186 matches found
Web Wiz Forums 8.05 (MySQL version) SQL Injection
There is a vulnerability in MySQL version of Web Wiz Forums, free ASP bulletin board system software, enabling SQL injection. The vulnerability is in the code used to filter string parameters prior to including them in the SQL queries: 'Format SQL Query funtion Private Function formatSQLInputByVa...
webwiz805-sql.txt
There is a vulnerability in MySQL version of Web Wiz Forums, free ASP bulletin board system software, enabling SQL injection. The vulnerability is in the code used to filter string parameters prior to including them in the SQL queries: 'Format SQL Query funtion Private Function formatSQLInputByVa...
wp-compromise.txt
While assessing the security of WordPress, a popular blog creation software, I have discovered that it's source code has recently been compromised by a third party in order to enable remote command execution on the machines running affected versions. The compromised files are wp-includes/feed.php...
WordPress source code compromised to enable remote code execution
While assessing the security of WordPress, a popular blog creation software, I have discovered that it's source code has recently been compromised by a third party in order to enable remote command execution on the machines running affected versions. The compromised files are wp-includes/feed.php...
[SA21207] SD Studio CMS SQL Injection Vulnerabilities
---------------------------------------------------------------------- Hardcore Disassembler / Reverse Engineer Wanted! Want to work with IDA and BinDiff? Want to write PoC's and Exploits? Your nationality is not important. We will get you a work permit, find an apartment, and offer a relocation...
Microsoft IIS/5.0 Content-Length DoS (proved)
Well, finally I have done testing about and I have made a 1gb RAM server to get Out Of Virtual Memory and basically unusable with one script that uses the flaw exposed on the other mails. I suppose that now it's a real security bug. Thanks Ivan Hernandez...