blogsite-sql.txt

--==+================================================================================+==-- --==+ BlogSite Professional SQL Injection Vulnerbility +==-- --==+================================================================================+==-- AUTHOR: t0pP8uZz & xprog SITE: N/A DORK:...

CVE-2007-3938: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in MAXdev MDPro MD-Pro 1.0.8x and earlier before 20070720 allows remote attackers to execute arbitrary SQL commands via the topicid parameter in a view action in the Topics module, a different vulnerability than CVE-2006-1676...

CVE-2007-3939: Undefined Security Weakness

SQL injection vulnerability in index.php in SpoonLabs Vivvo Article Management CMS aka phpWordPress CMS 3.4 and earlier allows remote attackers to execute arbitrary SQL commands via the category parameter...

CVE-2007-3942: Undefined Security Weakness

Directory traversal vulnerability in index.php in Simple Machines Forum SMF 1.1.3 allows remote attackers to include local files via unspecified vectors related to the sourcedir parameter or the actionArray hash. NOTE: CVE and multiple third parties dispute this vulnerability because both sourced...

Blog System 1.x - index.php?news_id SQL Injection

Blog System 1.x - index.php?newsid SQL Injection --==+================================================================================+==-- --==+ BlogSite Professional SQL Injection Vulnerbility +==-- --==+================================================================================+==-- AUTHO...

MD-Pro < 1.0.82 index.php topicid Parameter SQL Injection

Binary data 4143.prm...

Sql injection

Multiple SQL injection vulnerabilities in Bandersnatch 0.4 allow remote attackers to execute arbitrary SQL commands via the 1 date and 2 limit parameters to index.php, and other unspecified vectors...

CVE-2007-3909: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Bandersnatch 0.4 allow remote attackers to execute arbitrary SQL commands via the 1 date and 2 limit parameters to index.php, and other unspecified vectors...

LFI On SMF 1.1.3

LFI On SMF 1.1.3 Download Page http://www.simplemachines.org/download/ Error code in index.php line 334 requireonce$sourcedir . '/' . $actionArray$REQUEST'action'0; Happy hacking...

CVE-2007-3881

SQL injection vulnerability in index.php in Pictures Rating Picture Rating allows remote attackers to execute arbitrary SQL commands via the msgid parameter...

Sql injection

SQL injection vulnerability in index.php in Pictures Rating Picture Rating allows remote attackers to execute arbitrary SQL commands via the msgid parameter...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Insanely Simple Blog 0.5 and earlier allow remote attackers to inject arbitrary web script or HTML via 1 the search action, possibly related to the term parameter to index.php; or 2 an anonymous blog entry, possibly involving the a postedby, b...

CVE-2007-3882

SQL injection vulnerability in index.php in Expert Advisor allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

Multiple SQL injection vulnerabilities in Insanely Simple Blog 0.5 and earlier allow remote attackers to execute arbitrary SQL commands via the currentsubsection parameter to index.php and other unspecified vectors...

Sql injection

SQL injection vulnerability in index.php in Expert Advisor allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2007-3881

CVE-2007-3881 describes an SQL injection in index.php of Pictures Rating (Picture Rating). The vulnerability is exploitable via the msgid parameter, allowing remote attackers to execute arbitrary SQL commands. The associated metrics show a high base score (7.5, NETWORK attack vector, no authentic...

CVE-2007-3882

SQL injection vulnerability in index.php in Expert Advisor allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2007-3882

The CVE-2007-3882 entry affects the Expert Advisor software, with a SQL injection in index.php via the id parameter that enables remote execution of arbitrary SQL commands. The vulnerability is described plainly as SQL injection; no exploit details, affected versions, or concrete remediation step...

Vivvo CMS 3.4 - 'index.php' Blind SQL Injection

Vivvo CMS //'=============================================================================================== //'Script Name: Vivvo CMS = 3.4 index.php Remote BLIND SQL Injection Exploit //'Coded by : ajann //'Author : ajann //'Contact : : //'S.Page : http://www.vivvo.net/ //'$$ : $ 195 //'Using :...

Joomla Component Expose <= RC35 Remote File Upload Vulnerability

Exploit for unknown platform in category web applications ================================================================ Joomla Component Expose $targetpath = "../../../components/comexpose/expose/img/"; ++ ++ ifstrcasecmpsubstr$userfilename,-4,'.jpg' echo "alert'The file must be jpg';";++ ++...