CVE-2010-0677

CVE-2010-0677 affects the PHP-based system component “index.php” in the Katalog Stron Hurricane version 1.3.5 (and possibly earlier). The vulnerability is a SQL injection that allows remote attackers to execute arbitrary SQL commands through the HTTP GET parameter, enabling potential data disclos...

CVE-2010-0672

SQL injection vulnerability in index.php in WSN Guest 1.02 allows remote attackers to execute arbitrary SQL commands via the orderlinks parameter...

CVE-2010-0675

CVE-2010-0675 affects BGSvetionik BGS CMS 2.2.1. The vulnerability is a Cross-site Scripting (XSS) in index.php that allows remote attackers to inject arbitrary web script or HTML via the search parameter in a search action. Root cause is insufficient sanitization/validation of the search paramet...

CVE-2010-0672

Affected software: WSN Guest 1.02. The entry CVE-2010-0672 describes an SQL injection in index.php where the orderlinks parameter allows remote attackers to execute arbitrary SQL commands. The vulnerability is caused by unsafely handling user-supplied input in a web application component, enablin...

CVE-2010-0671

Summary of CVE-2010-0671 (normal mode): The vulnerability affects the KR MEDIA Pogodny CMS, specifically in the index.php handling of the niusy action. The root cause is improper handling of the id parameter, leading to an SQL injection that allows remote attackers to execute arbitrary SQL comman...

CubeCart (index.php) SQL Injection Vulnerability

No description provided by source. CubeCart index.php Sql Injection Vulnerability ============================================================== .:. Author : AtT4CKxT3rR0r1ST [email protected] .:. Team : Sec Attack Team .:. Home : www.sec-attack.com/vb .:. Script : http://www.cubecart.com/downloads/ .:...

CubeCart - index.php SQL Injection

CubeCart - index.php SQL Injection CubeCart index.php Sql Injection Vulnerability ============================================================== .:. Author : AtT4CKxT3rR0r1ST [email protected] .:. Team : Sec Attack Team .:. Home : www.sec-attack.com/vb .:. Script : http://www.cubecart.com/downloads/ .:...

CubeCart - 'index.php' SQL Injection

CubeCart index.php Sql Injection Vulnerability ============================================================== .:. Author : AtT4CKxT3rR0r1ST [email protected] .:. Team : Sec Attack Team .:. Home : www.sec-attack.com/vb .:. Script : http://www.cubecart.com/downloads/ .:. Dork : "powered by CubeCart"...

Mambo Component com_acnews [id] SQL Injection Vulnerability

No description provided by source. Author: Zero Bits & Xzit3 Team: Ro0T-MaFia Member's: Zero Bits, CMD, Jeferx, Xzit3, XP3RM4 & Jeferx Date: 15/02/2010 Contact: [email protected] - [email protected] Country: Venezuela - Mexico Vulnerability's: + SQL Injection: Error: You have an error...

Joomla com_flashmagazinedeluxe Remote Blind Sql Injection Vulnerability

Exploit for unknown platform in category web applications ======================================================================= Joomla comflashmagazinedeluxe Remote Blind Sql Injection Vulnerability ======================================================================= !/usr/bin/php 1 $url =...

Mambo Component 'com_acnews' - 'id' SQL Injection

Mambo Component comacnews id | SQL Injection Author: Zero Bits & Xzit3 Team: Ro0T-MaFia Member's: Zero Bits, CMD, Jeferx, Xzit3, XP3RM4 & Jeferx Date: 15/02/2010 Contact: [email protected] - [email protected] Country: Venezuela - Mexico Vulnerability's: + SQL Injection: Error: You hav...

WSN Guest 1.02 - orderlinks SQL Injection

WSN Guest 1.02 - orderlinks SQL Injection Author : Gamoscu Homepage : http://www.1923turk.com Blog : http://gamoscu.wordpress.com/ Script : WSN Guest 1.02 Download : http://scripts.webmastersite.net/wsnguest/wsnguest.zip Exploat :index.php?page=20&orderlinks=SQL...

WSN Guest 1.02 (orderlinks) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ======================================================= WSN Guest 1.02 orderlinks SQL Injection Vulnerability ======================================================= Author : Gamoscu Homepage : http://www.1923turk.com Blog :...

Sql injection

Multiple SQL injection vulnerabilities in index.php in Eicra Car Rental-Script, when the pluginid parameter is 4, allow remote attackers to execute arbitrary SQL commands via the 1 users username and 2 passwords parameters...

BaSiC-CMS SQL Injection / Cross Site Scripting

+===================================================================================+ ./SEC-R1Z / / / / /\ \ |/ / \ \ / / / / | | / | | / / \ / / / / | || / | | / / \ \ \ \2010 | \ | | / / / \ /\ / ||\ \ ||/ \ R.I.P MichaelJackson !!!!!...

CVE-2010-0608

SQL injection vulnerability in index.php in NovaBoard 1.1.2 allows remote attackers to execute arbitrary SQL commands via the forums parameter in a search action...

Video Games Rentals Script SQL Injection Vulnerability

Exploit for unknown platform in category web applications ====================================================== Video Games Rentals Script SQL Injection Vulnerability ====================================================== Exploit Title: video games rentals Script SQL injection Vulnerability Date...

eSmile Script - index.php SQL Injection

eSmile Script - index.php SQL Injection eSmile index.php Sql Injection Vulnerability ============================================================== .:. Author : AtT4CKxT3rR0r1ST [email protected] .:. Team : Sec Attack Team .:. Home : www.sec-attack.com/vb .:. Script : eSmile .:. Bug Type : Sql...

JaxCMS 1.0 - Local File Inclusion

JaxCMS 1.0 - Local File Inclusion / Name : JaxCMS p Local File Include WebSite : http://www.pixiescripts.com/ Author : Hamza 'MizoZ' N. Email : [email protected] Greetz : Zuka ! / The vulnerability is in the get $GET'p' , the index.php include '/pages/'.$GET'p'.'.php' So we can read any file in th...

Belkatalog CMS SQL Injection Vulnerability

No description provided by source. Title:Belkatalog CMS--- sql injection vulnerability Author:Teo Manojlovic Belkatalog CMS is comercial cms developed by croatian developer J. K. "Gašo" and it is vulnerable to sql injection vulnerability http://site.com/cms/index.php?id=m&lnk='sql injection here...