plxAutoReminder 3.7 SQL Injection

plx Autoreminder v3.7 id R-Sql Ýnj ---------------------------------------------------------- Discovered By: ZoRLu msn: [email protected] Date: 04.01.09 Home: z0rlu.blogspot.com / www.experl.com N0T: YALNIZLIK, YiTiRDi ANLAMINI YALNIZLIGIMDA : EN ONEMLi N0T: demolarI hackleyen top olsun top if...

Nitrotech 0.0.3a (RFI/SQL) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ========================================================== Nitrotech 0.0.3a RFI/SQL Multiple Remote Vulnerabilities ========================================================== Name: Nitrotech 0.0.3a Multiple Remote Vulnerabilities Download:...

Cross site scripting

Cross-site scripting XSS vulnerability in members.php in Pars4u Videosharing 1 allows remote attackers to inject arbitrary web script or HTML via the PageNo parameter...

pars4u-sqlxss.txt

!/usr/bin/perl use LWP::UserAgent; use Getopt::Long; if!$ARGV1 print " \n"; print " VIVA ISLAME VIVA ISLAME \n"; print " VIVA ISLAME VIVA ISLAME \n"; print " \n"; print " Pars4u Videosharing V1 Blind SQL Injection Exploit \n"; print " \n"; print " categoriesportal.php catid \n"; print "...

Battle.net Clan脚本members.php文件SQL注入漏洞

BUGTRAQ ID: 29166 Battle.net clan管理系统使用MySQL后端，允许用户方便的升级和维护web站点。 Battle.net Clan脚本的members.php文件没有正确地过滤对showmember参数的输入便在SQL查询中使用，如果将page参数设置为members的话，这允许远程攻击者通过控制SQL查询请求执行SQL注入攻击。成功攻击要求禁用了magicquotesgpc。 ryanhowdy Battle.net clan 1.5.3 ryanhowdy ---------...

Sql injection

SQL injection vulnerability in includes/functions in FreeDomain.co.nr Clone allows remote attackers to execute arbitrary SQL commands via the logindomain parameter to members.php...

CVE-2007-3575

SQL injection vulnerability in includes/functions in FreeDomain.co.nr Clone allows remote attackers to execute arbitrary SQL commands via the logindomain parameter to members.php...

Design/Logic Flaw

SonicBB 1.0 allows remote attackers to obtain sensitive information via the 1 by parameter to search.php, 2 p parameter to viewforum.php, and the 3 id parameter to a viewforum.php or b members.php, which reveal the installation path in the resulting error message...

CVE-2006-6282

members.php in Vikingboard 0.1.2 allows remote attackers to trigger a forced SQL error via an invalid s parameter, a different vector than CVE-2006-4709. NOTE: might only be an exposure if displayerrors is enabled, but due to lack of details, even this is not clear...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in OrbitHYIP 2.0 and earlier allow remote attackers to inject arbitrary web script via the 1 referral parameter to signup.php or 2 id parameter to members.php...

CVE-2006-2140

Multiple cross-site scripting XSS vulnerabilities in OrbitHYIP 2.0 and earlier allow remote attackers to inject arbitrary web script via the 1 referral parameter to signup.php or 2 id parameter to members.php...

Sql injection

SQL injection vulnerability in members.php in XBrite Members 1.1 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2006-1694

CVE-2006-1694 describes a SQL injection in XBrite Members 1.1 and earlier, exploitable via the id parameter in members.php. Remote attackers could potentially execute arbitrary SQL commands. The NVD CVSSv2 base score is 7.5 (HIGH). Affected or fixed version details are not provided in the connect...

CVE-2005-4642

Multiple cross-site scripting XSS vulnerabilities in HydroBB 1.0.0 Beta 2 allow remote attackers to inject arbitrary web script or HTML via the s parameter to 1 search.php, 2 members.php, 3 stats.php, 4 viewforum.php, 5 register.php, 6 usercp.php, 7 groups.php, 8 pms.php, and 9 calendar.php...

CVE-2005-4516

Multiple cross-site scripting XSS vulnerabilities in PHP-Fusion 6.00.200 through 6.00.300 allow remote attackers to inject arbitrary web script or HTML via 1 the sortby parameter in members.php and 2 IMG tags...