UBBCentral UBB.Threads < 6.5.2 Beta - 'mailthread.php' SQL Injection

Alphaprogrammer , Oilkarchack , TheCephaleX , Str0ke And Iranian Hacking & Security Teams : IHS TeaM , alphaST , Shabgard Security Team , Emperor Hacking Team , Crouz Security Team & Simorgh-ev Security Team Config : please replace your address : $url = "http:///www.example.com"; please replace...

Simple Machines Forum (SMF) 1.0.4 - modify SQL Injection

Simple Machines Forum SMF 1.0.4 - modify SQL Injection !/usr/bin/perl -w SMF Modify SQL Injection // All Versions // By James http://www.gulftech.org Simple proof of concept for the modify post SQL Injection issue I discovered in Simple Machine Forums. Supply this script with your username passwo...

osCommere HTTP Response Splitting

GulfTech Security Research June 10th, 2005 Vendor : osCommerce URL : http://www.oscommerce.com/ Version : osCommerce 2.2 Milestone 2 && Earlier Risk : HTTP Response Splitting Description: osCommerce is a very popular eCommerce application that allows for individuals to host their own online shop...

Invision Community Blog Vulnerabilities

GulfTech Security Research June 7th, 2005 Vendor : Invision Power Services URL : http://www.invisionblog.com Version : All Versions Prior To 1.1.2 Final Risk : Multiple Vulnerabilities Description: Invision Blog is a community based blogging software that can be integrated into Invision Power...

[SA15213] SitePanel Multiple Vulnerabilities

---------------------------------------------------------------------- Want a new IT Security job? Vacant positions at Secunia: http://secunia.com/secuniavacancies/ ---------------------------------------------------------------------- TITLE: SitePanel Multiple Vulnerabilities SECUNIA ADVISORY ID...

[SA13619] PsychoStats &quot;login&quot; Cross-Site Scripting Vulnerability

TITLE: PsychoStats "login" Cross-Site Scripting Vulnerability SECUNIA ADVISORY ID: SA13619 VERIFY ADVISORY: http://secunia.com/advisories/13619/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: PsychoStats 2.x http://secunia.com/product/4450/ DESCRIPTION: James...

Invision Power Board (IP.Board) 2.0 Alpha 3 - SQL Injection (PoC)

Invision Power Board IP.Board 2.0 Alpha 3 - SQL Injection PoC IP.Board SQL Injection Vendor: Invision Power Services Product: IP.Board Version: 0 OR pinned=1 ORDER BY pinned DESC,...

Kaspersky Antivirus, Dr. Web and Symantec Antivirus DoS

To whom it may concern, Mr. James C Slora Jr, contacted Symantec on this issue. We investigated and determined that our AntiVirus products where not vulnerable. Mr. James C Slora Jr, also determined independently that our product was not vulnerable. Can you update your the page linked below to...