CVE-2009-1741

CVE-2009-1741 relates to DM FileManager 3.9.2, where login.php contains multiple SQL injection vulnerabilities when magic_quotes_gpc is disabled. Remote attackers can cause arbitrary SQL execution via the (1) Username and (2) Password fields. The NVD notes a CVSSv2 base score of 6.8 (MEDIUM). No ...

DM FileManager 3.9.2 (Auth Bypass) SQL Injection Vulnerability

No description provided by source. -------------------------AllaH AkbaR------------------------------- dm-filemanager Auth Bypass Remote Sql Injection --------------------------------------------------------------------------- Discovered By: Snakespc ALGERIAN HaCkEr Mail: [email protected]...

DM FileManager 3.9.2 (Auth Bypass) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================== DM FileManager 3.9.2 Auth Bypass SQL Injection Vulnerability ==============================================================...

DM FileManager 3.9.2 - Authentication Bypass

DM FileManager 3.9.2 - Authentication Bypass -------------------------AllaH AkbaR------------------------------- dm-filemanager Auth Bypass Remote Sql Injection --------------------------------------------------------------------------- Discovered By: Snakespc ALGERIAN HaCkEr Mail:...

DM FileManager 3.9.2 - Authentication Bypass

-------------------------AllaH AkbaR------------------------------- dm-filemanager Auth Bypass Remote Sql Injection --------------------------------------------------------------------------- Discovered By: Snakespc ALGERIAN HaCkEr Mail: [email protected] Site:http://www.snakespc.com/sc/index.ph...

DM FileManager 3.9.2 SQL Injection

-------------------------AllaH AkbaR------------------------------- dm-filemanager Auth Bypass Remote Sql Injection --------------------------------------------------------------------------- Discovered By: Snakespc ALGERIAN HaCkEr Mail: [email protected] Site:http://www.snakespc.com/sc/index.ph...

Design/Logic Flaw

Algorithmic complexity vulnerability in the java.util.regex.Pattern.compile method in Sun Java Development Kit JDK before 1.6, when used with spring.jar in SpringSource Spring Framework 1.1.0 through 2.5.6 and 3.0.0.M1 through 3.0.0.M2 and dm Server 1.0.0 through 1.0.2, allows remote attackers to...

CVE-2009-1190

Algorithmic complexity vulnerability in the java.util.regex.Pattern.compile method in Sun Java Development Kit JDK before 1.6, when used with spring.jar in SpringSource Spring Framework 1.1.0 through 2.5.6 and 3.0.0.M1 through 3.0.0.M2 and dm Server 1.0.0 through 1.0.2, allows remote attackers to...

xen: insecure temporary file use in qemu-dm.debug

qemu-dm.debug in Xen 3.2.1 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/args temporary file...

Arbitrary file deletion

qemu-dm.debug in Xen 3.2.1 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/args temporary file...

Sql injection

SQL injection vulnerability in the xsstream-dm comxsstream-dm component 0.01 Beta for Joomla! allows remote attackers to execute arbitrary SQL commands via the movie parameter to index.php...

CVE-2008-2454

SQL injection vulnerability in the xsstream-dm comxsstream-dm component 0.01 Beta for Joomla! allows remote attackers to execute arbitrary SQL commands via the movie parameter to index.php...

CVE-2008-2454

CVE-2008-2454 affects the xsstream-dm (com_xsstream-dm) component for Joomla! prior to a fixed version, with a SQL injection in the movie parameter to index.php that allows remote execution of arbitrary SQL commands. Root cause is improper input handling in the affected component. The connected d...

CVE-2008-2454

SQL injection vulnerability in the xsstream-dm comxsstream-dm component 0.01 Beta for Joomla! allows remote attackers to execute arbitrary SQL commands via the movie parameter to index.php...

JP1/NETM/DM Manager SQL Injection Vulnerability

Overview JP1/NETM/DM Manager for Windows is vulnerable to SQL injection where a relational database is used as the JP1/NETM/DM database. This could allow attackers to execute arbitrary SQL command and/or corrupt database when it receives a malformed request. Impact An attacker could execute...

Joomla Component xsstream-dm 0.01 Beta SQL Injection

!/usr/bin/perl -w Joomla Component xsstream-dm 0.01 Beta Remote SQL Injection download : http://sstreamtv.com/index.php?option=comdocman&task=docdetails&gid=24 Founded by : Houssamix From H-T Team H-T Team HouSSaMix + ToXiC350 from MoroCCo Dork inurl:"index.php?option=comxsstream-dm" Greetz : CoN...

Joomla Component xsstream-dm 0.01b Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl -w Joomla Component xsstream-dm 0.01 Beta Remote SQL Injection Founded by : Houssamix From H-T Team H-T Team HouSSaMix + ToXiC350 from MoroCCo Contact: Ev!L Greetz : CoNaN & HaCkeREgY & All friends & All muslims HaCkeRs : ScriptName: "Joomla"...

joomlaxsstream-sql.txt

!/usr/bin/perl -w Joomla Component xsstream-dm 0.01 Beta Remote SQL Injection Founded by : Houssamix From H-T Team H-T Team HouSSaMix + ToXiC350 from MoroCCo Contact: Ev!L Greetz : CoNaN & HaCkeREgY & All friends & All muslims HaCkeRs : ScriptName: "Joomla" ComponentName: "xsstream-dm" 0.01 Beta...

Joomla Component xsstream-dm 0.01b Remote SQL Injection Exploit

Exploit for unknown platform in category web applications =============================================================== Joomla Component xsstream-dm 0.01b Remote SQL Injection Exploit =============================================================== !/usr/bin/perl -w Joomla Component xsstream-dm...

Joomla! Component xsstream-dm 0.01b - SQL Injection

!/usr/bin/perl -w Joomla Component xsstream-dm 0.01 Beta Remote SQL Injection Founded by : Houssamix From H-T Team H-T Team HouSSaMix + ToXiC350 from MoroCCo Contact: Ev!L Greetz : CoNaN & HaCkeREgY & All friends & All muslims HaCkeRs : ScriptName: "Joomla" ComponentName: "xsstream-dm" 0.01 Beta...