CVE-2008-5054

CVE-2008-5054 : Affects Develop It Easy Membership System 1.3. The vulnerability is a set of SQL injection flaws that allow remote attackers to execute arbitrary SQL commands by supplying crafted inputs to specific parameters: (1) email and (2) password in customer_login.php and (3) user_name and...

Unfixed XSS vulnerability at www.riviera24.it

Security researcher FullFreeez, has submitted on 13/11/2008 a cross-site-scripting XSS vulnerability affecting www.riviera24.it, which at the time of submission ranked 136897 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 14/09/2009. It is...

CVE-2008-5054: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Develop It Easy Membership System 1.3 allow remote attackers to execute arbitrary SQL commands via the 1 email and 2 password parameters to customerlogin.php and the 3 username and 4 userpass parameters to admin/index.php. NOTE: some of these details are...

MS08-069: Description of the security update for the 2007 Office suite: November 11, 2008

None None...

MS08-069: Description of the security update for XML Core Services 4.0: November 11, 2008

None None...

myevent-xss.txt

░░░▒▒▒▓▓▓▓█████████████████████████████████████████████████████▓▓▓▓▒▒▒░░░ ░░░▒▒▒▓▓▓▓ ▓▓▓▓▒▒▒░░░ ░░░▒▒▒▓▓▓▓ XSS Vulnerability ▓▓▓▓▒▒▒░░░ ░░░▒▒▒▓▓▓▓ myEvent viewevent.php XSS Vulnerability ▓▓▓▓▒▒▒░░░ ░░░▒▒▒▓▓▓▓ http://mywebland.com/ ▓▓▓▓▒▒▒░░░ ░░░▒▒▒▓▓▓▓ ▓▓▓▓▒▒▒░░░...

webnews-sql.txt

HACKATTACK Advisory 20081016WEB//NEWS SQL Injection and Cookie Manipulation Details ======= Product: WEB//NEWS Security-Risk: high Remote-Exploit: yes Vendor-URL: http://www.stylemotion.de/ Vendor-Status: informed Advisory-Status: published Credits ============ Discovered by: David Vieira-Kurz...

Attachmate Reflection for Secure IT UNIX server < 7.0 SP1 Multiple Vulnerabilities

The version of Attachmate Reflection for Secure IT UNIX server installed on the remote host is less than 7.0 SP1 and thus reportedly affected by several issues : - There is an inherited vulnerability in OpenSSL when parsing malformed ASN.1 structures leading to a denial of service vulnerability...

Attachmate Reflection for Secure IT UNIX Server < 7.0 SP1 Multiple Vulnerabilities

Binary data 4632.prm...

Request It 1.0 (index.php id) Remote File Inclusion Vulnerability

No description provided by source. Request It v1.0 Remote File Inclusion Vulnerability Ghost Hacker , R-h Team , Real Hack We Will Be Back Soon : Found by : Ghost Hacker |, .-. .-. ,| My Home : Real Hack We Will Be Back Soon & v4-Team.com | o/ \o | My Blog : http://gh0st10.wordpress.com |/ /\ | M...

requestit-rfi.txt

Request It v1.0 Remote File Inclusion Vulnerability Ghost Hacker , R-h Team , Real Hack We Will Be Back Soon : Found by : Ghost Hacker |, .-. .-. ,| My Home : Real Hack We Will Be Back Soon & v4-Team.com | o/ \o | My Blog : http://gh0st10.wordpress.com |/ /\ | My Email : [email protected]...

Dokeos E-Learning System 1.8.5 - Local File Inclusion

Digital Security Research Group DSecRG Advisory DSECRG-08-029 Application: Dokeos E-Learning System Versions Affected: 1.8.5 Vendor URL: http://dokeos.com/ Bug: Local File Include Exploits: YES Reported: 01.07.2008 Vendor response: 05.07.2008 Solution: YES Date of Public Advisory: 17.07.2008...

Many bugs on CMS system Piugame

Many bugs on CMS system Piugame http://www.piugame.com Researcher: Psymera 1.-Overview Piugame CMS is one system used for control and contac of Pump It up Gamers over the world and Metod of control for official tournamets over the wold 2.-Description This system has a vulnerabily as Sql Injection...

Code injection

Static code injection vulnerability in box/minichat/boxpop.php in IT!CMS aka itcms 1.9 allows remote attackers to inject arbitrary PHP code into box/MiniChat/data/shouts.php via the shout parameter...

CVE-2008-2192

Static code injection vulnerability in box/minichat/boxpop.php in IT!CMS aka itcms 1.9 allows remote attackers to inject arbitrary PHP code into box/MiniChat/data/shouts.php via the shout parameter...

CVE-2008-2192

Static code injection vulnerability in box/minichat/boxpop.php in IT!CMS aka itcms 1.9 allows remote attackers to inject arbitrary PHP code into box/MiniChat/data/shouts.php via the shout parameter...

CVE-2008-2192

CVE-2008-2192 affects IT!CMS (aka itcms) 1.9, specifically the box/minichat/boxpop.php component. The root cause is a static code injection vulnerability that allows remote attackers to inject arbitrary PHP code into box/MiniChat/data/shouts.php via the shout parameter. Connected sources consiste...

CVE-2008-2192: Improper Control of Generation of Code

Static code injection vulnerability in box/minichat/boxpop.php in IT!CMS aka itcms 1.9 allows remote attackers to inject arbitrary PHP code into box/MiniChat/data/shouts.php via the shout parameter...

Unfixed XSS vulnerability at www.dica33.it

Security researcher LadyViolet, has submitted on 05/11/2008 a cross-site-scripting XSS vulnerability affecting www.dica33.it, which at the time of submission ranked 46006 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/09/2009. It is current...

HispaH Model Search - cat.php?cat SQL Injection

HispaH Model Search - cat.php?cat SQL Injection Remote SQL Injection InjEctOr5 TeaM demo dork : find it exploit : http://www.site.me/cat.php?cat=sql injection example:here u can found an sql exploit ::: for admin inf0 :::...