PLE CMS 1.0 beta 4.2 (login.php school) Blind SQL Injection Exploit

Exploit for unknown platform in category web applications =================================================================== PLE CMS 1.0 beta 4.2 login.php school Blind SQL Injection Exploit ===================================================================...

CVE-2009-0326: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in login.php in Dark Age CMS 0.2c beta allows remote attackers to execute arbitrary SQL commands via the 1 username and 2 password parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

PLE CMS 1.0 beta 4.2 (login.php school) Blind SQL Injection Exploit

No description provided by source. --+++==============================================================+++-- --+++====== PLE CMS 1.0 beta 4.2 Blind SQL Injection Exploit ======+++-- --+++==============================================================+++-- ?php function query $user, $pos, $chr $quer...

Oracle Secure Backup login.php rbtool command injection

Added: 01/20/2009 CVE: CVE-2008-5448 BID: 33177 OSVDB: 51342 Background Oracle Secure Backup is a centralized tape backup management solution for Oracle Database. Problem A command injection vulnerability in the Oracle Secure Backup web interface allows a remote attacker to execute arbitrary...

Oracle Secure Backup login.php rbtool command injection

Added: 01/20/2009 CVE: CVE-2008-5448 BID: 33177 OSVDB: 51342 Background Oracle Secure Backup is a centralized tape backup management solution for Oracle Database. Problem A command injection vulnerability in the Oracle Secure Backup web interface allows a remote attacker to execute arbitrary...

Oracle Secure Backup login.php rbtool command injection

Added: 01/20/2009 CVE: CVE-2008-5448 BID: 33177 OSVDB: 51342 Background Oracle Secure Backup is a centralized tape backup management solution for Oracle Database. Problem A command injection vulnerability in the Oracle Secure Backup web interface allows a remote attacker to execute arbitrary...

Oracle Secure Backup login.php rbtool command injection

Added: 01/20/2009 CVE: CVE-2008-5448 BID: 33177 OSVDB: 51342 Background Oracle Secure Backup is a centralized tape backup management solution for Oracle Database. Problem A command injection vulnerability in the Oracle Secure Backup web interface allows a remote attacker to execute arbitrary...

Oracle Secure Backup exec_qr() Command Injection Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Oracle Secure Backup. Authentication is not required to exploit this vulnerability. The specific flaw exists within the routine execqr defined in the web script login.php. The user-supplied variabl...

Dark Age CMS 2.0 - login.php SQL Injection

Dark Age CMS 2.0 - login.php SQL Injection source: https://www.securityfocus.com/bid/33271/info Dark Age CMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...

Syzygy CMS 0.3 - Authentication Bypass

Syzygy CMS 0.3 - Authentication Bypass --+++=========================================================================+++-- --+++====== Syzygy CMS = 0.3 Auth Bypass SQL Injection Vulnerability ======+++-- --+++=========================================================================+++-- + Syzygy...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in login.php in myPHPscripts Login Session 2.0 allow remote attackers to inject arbitrary web script or HTML via the 1 lsuser and 2 lsemail parameters aka the User form in an lsregister action. NOTE: some of these details are obtained from third...

CVE-2008-5854

CVE-2008-5854 affects myPHPscripts Login Session 2.0: vulnerable is login.php in the User form (ls_user, ls_email) during an ls_register action, enabling stored/reflective XSS by remote attackers to inject arbitrary web script/HTML. The NVD entry confirms the vulnerability and its CVSS base metri...

CVE-2008-5854: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in login.php in myPHPscripts Login Session 2.0 allow remote attackers to inject arbitrary web script or HTML via the 1 lsuser and 2 lsemail parameters aka the User form in an lsregister action. NOTE: some of these details are obtained from third...

Sql injection

SQL injection vulnerability in login.php in DeltaScripts PHP Classifieds 7.5 and earlier allows remote attackers to execute arbitrary SQL commands via the adminusername parameter aka admin field. NOTE: some of these details are obtained from third party information...

CVE-2008-5803

CVE-2008-5803 describes a SQL injection vulnerability in the admin/login.php of E-topbiz Online Store 1.0 . The issue allows remote attackers to execute arbitrary SQL commands through the user parameter (aka username field), potentially impacting data confidentiality and integrity. The NVD entry ...

CVE-2008-5806

CVE-2008-5806 affects DeltaScripts PHP Classifieds 7.5 and earlier: a SQL injection flaw in login.php allows remote attackers to inject arbitrary SQL via the admin_username parameter (aka admin field). The vulnerability stems from unsafely constructed queries in the login handling code. Impact is...

CVE-2008-5806

SQL injection vulnerability in login.php in DeltaScripts PHP Classifieds 7.5 and earlier allows remote attackers to execute arbitrary SQL commands via the adminusername parameter aka admin field. NOTE: some of these details are obtained from third party information...

CVE-2008-5803: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in admin/login.php in E-topbiz Online Store 1.0 allows remote attackers to execute arbitrary SQL commands via the user parameter aka username field. NOTE: some of these details are obtained from third party information...

CVE-2008-5806: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in login.php in DeltaScripts PHP Classifieds 7.5 and earlier allows remote attackers to execute arbitrary SQL commands via the adminusername parameter aka admin field. NOTE: some of these details are obtained from third party information...

Wordpress 2.7.0 admin remote code execution vulnerability-vulnerability warning-the black bar safety net

by Ryatpuretot mail: puretot at gmail dot com team: http://www.80vul.com date: 2008-12-18 Analysis: This vulnerability out in the background: wp-admin/post.php if currentusercan'editpost', $postID if $last = wpcheckpostlock $post-ID $lastuser = getuserdata $last ; $lastusername = $lastuser ?...