1397 matches found
ScriptMagix FAQ Builder <= 2.0 (index.php) Remote SQL Injection Exploit
No description provided by source. !/usr/bin/perl Script Name: ScriptMagix FAQ Builder = 2.0 index.php Remote Blind SQL Injection Exploit Coded by : ajann Author : ajann Contact : : S.Page : http://www.scriptmagix.com $$ : 50$ .. : ajann,Turkey use IO::Socket; if@ARGV 1 print "...
ScriptMagix FAQ Builder 2.0 - index.php SQL Injection
ScriptMagix FAQ Builder 2.0 - index.php SQL Injection !/usr/bin/perl Script Name: ScriptMagix FAQ Builder : "; $dir = ; chop $dir; if $dir = /exit/ print "-- Exploit FailedYou Are Exited \n"; exit; if $dir = /// else print "-- Exploit FailedNo DIR \n"; exit; $target =...
ScriptMagix FAQ Builder 2.0 - 'index.php' SQL Injection
!/usr/bin/perl Script Name: ScriptMagix FAQ Builder : "; $dir = ; chop $dir; if $dir = /exit/ print "-- Exploit FailedYou Are Exited \n"; exit; if $dir = /// else print "-- Exploit FailedNo DIR \n"; exit; $target =...
ScriptMagix FAQ Builder <= 2.0 (index.php) Remote SQL Injection Exploit
Exploit for unknown platform in category web applications ======================================================================= ScriptMagix FAQ Builder : "; $dir = ; chop $dir; if $dir = /exit/ print "-- Exploit FailedYou Are Exited \n"; exit; if $dir = /// else print "-- Exploit FailedNo DIR...
CVE-2006-7115
SQL injection vulnerability in PHPKit 1.6.1 RC2 allows remote attackers to inject arbitrary SQL commands via the catid parameter to include.php when the path parameter is set to faq/faq.php, and other unspecified vectors involving guestbook/print.php...
CVE-2007-0385
The faq section in PostNuke 0.764 allows remote attackers to obtain sensitive information the full path via "unvalidated output" in FAQ/index.php, possibly involving an undefined idcat variable...
Design/Logic Flaw
The faq section in PostNuke 0.764 allows remote attackers to obtain sensitive information the full path via "unvalidated output" in FAQ/index.php, possibly involving an undefined idcat variable...
CVE-2007-0385
The faq section in PostNuke 0.764 allows remote attackers to obtain sensitive information the full path via "unvalidated output" in FAQ/index.php, possibly involving an undefined idcat variable...
JetStat JS ASP Faq Manager SQL注入漏洞
JetStat JS ASP Faq Manager是一款基于PHP的FAQ管理程序。 JetStat JS ASP Faq Manager不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞进行SQL注入攻击，获得敏感信息。 问题是由于多个脚本对用户提交的WEB参数缺少过滤，提交恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息或操作数据库。 JetStat JS ASP Faq Manager 1.10 http://www.jetstat.com/asp/faq/...
Knusperleicht FAQ Script Index.PHP远程文件包含漏洞
Knusperleicht FAQ是一款基于PHP的FAQ管理程序。 Knusperleicht FAQ不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB进程权限执行任意命令。 问题是'index.php'脚本对用户提交的"faqpath"参数缺少过滤，提交恶意的远程服务器作为包含对象，可导致以WEB进程权限执行任意PHP代码。 Knusperleicht FAQ 1.0 http://knusperleicht.at/index.php?knuspi=phpecke...
JiRo's FAQ Manager Login.ASP SQL注入漏洞
JiRo's FAQ Manager是一款基于ASP的WEB应用程序。 JiRo's FAQ Manager不充分过滤用户提交的URI输入，远程攻击者可以利用漏洞进行SQL注入攻击，获得敏感信息。 问题是'Login.ASP'脚本对用户提交的'tid'参数缺少过滤，提交恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息。 JiRos FAQ Manager 1.0 目前没有解决方案提供： http://www.jiros.net/products/product.asp?pID=9...
CVE-2006-6149
SQL injection vulnerability in index.asp in JiRos FAQ Manager 1.0 allows remote attackers to execute arbitrary SQL commands via the tID parameter...
CVE-2006-6149
SQL injection vulnerability in index.asp in JiRos FAQ Manager 1.0 allows remote attackers to execute arbitrary SQL commands via the tID parameter...
CVE-2006-6149
CVE-2006-6149 affects JiRos FAQ Manager 1.0, where the vulnerability resides in the web-facing code: SQL injection via the tID parameter in index.asp. The underlying issue is improper input handling in the application that allows constructing and executing arbitrary SQL commands on the backend da...
JiRos FAQ Manager 1.0 (index.asp) Remote SQL Injection Vulnerability
No description provided by source. Title : JiRo?s FAQ Manager v1.0 index.asp Remote SQL Injection Vulnerability Author : ajann Contact : : http://target/path//index.asp?tID=SQL Example:...
JiRos FAQ Manager 1.0 (index.asp) Remote SQL Injection Vulnerability
Exploit for unknown platform in category web applications ==================================================================== JiRos FAQ Manager 1.0 index.asp Remote SQL Injection Vulnerability ==================================================================== Title : JiRois FAQ Manager v1.0...
JiRos FAQ Manager 1.0 - 'index.asp' SQL Injection
Title : JiRo´s FAQ Manager v1.0 index.asp Remote SQL Injection Vulnerability Author : ajann Contact : : http://target/path//index.asp?tID=SQL Example: //index.asp?tID=-1%20union%20select%200,uPassword,0,0,0,0,0,0,0,0,0,0,0,0%20from%20JFStblusers%20where%20no%20like%200...
JiRos FAQ Manager 1.0 - index.asp SQL Injection
JiRos FAQ Manager 1.0 - index.asp SQL Injection Title : JiRo´s FAQ Manager v1.0 index.asp Remote SQL Injection Vulnerability Author : ajann Contact : : http://target/path//index.asp?tID=SQL Example:...
Microsoft Security Bulletin MS06-071 Vulnerability in Microsoft XML Core Services Could Allow Remote Code Execution (928088)
Microsoft Security Bulletin MS06-071 Vulnerability in Microsoft XML Core Services Could Allow Remote Code Execution 928088 Published: November 14, 2006 Version: 1.0 Summary Who Should Read this Document: Customers who use Microsoft Windows and have installed Microsoft XML Core Services MSXML 4.0 ...