IPB (nv2) Awards 1.1.0 - SQL Injection

IPB nv2 Awards 1.1.0 - SQL Injection + + Author: fred777 - fred777.de + Link: http://forums.invisionize.com/nv2-Awards-120-t137847.html + Vuln: index.php?autocom=awards&do=view&id=1 + Greetzz to: Back2hack.cc + Contact: [email protected] + -- Vuln Code -- $this-ipsclass-DB-buildquery...

Sql injection

SQL injection vulnerability in the indianpulse Game Server comgameserver component 1.2 for Joomla! allows remote attackers to execute arbitrary SQL commands via the grp parameter in a gameserver action to index.php...

Sql injection

Multiple SQL injection vulnerabilities in NetArt Media Blog System 1.5 allow remote attackers to execute arbitrary SQL commands via the 1 cat parameter to index.php and the 2 note parameter to blog.php...

Novaboard 1.1.2 - SQL Injection

Novaboard 1.1.2 - SQL Injection NovaBoard v1.1.2 SQL Injection Vulnerability Plugin Home: http://www.novaboard.net/ Author: Delibey Site: www.1923turk.com Download Script : http://novaboard.googlecode.com/files/NovaBoard1.1.2.zip Exploit:...

Novaboard 1.1.2 - SQL Injection

NovaBoard v1.1.2 SQL Injection Vulnerability Plugin Home: http://www.novaboard.net/ Author: Delibey Site: www.1923turk.com Download Script : http://novaboard.googlecode.com/files/NovaBoard1.1.2.zip Exploit: index.php?page=search&topic=1&pf=1&search=xek&authorid=1&forums1923Turk=SQL-inj...

Joomla Gurujibook SQL Injection

/ Name : Joomla Component comgurujibook Vuln : SQL Injection vulnerability Author : Hamza 'MizoZ' N. Email : mizozxatgmaildotcom Greetz : Zuka , Grey Hat Hackers / SQLI HOST/PATH/index.php?option=comgurujibook&task=showPDF&bookid=-32+union+select+1,2,concatws0x3a,username,password,4+from+josusers...

Joomla IotaPhotoGallery SQL Injection

/ Name : Joomla Component comiotaPhotoGallery Vuln : SQL Injection vulnerability Author : Hamza 'MizoZ' N. Email : mizozxatgmaildotcom Greetz : Zuka , Grey Hat Hackers / SQLI...

Sql injection

SQL injection vulnerability in modules/arcade/index.php in PHP MySpace Gold Edition 8.0 and 8.10 allows remote attackers to execute arbitrary SQL commands via the gid parameter in a playgame action. NOTE: some of these details are obtained from third party information...

CVE-2010-0371

Affected software: Hitmaaan Gallery 1.3 (vulnerability in index.php). The flaw enables cross-site scripting (XSS) via the gall and levela parameters, allowing remote attackers to inject arbitrary web script or HTML. The NVD notes a medium base score (4.3, CVSS2) with no authentication needed and ...

Sql injection

SQL injection vulnerability in the updateOnePage function in components/combfsurveypro/controller.php in BF Survey Pro Free combfsurveyprofree 1.2.4, and other versions before 1.2.6, a component for Joomla!, allows remote attackers to execute arbitrary SQL commands via the table parameter in an...

CVE-2009-4625

The CVE-2009-4625 entry concerns BF Survey Pro Free (com_bfsurvey_profree) for Joomla! where the updateOnePage action (table parameter) is vulnerable to SQL injection. Affected versions include 1.2.4 and other versions prior to 1.2.6. The vulnerability arises from improper validation of the table...

CVE-2009-4620

SQL injection vulnerability in the Joomloc comjoomloc component 1.0 for Joomla allows remote attackers to execute arbitrary SQL commands via the id parameter in an edit task to index.php...

Joomla Component com_prime Directory Traversal

Exploit for unknown platform in category web applications ============================================== Joomla Component comprime Directory Traversal ============================================== @email protected @=Script : Joomla Component comprime @=Author : FL0RiX @=Bug Type : Directory...

Joomla Uploader Shell Upload

|| || | || o,7 || . o7 || 4||| ow, : / / . |-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=| | | | /' \ /'\ /\ \ /'\ /\ \ | | /, \ /\/\L\ \ \ \ ,/\ /\ \ \ \ / | | //\ \ /' \ /\ //\ team wlhaan hacker | | // | | |...

Joomla Component com_jeeventcalendar Local File Inclusion

Exploit for php platform in category web applications ========================================================= Joomla Component comjeeventcalendar Local File Inclusion ========================================================= Author : altbta Email? : l9athotmailatcom? Script : Joomla Component...

CVE-2010-0319

CVE-2010-0319 is a documented Cross-Site Scripting (XSS) vulnerability in Docmint 1.0 and 2.1, exploitable via the id parameter in index.php. The issue allows remote attackers to inject arbitrary web script or HTML. Multiple sources (NVD, CVE lists) corroborate the affected software and impact, w...

Sql injection

Multiple SQL injection vulnerabilities in index.php in PHP Inventory 1.2 allow 1 remote authenticated users to execute arbitrary SQL commands via the userid parameter in a users details action, and allow remote attackers to execute arbitrary SQL commands via the 2 user username and 3 pass passwor...

Sql injection

SQL injection vulnerability in index.php in PHP Inventory 1.2 allows remote authenticated users to execute arbitrary SQL commands via the supid parameter in a suppliers details action. NOTE: the provenance of this information is unknown; the details are obtained solely from third party informatio...

CVE-2009-4597

The CVE-2009-4597 entry covers SQL injection flaws in PHP Inventory (notably versions around 1.2/1.3.x) in index.php. The vulnerabilities allow SQL commands to be injected through user_id in a user details action, and through user/password fields, enabling unauthorized data access via poorly sani...

CMScontrol 7.x File Upload

Exploit for unknown platform in category web applications ========================== CMScontrol 7.x File Upload ========================== CMScontrol 7.x File Upload Author : Cyber945 Bug Type : File Upload Infection : Adminin bilgileri alinabilir. Dork : inurl:"index.php?idmenu="...