snipe gallery Script Sql Injection Vulnerability

Exploit for php platform in category web applications ================================================ snipe gallery Script Sql Injection Vulnerability ================================================ Exploit Title: snipe gallery Script Sql Injection Date: 26/06/2010 Author: dev!l ghost Email:...

Axis IT Group SQL Injection Vulnerability

Exploit for php platform in category web applications ========================================= Axis IT Group SQL Injection Vulnerability ========================================= Author :: DrgpxX Group :: Aras cyber Army Email :: email protected Discover :: 23 june 2010 Critical Lvl :: high...

Cross-site Scripting (XSS) Vulnerabilities in CruxCMS

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in CruxCMS which could be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerability in CruxCMS: CVE-2008-0700 The vulnerability exists due to input sanitation error in the "search"...

Multiple Vulnerabilities in DBHcms

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in DBHcms which could be exploited to perform cross-site scripting and SQL injection attacks. 1 Cross-site scripting XSS vulnerabilities in DBHcms 1.1 The vulnerability exists due to input sanitation error in the...

Cross-site Request Forgery (CSRF) in Kryn.cms

High-Tech Bridge SA Security Research Lab has discovered vulnerability in Kryn.cms which could be exploited to perform cross-site request forgery attacks. 1 Cross-site Request Forgery CSRF in Kryn.cms The vulnerability exists due to insufficient validation of the request origin in...

Linux/x86-64 - Add root user with password - 390 bytes

No description provided by source. / Title: Linux/x86-64 - Add root user with password - 390 bytes Date: 2010-06-20 Tested: Archlinux x8664 k2.6.33 Author: Jonathan Salwan Web: http://shell-storm.org | http://twitter.com/shellstorm ! Dtabase of shellcodes http://www.shell-storm.org/shellcode/ Add...

MarketSaz Remote Shell Upload

========================================== MarketSaz remote file Upload Vulnerability ========================================== Exploit Title: MarketSaz remote file uploade Author: NetQurd [email protected] Dork : English = Powered MarketSaz Software Link: http://www.marketsaz.com Platform...

Turbo FTP Server 1.20.745 Directory Traversal

Date of Discovery: 17-Jun-2010 Credits: leinakesiatgmail.com Vendor: Turbo FTP Server Affected: Turbo FTP Server 1.20.745. Earlier versions may also be affected. Overview: 1.vendor description of software ------------------------------------------------ TurboFTP Server is a high performance,...

Cross-site Scripting (XSS) Vulnerabilities in odCMS

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in odCMS which could be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerability in odCMS 1.1 The vulnerability exists due to input sanitation error in the "content" parameter in...

Cross-site Scripting (XSS) Vulnerabilities in Scribe CMS

High-Tech Bridge SA Security Research Lab has discovered three vulnerabilities in Scribe CMS which could be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerability in Scribe CMS 1.1 The vulnerability exists due to input sanitation error in the “f” parameter in...

Advneced Management For Services Sites - File Disclosure

Advneced Management For Services Sites - File Disclosure ======================================================================= Advneced Management For Services Sites File Disclosure Vulnerabilities ======================================================================= Vendor:...

Cross-site Scripting (XSS) Vulnerabilities in synType CMS

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in synType CMS which could be exploited to perform cross-site scripting and script insertion attacks. 1 Cross-site scripting XSS vulnerability in synType CMS The vulnerability exists due to input sanitation error in...

Joomla ChronoForms Blind SQL Injection

Exploit Title: Joomla Component ChronoForms comchronocontact Date: 01, June 2010 Author: mlk Renan Software Link:0 Version: 0 Tested on: all OS CVE : 0 Code : here Joomla Component ChronoForms comchronocontact - Blind SQL Injection Vulnerability ! Discovered by : mlk Renan ! Teams : c00kies ,...

Joomla! Component ChronoForms - Blind SQL Injection

Joomla! Component ChronoForms - Blind SQL Injection Exploit Title: Joomla Component ChronoForms comchronocontact Date: 01, June 2010 Author: mlk Renan Software Link:0 Version: 0 Tested on: all OS CVE : 0 Code : here Joomla Component ChronoForms comchronocontact - Blind SQL Injection Vulnerability...

Joomla! Component ChronoForms - Blind SQL Injection

Exploit Title: Joomla Component ChronoForms comchronocontact Date: 01, June 2010 Author: mlk Renan Software Link:0 Version: 0 Tested on: all OS CVE : 0 Code : here Joomla Component ChronoForms comchronocontact - Blind SQL Injection Vulnerability ! Discovered by : mlk Renan ! Teams : c00kies ,...

Simpel Side - index2.php SQL Injection

Simpel Side - index2.php SQL Injection Tital : simpelside index2.php SQL Injection VulnerabilityEDB-ID: CVE-ID: OSVDB-ID: Author: MN9 Published: 2010-05-25 Verified: yes .. Author : MN9 .. Email : Mn9atLive.No .. Script Home : www.simpelside.dk .. Doork : : Exploit http://site/index2.php?id=2 SQL...

Website Design and Hosting By Netricks Inc - 'news.php' SQL Injection

@@@@@@@@@ @@@@@@@@ @@@@ @@@ @@@ @@@@@@@@ @@@@@@@@@@@@ @@@@@@@@@ @@@@@@@@ @@@@@@ @@@@@@ @@@@@@ @@@@@@@@ @@@@@@@ @@@ @@@ @@ @@ @@ @@ @@ @@ @@ @@ @@ @@@@@@ @@@ @@ @@ @@ @@ @@ @@ @@ @@ @@ @@@ @@@@@@ @@@@@@ @@ @@ @@ @@ - @@@@@@@ @@ @@@ @@@@@@ @@@@@@ @@ @@@@@ @@ - @@@@@@@ @@ @@@ @@ @@ @@ @@ @@ @@ @@ @@...

NeTricks CMS (news.php) SQL Injection Vulnerability

Exploit for php platform in category web applications =================================================== NeTricks CMS news.php SQL Injection Vulnerability =================================================== Name: Website Design and Hosting By Netricks, Inc. Date: 25-05-2010 vendor:...

Joomla Component com_extcalendar XSS Vulnerability

Exploit for php platform in category web applications ================================================== Joomla Component comextcalendar XSS Vulnerability ================================================== x Joomla Component Extcalendar x Author: s4r4d0 x Contact: email protected x Team; Fatal...

MOPS-2010-016: PHP ZEND_SR Opcode Interruption Address Information Leak Vulnerability

MOPS-2010-016: PHP ZENDSR Opcode Interruption Address Information Leak Vulnerability May 8th, 2010 PHP’s ZENDSR opcode can be abused for address information leak attacks by an userspace error handler interruption attack. Affected versions Affected is PHP 5.2 = 5.2.13 Affected is PHP 5.3 = 5.3.2...