CVE-2009-4987

CVE-2009-4987 affects Scripteen Free Image Hosting Script 2.3. The issue allows remote unauthenticated users to bypass authentication and gain administrative access by setting the cookgid cookie value to 1, a flow noted as a different vector from CVE-2008-3211. The available documents do not spec...

Hack Puts Spotlight on Malware's Long Tail: Parked Domains

They’re the dusty corners of the Web: so-called “parked” domains. But these little trafficked sites are attracting the attention of security experts, who say that it’s time for hosting firms and others that profit from them to clean up malware infections that may be exposing millions of Web users...

Network Solutions Malicious Widget May Date to January

usan Wade, Dir. of PR for Network Solutions, Herndon, Virginia. 703.668.5057 || Web hosting firm NetworkSolutions confirmed on Monday that it had unwittingly served up a malicious Web site widget on customers’ inactive or “parked” Web domains, but the company said that it still didn’t know how ma...

STC Hosting Script (id) Remote SQL Injection Vulnerability

Exploit for php platform in category web applications ========================================================== STC Hosting Script id Remote SQL Injection Vulnerability ========================================================== Author : KnocKout Thankz.: DaiMon,Equivalent Contact: email protecte...

Joomla Component com_emihost Persistent xss Vulnerability

Exploit for php platform in category web applications =============================================== Joomla comemihost Persistent xss Vulnerability =============================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0...

В Швеции появится первый в мире пиратский провайдер

Пиратская партия Швеции станет первым в мире "пиратским" интернет-провайдером, пишет TorentFreak. Партнером Пиратской партии по организации доступа пользователей в Сеть станет провайдер ViaEuropa. Предполагается, что новая компания PirateISP, во главе которой находится член Пиратской партии Густа...

REVISION: iScripts EasySnaps 2.0 Multiple SQL Injection Vulnerabilities

iScripts EasySnaps 2.0 Multiple SQL Injection Vulnerabilities Name iScripts EasySnaps Vendor http://www.iscripts.com Versions Affected 2.0 Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact salvatorefresta at gmail dot com Date 2010-01-07 X. INDEX I. ABOUT THE...

DXL dev Image Hosting => upload shell

Exploit for php platform in category web applications ===================================== DXL dev Image Hosting = upload shell ===================================== + Date: 02/07/2010 + Author: MeGo + Tested ON :windows xP + MY Team : Team Hacker Egypt + CategorY : Webapps/0day TYPE: PHP + Emai...

iScripts EasySnaps 2.0 SQL Injection

iScripts EasySnaps 2.0 Multiple SQL Injection Vulnerabilities Name iScripts EasySnaps Vendor http://www.iscripts.com Versions Affected 2.0 Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact salvatorefresta at gmail dot com Date 2010-01-07 X. INDEX I. ABOUT THE...

iScripts EasySnaps 2.0 Multiple SQL Injection Vulnerabilities

Exploit for php platform in category web applications ============================================================= iScripts EasySnaps 2.0 Multiple SQL Injection Vulnerabilities ============================================================= iScripts EasySnaps Multiple SQL Injection Vulnerabilities...

iScripts EasySnaps 2.0 - Multiple SQL Injections

iScripts EasySnaps 2.0 - Multiple SQL Injections iScripts EasySnaps 2.0 Multiple SQL Injection Vulnerabilities Name iScripts EasySnaps Vendor http://www.iscripts.com Versions Affected 2.0 Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact salvatorefresta at gmai...

iScripts EasySnaps 2.0 - Multiple SQL Injections

iScripts EasySnaps 2.0 Multiple SQL Injection Vulnerabilities Name iScripts EasySnaps Vendor http://www.iscripts.com Versions Affected 2.0 Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact salvatorefresta at gmail dot com Date 2010-01-07 X. INDEX I. ABOUT THE...

Joomla joomproperty XSS Vulnerability

Exploit for php platform in category web applications ===================================== Joomla joomproperty XSS Vulnerability ===================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /...

[slackware-security] seamonkey

New seamonkey packages are available for Slackware 12.2, 13.0, 13.1, and -current to fix security issues. Here are the details from the Slackware 13.1 ChangeLog: patches/packages/seamonkey-2.0.5-i486-1slack13.1.txz: Upgraded. This release fixes some more security vulnerabilities. For more...

CMS/Websites Designed By HYM SQL Injection

Exploit Title: SQLi to CMS/websites designed by HYM ================================================================ Websites designed or CMS provided by HYM is vulnerable to sqli. HYM is from 1998, they provide services in online tech and software.They provide CMS and Rankstinger...

Indelta Communication SQL Injection Vulnerability

Exploit for php platform in category web applications ================================================= Indelta Communication SQL Injection Vulnerability ================================================= Websites designed & Development by Indelta Communication, They also provide Hostings. Author:...

Jaydean CMS SQL Injection Vulnerability

Exploit for php platform in category web applications ======================================= Jaydean CMS SQL Injection Vulnerability ======================================= Exploit Title: SQLi to CMS/websites designed by Jaydean ================================================================...

webdesignsolutions SQL Injection Vulnerability

Exploit for php platform in category web applications ============================================== webdesignsolutions SQL Injection Vulnerability ============================================== Web Design Solution, offering a wide range of affordable Web Design, Logo Design, online shopping syst...

HYM CMS SQL Injection Vulnerability

Exploit for php platform in category web applications =================================== HYM CMS SQL Injection Vulnerability =================================== Exploit Title: SQLi to CMS/websites designed by HYM ================================================================ Websites designed ...

e2etech Design SQL Injection

======================================================================= e2etech Design SQL Injection Vulnerability ======================================================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, ...