DUware DUportal 3.4.3 Pro Multiple SQL Injection Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/14029/info DUportal Pro is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. Successful...

齐博官方后台存在弱口令问题（20多万会员信息危险）

简要描述： 后台弱口令 详细说明： http://www.qibosoft.com/admin28319635 http://bbs.qibosoft.com/admin.php 后台登陆地址 漏洞证明： Username:龙城 Password:020php168 没备份任何数据与没删除任何数据...

1.8 Million Accounts Hacked from Square Enix Japanese Game Company

1.8 Million Accounts Hacked from Square Enix Japanese Game Company Square Enix stated yesterday that somebody "may have gained unauthorized access to a particular Square Enix server " and took its members service offline in both Japan and the U.S. Today, the company clarified that 1.8 million...

MIT (ILP) hacked by Cyber_Owner

MIT ILP hacked by CyberOwner 5 Days before MIT's website https://ilp.mit.edu/ was got hacked by a hacker named CyberOwner . This was reported by Korben. According to screenshot it seems that the site ILP International Liaison Program at MIT has been hacked. The flaw would be a SQL injection flaw...

CVE-2011-0992

Use-after-free vulnerability in Mono, when Moonlight 2.x before 2.4.1 or 3.x before 3.99.3 is used, allows remote attackers to cause a denial of service plugin crash or obtain sensitive information via vectors related to member data in a resurrected MonoThread instance...

CVE-2011-0992

Use-after-free vulnerability in Mono, when Moonlight 2.x before 2.4.1 or 3.x before 3.99.3 is used, allows remote attackers to cause a denial of service plugin crash or obtain sensitive information via vectors related to member data in a resurrected MonoThread instance...

WSN Links SQL Injection Vulnerability

Exploit for php platform in category web applications ===================================== WSN Links SQL Injection Vulnerability ===================================== I. DESCRIPTION --------------------------------------- A vulnerability exists in the search.php code that allows for SQL injectio...

Vito CMS - SQL Injection

Vito CMS - SQL Injection .:. Author : [email protected] .:. Contact: [email protected], [email protected] .:. Home : www.evilzone.org .:. Script : Vito CMS .:. Info link: http://kameleon-lab.com/vito-cms.php .:. Versions: ALL .:. Bug Type : Sql Injection .:. Risk: High .:. Tested on : Windows ...

samart-cms 2.0 (contentsid) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================== samart-cms 2.0 contentsid Remote SQL Injection Vulnerability ============================================================== :::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; '...

Toko Instan 7.6 - Multiple SQL Injections

Indonesian Newhack Security Advisory ------------------------------------ Toko Instan V7.6 - Multiple Remote SQL Injection Vulnerabilities Waktu : Nov 14 2007 08:30AM Software : Toko Instan V7.6 Vendor : http://www.tokohandal.com/ Demo Site : http://www.tokohandal.com/demo/demo2.php Ditemukan ole...

Xoops XT-Conteudo模块Spaw_Control.Class.PHP远程文件包含漏洞

Xoops XT-Conteudo是一款基于PHP的WEB应用程序。 Xoops XT-Conteudo不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB进程权限执行任意命令。 问题是由于'spawcontrol.class.php'脚本对用户提交的'spawroot'参数缺少过滤，提交恶意的远程服务器作为包含对象，可导致以WEB进程权限执行任意PHP代码。 Xoops XT-Conteudo Module 1.52 目前没有详细解决方案提供： http://www.xoops.org/ !/usr/bin/env python coding: utf-8 import re...