1441 matches found
PHP-Nuke 7.x Journal Module - search.php SQL Injection
PHP-Nuke 7.x Journal Module - search.php SQL Injection source: https://www.securityfocus.com/bid/20829/info The PHP-Nuke Journal module is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue...
PHP-Nuke 7.x Journal Module - 'search.php' SQL Injection
source: https://www.securityfocus.com/bid/20829/info The PHP-Nuke Journal module is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application,...
newsscript05.txt
Subject: --- "Newsscript version 0.5 print.php Local File Inclusion Vulnerability " Vulnerable version: --- "Newsscript version 0.5" Vendor URL: --- Emaill - [email protected] --- Website - http://webmaster-journal.com Available in: ---http://www.comscripts.com/scripts/php.wm-news.203.ht...
SimpleBlog 2.3 - 'id' SQL Injection
| | \ \ / / | ' / | / | \ V /| | | \ \ || | | / || ./|/\,| || AnD | | | | | | | ' | | | | '/ |/ \ '/ | |/ / | | | / | | | | | | || | | | | | / | \ \ | | | |/ / || || ||,|| ,||| |/|\||/| +-----------------------------------------------------------------+ | Vipsta & MurderSkillz fucking pwnt...
OZJournal v1.5 - XSS
OZJournal v1.5 Homepage: http://ozjournals.awardspace.com/index.php Affected files: search input box index.php viewing archives show comment page ---------------------------------------- XSS vulnerability via search input box: Data isn't properly sanatized before being displayed. For a PoC in the...
Buddy Zone Version 1.0.1 - XSS
Buddy Zone Version 1.0.1 Homepage: http://www.vastal.com/buddy-zone-social-networking-script.html Affected files: Sending invitations Profiles Blogs Journals Posting comments Posting in the forum Sending mail Creating a group viewsubforum.php viewpost.php viewclassifieds.php viewad.php...
VampireFreaks journal XSS
yes the journal is exploitable aswell there seem to be no filters on the journal title so you can simply put: "scriptalert'XSS'/script also the other places where you can update your journal etc. don't filter anything proof: http://vampirefreaks.com/journal.php?u=NanoyMaster...
PluggedOut-1.9.9c.txt
PluggedOut Blog SQL INJECTION and XSS PluggedOut Blog is an open source script you can run on your web server to give you an online multi-user journal or diary. It can be used equally well for any kind of calendar application.Rather than give you a thousand things you don't really want...
PluggedOut Blog SQL injection and XSS
PluggedOut Blog SQL INJECTION and XSS PluggedOut Blog is an open source script you can run on your web server to give you an online multi-user journal or diary. It can be used equally well for any kind of calendar application.Rather than give you a thousand things you don't really want...
WebWiz Products 1.03.06 - Authentication Bypass SQL Injection
WebWiz Products 1.03.06 - Authentication Bypass SQL Injection WebWiz Scripts Login Bypass PoC - site news , journal , weekly poll - Kapda s advisory Discovery and exploit by devilbox at kapda.ir Kapda - Security Science Researchers Institute of Iran WebWiz Login Bypass PoC - Database login - Kapd...
Greymatter Comment Name Field Control Panel Log XSS
The remote host is using Greymatter, an open source weblogging and journal software written in perl. A vulnerability exists in this version that could allow an attacker to execute arbitrary HTML and script code in the context of the user's browser. %NASLMINLEVEL 70300 C Tenable Network Security,...
PT-2005-3561 · Land Down Under · Land Down Under (Ldu) 800
Name of the Vulnerable Software and Affected Versions: Land Down Under LDU 800 Description: Multiple SQL injection issues allow remote attackers to execute arbitrary SQL commands via various parameters to different PHP files, including s or m parameter to "forums.php", o, w, s, or p parameter to...
PT-2005-3560 · Land Down Under · Land Down Under (Ldu) 800
Name of the Vulnerable Software and Affected Versions: Land Down Under LDU 800 Description: Multiple cross-site scripting XSS vulnerabilities allow remote attackers to inject arbitrary web script or HTML via the c or m parameters to "index.php" or the w parameter to "journal.php". The vendor has...
RHEL 3 : kernel (RHSA-2005:293)
Updated kernel packages that fix several security issues in the Red Hat Enterprise Linux 3 kernel are now available. This security advisory has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel handles the basic functions of the operating syste...
security flaw
The ext3 code in Linux 2.4.x before 2.4.26 does not properly initialize journal descriptor blocks, which causes an information leak in which in-memory data is written to the device for the ext3 file system, which allows privileged users to obtain portions of kernel memory by reading the raw devic...
Open Journal Blog Authenticaion Bypassing Vulnerability
Open Journal Blog Authenticaion Bypassing Vulnerability ================================================= PROGRAM: Open Journal HOMEPAGE: http://www.grohol.com/downloads/oj/ VULNERABLE VERSIONS: 2.5 and below DESCRIPTION ================================================= OpenJournal is a completel...
openjournal2.5.txt
Open Journal Blog Authenticaion Bypassing Vulnerability ================================================= PROGRAM: Open Journal HOMEPAGE: http://www.grohol.com/downloads/oj/ VULNERABLE VERSIONS: 2.5 and below DESCRIPTION ================================================= OpenJournal is a completel...
OpenJournal 2.0 - Authentication Bypassing
OpenJournal 2.0 - Authentication Bypassing source: https://www.securityfocus.com/bid/9598/info It has been reported that OpenJournal is prone to an authentication bypass vulnerability. This issue is caused by the application failing to properly sanitize URI specified parameters. Successful...
Kietu ( PHP )
Informations : °°°°°°°°°°°°°° Website : http://kietu.free.fr Version : 2.0, 2.3 Problem : Include file PHP Code/Location : °°°°°°°°°°°°°°°°°°° hit.php : ------------------------------------------------------------------ if !getcfgvar"registerglobals" $kietu"remoteaddr" =...
