Autorank PHP SQL Injection Vulnerabilities

Vendor : JMB Software URL : http://www.jmbsoft.com Version : AutoRank PHP 2.0.4 && Others? Risk : SQL Injection Vulnerability Description: The description as taken from the Autorank website "AutoRank PHP is our next generation toplist software, written completely in PHP and backed by a MySQL...

Invision Power Board (IP.Board) 2.0 Alpha 3 - SQL Injection (PoC)

Invision Power Board IP.Board 2.0 Alpha 3 - SQL Injection PoC IP.Board SQL Injection Vendor: Invision Power Services Product: IP.Board Version: 0 OR pinned=1 ORDER BY pinned DESC,...

Vulnerabilities In Pablo Software Solutions FTP Service 1.2

Plaintext Password Vulnerability ------------------------------------ User info is stored in users.dat in plaintext. If the anonymous account is present it is by default the entire FTP server can be compromised ftp://somewhere/program files/pablo's ftp service/users.dat Default Anonymous Account...

MegaBrowser 0.71b - Multiple Vulnerabilities

MegaBrowser 0.71b - Multiple Vulnerabilities MegaBrowser Multiple Vulnerabilities Vendor: Quality Programming Corporation Product: MegaBrowser Version: = 0.71b Website: http://www.megabrowser.com BID: 7802 7803 Description: Megabrowser is a free standalone program that enables you to host website...

WinMX 2.6 - Design Error

WinMX 2.6 - Design Error WinMX Design Error Vendor: Frontcode Technologies Product: WinMX Version: = 2.6 Website: http://www.winmx.com/ BID: 7771 Description: WinMX 2.6 is an older version of the popular file sharing client WinMX. While the current version is 3.31, 2.6 still remains quite popular...

PAFileDB SQL Injection Vulnerability & Ratings Cheat Fix

I recently found out that someone I knew was running this vuln application. After informing them it was vuln they were dissapointed at the fact that they could no longer use the program as the author has not supplied a fix. Anyway, here is a quick fix i threw together to take care of the problem...

Invision Power Board Plaintext Password Disclosure Vuln

Invision Power Board Plaintext Password Disclosure Vuln ------------------------------------------------------- Version: All? Problem: Invision Power Board gives an admin the option to create a pass protected forum. The problem with this is that the password is then stored in the cookie fully...