CVE-2010-0802

The CVE-2010-0802 entry concerns the (nv2) Awards 1.1.0 modification for Invision Power Board. A vulnerability in index.php allows SQL injection via the id parameter in a view action, enabling remote attackers to execute arbitrary SQL commands. The issue affects the affected file/function and can...

Sql injection

SQL injection vulnerability in index.php in KuwaitPHP eSmile allows remote attackers to execute arbitrary SQL commands via the cid parameter in a show action...

Sql injection

SQL injection vulnerability in index.php in CommodityRentals CD Rental Software allows remote attackers to execute arbitrary SQL commands via the catid parameter in a catalog action...

CVE-2010-0764

CVE-2010-0764 describes a SQL injection in KuwaitPHP eSmile's index.php during the show action, exploitable via the cid parameter. The vulnerability allows remote attackers to execute arbitrary SQL commands. The provided documents confirm the affected component and the injection vector but do not...

phpMySite Cross Site Scripting / SQL Injection

================================================================= phpMySite XSS/SQLi Multiple Remote Vulnerabilities ================================================================= Author: Crux Homepage: http://hack-tech.com Date: 2-27-2010 Software Link: http://www.phpmysite.com/ Version: N/A...

Uiga Personal Portal index.php SQL Injection Vulnerability

Exploit for unknown platform in category web applications ========================================================== Uiga Personal Portal index.php SQL Injection Vulnerability ==========================================================...

Joomla! Component com_liveticker - Blind SQL Injection

!/usr/bin/php » Greetz to: Spécial His0k4 Tous les hackers Algérie » Dork: inurl:index.php?option=comliveticker "viewticker" Joomla comliveticker tid Blind SQL Injection Exploit x Usage: Snakespc.php "http://url/index.php?option=comliveticker&task=viewticker&tid=1" '; if $argc 1 $url = $argv1; $r...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php/Special/Main/Templates in WikyBlog 1.7.2 and 1.7.3 rc2 allows remote attackers to inject arbitrary web script or HTML via the which parameter in a copy action...

phpMySite - Cross-Site Scripting SQL Injection

phpMySite - Cross-Site Scripting SQL Injection ================================================================= phpMySite XSS/SQLi Multiple Remote Vulnerabilities ================================================================= Author: Crux Homepage: http://hack-tech.com Date: 2-27-2010 Softwar...

phpMySite (XSS/SQLi) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ==================================================== phpMySite XSS/SQLi Multiple Remote Vulnerabilities ==================================================== ================================================================= phpMySite XSS/SQ...

Jamit Job Board v.3.0 Cross Scripting Vulnerabilities

Exploit for unknown platform in category web applications ===================================================== Jamit Job Board v.3.0 Cross Scripting Vulnerabilities ===================================================== Jamit Job Board v.3.0 Cross Scripting Vulnerabilities + Exploit Title: Jamit...

Gravity Board X 2.0 Beta (Public Release 3) - SQL Injection

Gravity Board X 2.0 Beta Public Release 3 - SQL Injection !/usr/bin/perl Exploit Title: Gravity Board X 2.0 BETA Public Release 3 SQL INJECTION Date: 26.02.2010 Author: Ctacok Software Link: http://www.gravityboardx.com/ Version: 2.0 BETA Public Release 3 Tested on: Windows SP 3 Code : exploit co...

phpMySite - Cross-Site Scripting / SQL Injection

================================================================= phpMySite XSS/SQLi Multiple Remote Vulnerabilities ================================================================= Author: Crux Homepage: http://hack-tech.com Date: 2-27-2010 Software Link: http://www.phpmysite.com/ Version: N/A...

Joomla JoomlaConnect_be SQL Injection

!/usr/bin/php » Greetz to: Spécial His0k4 Tous les hackers Algérie » Dork: inurl:index.php?option=comjoomlaconnectbe Joomla comjoomlaconnectbe id Blind SQL Injection Exploit x Usage: joomla.php "http://url/index.php?option=comjoomlaconnectbe&Itemid=53&task=showBizPage&id=3 '; if $argc 1 $url =...

JavaPont Local File Inclusion

JavaPont SQL Injection LFI Vulnerability Author : Palyo34 Homepage : http://www.1923turk.com Vulnerable File index.php?module=search&q= XpL XpL ../../../../../../../../../../../../../../../etc/passwd%00 Demo...

LiveChatNow SQL Injection

Title: SQL injection vulnerability in LiveChatNow Date: 20.02.2010 Author: Ariko-Security Software Link: http://www.livechatnow.com/ Version: ALL Tested on: freebsd / ubuntu ============ Ariko-Security - Advisory 4/2/2010 ============= SQL injection vulnerability in LiveChatNow Vendor's Descripti...

GameScript 3.0 - SQL Injection

Author : FormatXformat Home : Tkurd.net Script : http://www.gamescript.net Vulnerabilities : SQL Injection Dork: Copyright © 2005 - 2006 GameScript.net. All Games Copyright © To Their Respective Owners. All Rights Reserved. Exploit:...

Sql injection

SQL injection vulnerability in index.php in CommodityRentals Video Games Rentals allows remote attackers to execute arbitrary SQL commands via the pfid parameter in a catalog action...

Sql injection

SQL injection vulnerability in index.php in Katalog Stron Hurricane 1.3.5, and possibly earlier, allows remote attackers to execute arbitrary SQL commands via the get parameter...

Directory traversal

Directory traversal vulnerability in index.php in ZeusCMS 0.2 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the page parameter...