodid parameter...
PT-2011-1846
Name of the Vulnerable Software and Affected Versions PHP Classifieds Ads affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the sid parameter in the "classi/detail.php" file. Recommendations At the moment, there i...
CVE-2010-4911: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in classi/detail.php in PHP Classifieds Ads allows remote attackers to execute arbitrary SQL commands via the sid parameter...
PT-2011-1843
Name of the Vulnerable Software and Affected Versions Virtue Shopping Mall affected versions not specified Description A SQL injection issue exists in the detail.php file of Virtue Shopping Mall, allowing remote attackers to execute arbitrary SQL commands by manipulating the prodid parameter in t...
CVE-2010-4908: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in detail.php in Virtue Shopping Mall allows remote attackers to execute arbitrary SQL commands via the prodid parameter...
Gap Infotech Team SQL Injection
Exploit Title: Gap Infotech Team SQL Injection Vulnerability -Google Dork-: "Powered by: Gap Infotech Team" Date: 2011-18-09 Author: nGa Sa Lu GaNgst3r Service Link: http://www.gapinfotech.com Tested on: Vista Platform : php Google Dork : "Powered by: Gap Infotech Team"...
Saudisoftech detail.php SQLInjection Vulnerability
Exploit for php platform in category web applications + Exploit Title: Saudisoftech detail.php SQLInjection Vulnerability + Data : 2011-04-25 + Author : Net.Edit0r + DisCovered By: 3H34N + E-mail : email protected and email protected + dork : "Designed By: SAUDI SOFTECH" id= + Versian : All Ver +...
Saudisoftech SQL Injection
Exploit Title: Saudisoftech detail.php SQLInjection Vulnerability + Data : 2011-04-25 + Author : Net.Edit0r + DisCovered By: 3H34N + E-mail : [email protected] and [email protected] + dork : "Designed By: SAUDI SOFTECH" id= + Versian : All Ver + Category : Web Apps SQl + My Home :...
Honey Soft Web Solution - Multiple Vulnerabilities
----------------------------------------------------------------------------------------- Honey Soft detail.php?proddetail= & products.php?catid= SQL-i/XSS Multiple Vulnerabilities -----------------------------------------------------------------------------------------...
PHP Classifieds ADS - sid Blind SQL Injection
PHP Classifieds ADS - sid Blind SQL Injection Title: PHP CLASSIFIEDS ADS Price: $49 Link : http://www.sellatsite.com/sellatsite/phpclass.asp Author: BorN To K!LL - h4ck3r 3xploit: /detail.php?sid=Blind-Injection 3xample: http://www.example.com/classi/detail.php?sid=80 and 1=1-- // True ,,...
Axis IT Group SQL Injection Vulnerability
Exploit for php platform in category web applications ========================================= Axis IT Group SQL Injection Vulnerability ========================================= Author :: DrgpxX Group :: Aras cyber Army Email :: email protected Discover :: 23 june 2010 Critical Lvl :: high...
Pre Multi-Vendor Shopping Malls SQL Injection Vulnerability
Exploit for php platform in category web applications =========================================================== Pre Multi-Vendor Shopping Malls SQL Injection Vulnerability =========================================================== Source: Pre Multi-Vendor Shopping Malls SQL Injection...
Webthaiapp Blind SQL Injection
--==+==================================================+==-- --==+ Webthaiapp detail.phpcat Blind Sql injection Vulnerability +==-- --==+==================================================+==-- Date : 30-04-2010 -=-=--=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= AUTHOR: Xeleno...
SiteDone Custom Edition 2.0 Cross Site Scripting / SQL Injection
SiteDone Custom Edition 2.0 SQL Injection & XSS Vulnerability http://www.sitedone.com ----------------------------------------------------------------------------------------------- Bug founded by d3v1l Avram Marius Date: 18.03.2010 http://security-sh3ll.blogspot.com...
SiteDone Custom Edition 2.0 SQL Injection & XSS Vulnerability
Exploit for unknown platform in category web applications ============================================================= SiteDone Custom Edition 2.0 SQL Injection & XSS Vulnerability ============================================================= SiteDone Custom Edition 2.0 SQL Injection & XSS...
SiteDone Custom Edition 2.0 - SQL Injection / Cross-Site Scripting
SiteDone Custom Edition 2.0 SQL Injection & XSS Vulnerability http://www.sitedone.com ----------------------------------------------------------------------------------------------- Bug founded by d3v1l Avram Marius Date: 18.03.2010 http://security-sh3ll.blogspot.com...
CVE-2009-4582: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in detail.php in the Dictionary module for XOOPS 2.0.18 allows remote attackers to execute arbitrary SQL commands via the id parameter...
XOOPS Module dictionary 2.0.18 (detail.php) SQL Injection Vulnerability
No description provided by source. !/usr/bin/env python coding: utf-8 from pocsuite.net import req from pocsuite.poc import POCBase, Output from pocsuite.utils import register import re class TestPOCPOCBase: vulID = '18845' ssvid version = '1.0' author = 'kikay' vulDate = '2009-12-30' createDate ...
XOOPS Dictionary 2.0.18 SQL Injection
XOOPS Module dictionary 2.0.18 detail.php SQL Injection Vulnerability XOOPS Version: XOOPS 2.0.18 http://www.xoops.org/modules/repository/ AUTHOR : Palyo34 HOME : http://www.1923turk.biz DORK : allinurl: "modules/dictionary/detail.php?id" EXPLOIT :...
XOOPS Module dictionary 2.0.18 - 'detail.php' SQL Injection
XOOPS Module dictionary 2.0.18 detail.php SQL Injection Vulnerability XOOPS Version: XOOPS 2.0.18 http://www.xoops.org/modules/repository/ AUTHOR : Palyo34 HOME : http://www.1923turk.biz DORK : allinurl: "modules/dictionary/detail.php?id" EXPLOIT :...