Simpel Side - index2.php SQL Injection

Simpel Side - index2.php SQL Injection Tital : simpelside index2.php SQL Injection VulnerabilityEDB-ID: CVE-ID: OSVDB-ID: Author: MN9 Published: 2010-05-25 Verified: yes .. Author : MN9 .. Email : Mn9atLive.No .. Script Home : www.simpelside.dk .. Doork : : Exploit http://site/index2.php?id=2 SQL...

Website Design and Hosting By Netricks Inc - 'news.php' SQL Injection

@@@@@@@@@ @@@@@@@@ @@@@ @@@ @@@ @@@@@@@@ @@@@@@@@@@@@ @@@@@@@@@ @@@@@@@@ @@@@@@ @@@@@@ @@@@@@ @@@@@@@@ @@@@@@@ @@@ @@@ @@ @@ @@ @@ @@ @@ @@ @@ @@ @@@@@@ @@@ @@ @@ @@ @@ @@ @@ @@ @@ @@ @@@ @@@@@@ @@@@@@ @@ @@ @@ @@ - @@@@@@@ @@ @@@ @@@@@@ @@@@@@ @@ @@@@@ @@ - @@@@@@@ @@ @@@ @@ @@ @@ @@ @@ @@ @@ @@...

NeTricks CMS (news.php) SQL Injection Vulnerability

Exploit for php platform in category web applications =================================================== NeTricks CMS news.php SQL Injection Vulnerability =================================================== Name: Website Design and Hosting By Netricks, Inc. Date: 25-05-2010 vendor:...

Joomla Component com_extcalendar XSS Vulnerability

Exploit for php platform in category web applications ================================================== Joomla Component comextcalendar XSS Vulnerability ================================================== x Joomla Component Extcalendar x Author: s4r4d0 x Contact: email protected x Team; Fatal...

MOPS-2010-016: PHP ZEND_SR Opcode Interruption Address Information Leak Vulnerability

MOPS-2010-016: PHP ZENDSR Opcode Interruption Address Information Leak Vulnerability May 8th, 2010 PHP’s ZENDSR opcode can be abused for address information leak attacks by an userspace error handler interruption attack. Affected versions Affected is PHP 5.2 = 5.2.13 Affected is PHP 5.3 = 5.3.2...

PHP-Nuke 5.0 viewslink SQL Injection

Exploit Title: PHP-NUKE viewslink Remote SQL Injection Date: 05.05.2010 Author: CMD Contact: [email protected] Version: PHP Nuke 5.0 and other version Dork: allinurl: op=viewslink&sid= =-==-==-==-==-==-==-==C==M==D==-==-==-==-==-==-==-==-==-==-==-= Tested on:...

Joomla Gallery SQL Injection

Exploit Title: Joomla Component comgallery SQL injection vulnerability Date: 02/05/2010 Author: HeaDShoT Software Link: Version: Tested on:linux bt CVE : Code : Email :pw7atlivedotfr dork :inurl:"comgallery" example: http://site.com/index.php?option=comgallery&id=sqli UNION SELECT...

Webthaiapp - 'detail.php?cat' Blind SQL Injection

--==+==================================================+==-- --==+ Webthaiapp detail.phpcat Blind Sql injection Vulnerability +==-- --==+==================================================+==-- Date : 30-04-2010 -=-=--=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= AUTHOR: Xeleno...

Webthaiapp Blind SQL Injection

--==+==================================================+==-- --==+ Webthaiapp detail.phpcat Blind Sql injection Vulnerability +==-- --==+==================================================+==-- Date : 30-04-2010 -=-=--=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= AUTHOR: Xeleno...

CMScout 2.08 SQL Injection

Title: CMScout 2.08 SQL Injection Vulnerability EDB-ID: CVE-ID: OSVDB-ID: Author: Dr.0rYX and Cr3w-DZ Published: Verified: Download Exploit Code Download N/A NNNN NNNN AAAAAA SSSSSSSS TTTTTTTTTTTT NNNNNN NNNN AAAAAA SSSSSSSSSSSS TTTTTTTTTTTT NNNNNN NNNN AAAA AAAA SSSS TTTT eeeeee aaaaaa mmmm mm...

Cross-site Scripting Vulnerability in Acuity CMS

High-Tech Bridge SA Security Research Lab has discovered a vulnerability in Acuity CMS which could be exploited to perform cross-site scripting XSS attacks. 1 Cross-site scripting vulnerability in Acuity CMS Input sanitation error was found in the "page" parameter in /admin/pages/addpage.asp. A...

Cross-site Scripting Vulnerability in ecoCMS

High-Tech Bridge SA Security Research Lab has discovered vulnerability in ecoCMS which could be exploited to perform cross-site scripting XSS attacks. 1 Cross-site scripting vulnerability in ecoCMS: CVE-2010-5046 Input validation error was found in the "p" parameter in /admin.php. A remote attack...

DEBIAN-CVE-2010-1163

The command matching functionality in sudo 1.6.8 through 1.7.2p5 does not properly handle when a file in the current working directory has the same name as a pseudo-command in the sudoers file and the PATH contains an entry for ".", which allows local users to execute arbitrary commands via a...

MediaInSpot CMS - Local File Inclusion (1)

Title : MediaInSpot CMS LFI Vulnerability Author: Amoo Arash Date : 2010-04-10 InformatioN Title : MediaInSpot CMS LFI Vulnerability Author : Amoo Arash ExploiT Vulnerable File : http://127.0.0.1/view/lang/index.php?page=?page=LFI ExploiT : ../../../../../../../etc/passwd Example :...

ttCMS 5 Remote File Inclusion

coded by ahmadbady //=========================================================================== // Topic : ttCMSv5 // Bug type : remote file include // Download : http://84.113.22.230:8980/archiv/entwickler/CMS/ttCMSv5.zip // Advisory :...

ms-sql-query NSE Script

Runs a query against Microsoft SQL Server ms-sql. SQL Server credentials required: Yes use ms-sql-brute, ms-sql-empty-password and/or mssql.username & mssql.password Run criteria: Host script: Will run if the mssql.instance-all, mssql.instance-name or mssql.instance-port script arguments are used...

INVOhost SQL Injection Vulnerability

Exploit for php platform in category web applications ==================================== INVOhost SQL Injection Vulnerability ==================================== Andr?s G?mez Exploit Title : INVOhost SQL Injection Author : Andres Gomez Software Link : http://www.invohost.com/ Contact :...

Online Shop Local File Inclusion Vulnerability

Exploit for unknown platform in category web applications ============================================== Online Shop Local File Inclusion Vulnerability ============================================== InformatioN Title : Online Shop Local File Inclusion Author : DevilZ TM By D3v1l Homepage :...

PHPCOIN 1.2.1 - mod.php Local File Inclusion

PHPCOIN 1.2.1 - mod.php Local File Inclusion Exploit Title: phpCOIN 1.2.1 mod.php LFI vulnerability Author: mlk Software Link: null Version: phpCOIN 1.2.1 Tested on: Linux,BSD and windows Code : on paper phpCOIN 1.2.1 mod.php Local File Inclusion Vulnerability + Discovered by : mlk + Teams :...

ldap-search NSE Script

Attempts to perform an LDAP search and returns all matches. If no username and password is supplied to the script the Nmap registry is consulted. If the ldap-brute script has been selected and it found a valid account, this account will be used. If not anonymous bind will be used as a last attemp...