Arabian Youtube Script Blind SQL Injection Vulnerability

Exploit for php platform in category web applications ======================================================== Arabian Youtube Script Blind SQL Injection Vulnerability ======================================================== =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-In The Name Of Allah The...

CVE-2010-4268

SQL injection vulnerability in the Pulse Infotech Flip Wall comflipwall component 1.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter to index.php...

Nuked-Klan Module Boutique Blind SQL Injection

Exploit for php platform in category web applications ============================================== Nuked-Klan Module Boutique Blind SQL Injection ============================================== Exploit Title: module boutique nuked klan Google Dork: inurl:index.php?file=Boutique Date: 15/11/2010...

PT-2010-5386

Name of the Vulnerable Software and Affected Versions Pulse Infotech Flip Wall com flipwall component version 1.1 for Joomla! Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the catid parameter in the "index.php" endpoint...

PT-2010-5390

Name of the Vulnerable Software and Affected Versions Pulse Infotech Sponsor Wall com sponsorwall component version 1.1 for Joomla! Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the catid parameter in the "index.php" endpoint...

CVE-2010-4268: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Pulse Infotech Flip Wall comflipwall component 1.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter to index.php...

CVE-2010-4272: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Pulse Infotech Sponsor Wall comsponsorwall component 1.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter to index.php...

Spaziottantotto Local File Inclusion

In The Name Of GOD + Exploit Title: spaziottantotto Local File Inclusion Vulnerability + Date: 2010-11-14 + Author : Cru3l.b0y + Software Link: http://spazio88.com/web.php + Price : 250 euro + Contact : [email protected] + Website : WwW.PenTesters.IR + Greeting: Behzad, Ahmad,...

Nuked-klaN Module Boutique - Blind SQL Injection

Nuked-klaN Module Boutique - Blind SQL Injection Exploit Title: module boutique nuked klan Google Dork: inurl:index.php?file=Boutique Date: 15/11/2010 Author: AR51Kevinos index.php?file=Boutique&op=cat&catid='...

Webmatic - 'index.php' SQL Injection

/ / / \ \ \ \ \ / / \\ \ \ \ \ // /// \ \ / / \ //|\ / \ \ \ \ \ \ / / \ \ / / \ | | | \ | | || | | |/ / \ V / || |\ V / / \ | / \ | /| | | || / | | | | . | ' || / | || // \ // \|||/|||||||||\ .WEB.ID ----------------------------------------------------------------------- Webmatic...

Joomla Component (com_markt) SQL Injection Vulnerability

No description provided by source. Joomla Component commarkt SQL Injection Vulnerability Author : CoBRa21 Dork : inurl:commarkt Sql Injection : http://localhost/path/index.php?option=commarkt&page=showcategory&catid=7+union+select+0,1,password,3,4,5,username,7,8+from+josusers-- Thanks...

PT-2010-5343

Name of the Vulnerable Software and Affected Versions Energine versions prior to 2.3.8 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the SQL injection vulnerability in the index.php file via the NRGNSID cookie. Recommendations For...

CVE-2010-4185: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in Energine, possibly 2.3.8 and earlier, allows remote attackers to execute arbitrary SQL commands via the NRGNSID cookie...

SQL injection in eoCMS

Vulnerability ID: HTB22675 Reference: http://www.htbridge.ch/advisory/sqlinjectionineocms.html Product: eoCMS Vendor: eocms.com http://eocms.com Vulnerable Version: 0.9.04 Vendor Notification: 21 October 2010 Vulnerability Type: SQL Injection Status: Not Fixed, Vendor Alerted, Awaiting Vendor...

CVE-2010-4155

Multiple cross-site scripting XSS vulnerabilities in eXV2 CMS 2.10 allow remote attackers to inject arbitrary web script or HTML via the 1 rssfeedURL parameter to manual/caferss/example.php and the sumb parameter to 2 modules/news/archive.php, 3 modules/news/topics.php, and 4...

PT-2010-5319

Name of the Vulnerable Software and Affected Versions Pentasoft Avactis Shopping Cart versions 1.9.1 build 8356 and earlier Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved by sending a malicious User-Agent header to specific API endpoints, suc...

CVE-2010-4147: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Pentasoft Avactis Shopping Cart 1.9.1 build 8356 free edition and earlier allow remote attackers to execute arbitrary SQL commands via the User-Agent header to 1 index.php and 2 product-list.php...

CVE-2010-4097

Multiple cross-site scripting XSS vulnerabilities in index.php in Aardvark Topsites PHP 5.2.0 and 5.2.1 allow remote attackers to inject arbitrary web script or HTML via the 1 mail, 2 title, 3 u, and 4 url parameters. NOTE: the q parameter is already covered by CVE-2009-2302...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in index.php in Aardvark Topsites PHP 5.2.0 and 5.2.1 allow remote attackers to inject arbitrary web script or HTML via the 1 mail, 2 title, 3 u, and 4 url parameters. NOTE: the q parameter is already covered by CVE-2009-2302...

Novaboard 1.1.4 - Local File Inclusion

Novaboard 1.1.4 - Local File Inclusion Vulnerability ID: HTB22657 Reference: http://www.htbridge.ch/advisory/lfiinnovaboard.html Product: Novaboard Vendor: Novaboard http://www.novaboard.net/ Vulnerable Version: 1.1.4 and probably prior versions Vendor Notification: 13 October 2010 Vulnerability...