Sql injection

Multiple SQL injection vulnerabilities in the Administrative Interface in the IIS extension in Symantec IM Manager before 8.4.16 allow remote attackers to execute arbitrary SQL commands via 1 the rdReport parameter to rdpageimlogic.aspx, related to the sGetDefinition function in rdServer.dll, and...

CVE-2010-0112

Multiple SQL injection vulnerabilities in the Administrative Interface in the IIS extension in Symantec IM Manager before 8.4.16 allow remote attackers to execute arbitrary SQL commands via 1 the rdReport parameter to rdpageimlogic.aspx, related to the sGetDefinition function in rdServer.dll, and...

CVE-2010-0112

CVE-2010-0112 — Symantec IM Manager before version 8.4.16 is affected by multiple SQL injection vulnerabilities in the Administrative Interface (IIS extension). The issues allow remote attackers to inject SQL via numerous parameters (e.g., rdReport, DetailReportGroup, SummaryReportGroup, LoggedIn...

Symantec IM Manager Administrative Interface SummaryReportGroup.lgx Definition File SQL Injection Vulnerabilities

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Symantec IM Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within the rdpageimlogic.aspx page which is exposed through an IIS extension on the defau...

Symantec IM Manager Administrative Interface IMAdminScheduleReport.asp SQL Injection Vulnerability

This vulnerability allows remote attackers to inject arbitrary SQL into the packaged database on vulnerable installations of Symantec IM Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within the Administrative interface installed with IM Manager...

Symantec IM Manager Administrative Interface DetailReportGroup.lgx Definition File SQL Injection Vulnerabilities

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Symantec IM Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within the rdPageImlogic.aspx page which is exposed through an IIS extension on the defau...

Symantec IM Manager Administrative Interface rdpageimlogic.aspx SQL Injection Vulnerabilities

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Symantec IM Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within the rdpageimlogic.aspx page which is exposed through an IIS extension on the defau...

Symantec IM Manager Administrative Interface IMAdminReportTrendFormRun.asp SQL Injection Vulnerability

This vulnerability allows remote attackers to inject arbitrary SQL into the packaged database on vulnerable installations of Symantec IM Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within the Administrative interface installed with IM Manager...

Symantec IM Manager Administrative Interface LoggedInUsers.lgx Definition File SQL Injection Vulnerabilities

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Symantec IM Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within the rdpageimlogic.aspx and rdPage.aspx pages which is exposed through an IIS...

Symantec IM Manager rdServer.dll sGetDefinition SQL Injection Vulnerability

This vulnerability allows remote attackers to inject arbitrary SQL into the backend database on vulnerable installations of Symantec IM Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within the IM Manager interface exposed by the web server which...

Barracuda Networks Multiple Products 'view_help.cgi' Directory Traversal Vulnerability

Multiple Barracuda Networks products are prone to a directory- traversal vulnerability because it fails to sufficiently sanitize user- supplied input. A remote attacker can exploit this vulnerability using directory- traversal characters '../' to access files that contain sensitive information th...

Joomla Restaurant Guide Cross Site Scripting / Local File Inclusion / SQL Injection

Exploit Title: Joomla Component comrestaurantguide Multiple Vulnerabilities Date: 18.09.2010 Author: Valentin Category: webapps/0day Version: 1.0.0 Tested on: Debian lenny, Apache2, MySQL 5, Joomla 1.5.x CVE : Code : :::::::::::::::::::::::::::::::::::::: 0x1 :::::::::::::::::::::::::::::::::::::...

Joomla GolfCourseGuide SQL Injection

Exploit Title: Joomla Component comgolfcourseguide SQL Injection Vulnerability Date: 23.07.2010 Author: Valentin Category: webapps/0day Version: v0.9.6.0 beta, v1 beta Tested on: CVE : Code : :::::::::::::::::::::::::::::::::::::: 0x1 :::::::::::::::::::::::::::::::::::::: General Information...

Joomla! Component Golf Course Guide 0.9.6.0 - SQL Injection

Joomla! Component Golf Course Guide 0.9.6.0 - SQL Injection Exploit Title: Joomla Component comgolfcourseguide SQL Injection Vulnerability Date: 23.07.2010 Author: Valentin Category: webapps/0day Version: v0.9.6.0 beta, v1 beta Tested on: CVE : Code : :::::::::::::::::::::::::::::::::::::: 0x1...

Joomla! Component Golf Course Guide 0.9.6.0 - SQL Injection

Exploit Title: Joomla Component comgolfcourseguide SQL Injection Vulnerability Date: 23.07.2010 Author: Valentin Category: webapps/0day Version: v0.9.6.0 beta, v1 beta Tested on: CVE : Code : :::::::::::::::::::::::::::::::::::::: 0x1 :::::::::::::::::::::::::::::::::::::: General Information...

Really Simple IM 1.3 Beta Denial Of Service

!/usr/bin/python import socket import sys Bug found: 18th July 2010 DoS proof of concept Found by: loneferret Tested on Windows XP Professional SP2-SP3 & Windows XP Home SP3 Really Simple IM verion 1.3 beta Software: http://code.google.com/p/reallysimpleim/ Nods to exploit-db I don't want this on...

Really Simple IM 1.3beta - Denial of Service (PoC)

Really Simple IM 1.3beta - Denial of Service PoC !/usr/bin/python import socket import sys Bug found: 18th July 2010 DoS proof of concept Found by: loneferret Tested on Windows XP Professional SP2-SP3 & Windows XP Home SP3 Really Simple IM verion 1.3 beta Software:...

Really Simple IM 1.3beta - Denial of Service (PoC)

!/usr/bin/python import socket import sys Bug found: 18th July 2010 DoS proof of concept Found by: loneferret Tested on Windows XP Professional SP2-SP3 & Windows XP Home SP3 Really Simple IM verion 1.3 beta Software: http://code.google.com/p/reallysimpleim/ Nods to exploit-db I don't want this on...

eLMS Pro SQL Injection / Cross Site Scripting

======================================= eLMS Pro SQLi and XSS Vulnerability ======================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database...

eLMS Pro SQLi and XSS Vulnerability

No description provided by source. Name : eLMS Pro SQLi and XSS Vulnerability Date : june, 9 2010 Vendor url :http://www.elmspro.com/elms/ Platform: Linux,Windows Price: AUD$450 Author : Sid3^effects aKa HaRi shellc99atyahoo.com special thanks to : r0073r inj3ct0r.com,L0rd CruSad3r,MaYur,gunsling...