43 matches found
eZoneScripts Hotornot2 Script - (Authentication Bypass) Multiple Remote Vulnerabilities
eZoneScripts Hotornot2 Script - Authentication Bypass Multiple Remote Vulnerabilities + Hotornot2 Script Remote apload Admin Bypass Vulnerability ===== ++ by sniper code++============================================ Author : sniper code S.C.T-443 website : www.sec-code.com...
eZoneScripts Hotornot2 Script (Admin Bypass) Multiple Remote Vulns
Exploit for unknown platform in category web applications ================================================================== eZoneScripts Hotornot2 Script Admin Bypass Multiple Remote Vulns ================================================================== + Hotornot2 Script Remote apload Admin...
eZoneScripts Hotornot2 Script - (Authentication Bypass) Multiple Remote Vulnerabilities
Hotornot2 Script Remote apload Admin Bypass Vulnerability ===== ++ by sniper code++============================================ Author : sniper code S.C.T-443 website : www.sec-code.com...
Cross site scripting
Cross-site scripting XSS vulnerability in listtest.php in eZoneScripts Living Local 1.1 allows remote attackers to inject arbitrary web script or HTML via the r parameter...
CVE-2008-6529
Cross-site scripting XSS vulnerability in listtest.php in eZoneScripts Living Local 1.1 allows remote attackers to inject arbitrary web script or HTML via the r parameter...
Unrestricted file upload
Unrestricted file upload vulnerability in editimage.php in eZoneScripts Living Local 1.1 allows remote authenticated administrators to execute arbitrary PHP code by uploading a file with an executable extension, then accessing it via a direct request to the uploaded file...
CVE-2008-6529
CVE-2008-6529 : The vulnerability is a cross-site scripting (XSS) flaw in listtest.php of eZoneScripts Living Local 1.1. The underlying issue is that an attacker can inject arbitrary web script or HTML via the r parameter. The entry shows a CVSSv2 base score of 4.3 (MEDIUM) with network attack ve...
CVE-2008-6530
The CVE-2008-6530 entry describes an Unrestricted file upload in editimage.php of eZoneScripts Living Local 1.1 . The vulnerability permits remote authenticated administrators to upload a file with an executable extension and then access it directly to execute arbitrary PHP code. This can comprom...
CVE-2008-6530
Unrestricted file upload vulnerability in editimage.php in eZoneScripts Living Local 1.1 allows remote authenticated administrators to execute arbitrary PHP code by uploading a file with an executable extension, then accessing it via a direct request to the uploaded file...
CVE-2008-6529
Cross-site scripting XSS vulnerability in listtest.php in eZoneScripts Living Local 1.1 allows remote attackers to inject arbitrary web script or HTML via the r parameter...
eZoneScripts (Multiple Scripts) - Insecure Cookie Authentication Bypass
source: https://www.securityfocus.com/bid/39912/info eZoneScripts Banner Exchange Website, Adult Banner Exchange Website, Apartment Search Script, phpMiniSite Script, and Classified Ultra Script are prone to an authentication-bypass vulnerability because they fail to adequately verify user-suppli...
eZoneScripts (Multiple Scripts) - Insecure Cookie Authentication Bypass
eZoneScripts Multiple Scripts - Insecure Cookie Authentication Bypass source: https://www.securityfocus.com/bid/39912/info eZoneScripts Banner Exchange Website, Adult Banner Exchange Website, Apartment Search Script, phpMiniSite Script, and Classified Ultra Script are prone to an...
Adult Banner Exchange Website - 'targetid' SQL Injection
| | | Adult Banner Exchange Website targetid Remote SQL Injection Vulnerability | | |-------------------- IQ-SecuritY ------------------- | | Author: Hussin X | | Home : WwW.IQ-ty.CoM | | email: darkangelg85atYahooDoTcom | | | | script :...
Link Trader (ratelink.php lnkid) Remote SQL Injection Vulnerability
No description provided by source. || | | Link Trader lnkid Remote SQL Injection Vulnerability | | |-------------------- Hussin X -------------------| | | Author: Hussin X | | Home : WwW.IQ-ty.CoM | | email: darkangelg85atYahooDoTcom | | | | | | | | script :...
Link Trader - lnkid SQL Injection
Link Trader - lnkid SQL Injection || | | Link Trader lnkid Remote SQL Injection Vulnerability | | |-------------------- Hussin X -------------------| | | Author: Hussin X | | Home : WwW.IQ-ty.CoM | | email: darkangelg85atYahooDoTcom | | | | | | | | script :...
Link Trader (ratelink.php lnkid) Remote SQL Injection Vulnerability
Exploit for unknown platform in category web applications =================================================================== Link Trader ratelink.php lnkid Remote SQL Injection Vulnerability =================================================================== || | | Link Trader lnkid Remote SQL...
abe-sql.txt
|| | | Adult Banner Exchange Website targetid Remote SQL Injection Vulnerability | | |---------------------Hussin X----------------------| | | Author: Hussin X | | Home : IQ-SecuritY www.IQ-tY.com | | email: darkangelg85atYahooDoTcom | | | | | | | script :...
CVE-2008-3943
SQL injection vulnerability in listtest.php in eZoneScripts Living Local 1.1 allows remote attackers to execute arbitrary SQL commands via the r parameter...
CVE-2008-3943
CVE-2008-3943 describes an SQL injection in listtest.php of the eZoneScripts Living Local 1.1 application, exploitable via the r parameter. Root cause: unsafely constructed SQL queries from user input leading to arbitrary SQL execution. Impact: partial confidentiality, integrity, and availability...
CVE-2008-3943
SQL injection vulnerability in listtest.php in eZoneScripts Living Local 1.1 allows remote attackers to execute arbitrary SQL commands via the r parameter...