9613 matches found
CVE-2008-5586
SQL injection vulnerability in findoffice.php in Check Up New Generation aka Check New 4.52, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the search parameter...
Sql injection
SQL injection vulnerability in findoffice.php in Check Up New Generation aka Check New 4.52, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the search parameter...
CVE-2008-5586
CVE-2008-5586 describes a SQL injection in the application "Check Up New Generation (Check New) 4.52" via the search parameter in the file findoffice.php when magic_quotes_gpc is disabled. The vulnerability allows remote attackers to execute arbitrary SQL commands, indicating potential impact to ...
CVE-2008-5586
SQL injection vulnerability in findoffice.php in Check Up New Generation aka Check New 4.52, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the search parameter...
CVE-2008-5586: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in findoffice.php in Check Up New Generation aka Check New 4.52, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the search parameter...
[SECURITY] Fedora 9 Update: syslog-ng-2.0.10-1.fc9
syslog-ng, as the name shows, is a syslogd replacement, but with new functionality for the new generation. The original syslogd allows messages only to be sorted based on priority/facility pairs; syslog-ng adds the possibility to filter based on message contents using regular expressions. The new...
Check New 4.52 (findoffice.php search) Remote SQL Injection Exploit
No description provided by source. !/usr/bin/perl -w ===================================================================== Check New 4.52 findoffice.php search Remote SQL Injection Exploit =====================================================================...
checknew-sql.txt
!/usr/bin/perl -w ===================================================================== Check New 4.52 findoffice.php search Remote SQL Injection Exploit ===================================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CW...
Check New 4.52 (findoffice.php search) Remote SQL Injection Exploit
Exploit for unknown platform in category web applications =================================================================== Check New 4.52 findoffice.php search Remote SQL Injection Exploit =================================================================== !/usr/bin/perl -w...
Check New 4.52 - SQL Injection
Check New 4.52 - SQL Injection !/usr/bin/perl -w ===================================================================== Check New 4.52 findoffice.php search Remote SQL Injection Exploit ===================================================================== ,--^----------,--------,-----,-------^--, ...
Check New 4.52 - SQL Injection
!/usr/bin/perl -w ===================================================================== Check New 4.52 findoffice.php search Remote SQL Injection Exploit ===================================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CW...
Fedora 8 : imlib2-1.4.2-2.fc8 (2008-10296)
Sun Nov 23 2008 Tomas Smetana 1.4.2-2 - patch for CVE-2008-5187 - Thu Oct 23 2008 Tomas Smetana 1.4.2-1 - new upstream version - Fri May 30 2008 Tomas Smetana 1.4.0-7 - patch for CVE-2008-2426 - Tue Mar 11 2008 Hans de Goede 1.4.0-6 - Disable amd64 assembly optimization. Kills idesk - 222998,...
vbulletin-xssxsrf.txt
/ ----------------------------- Author = Mx Title = vBulletin 3.7.3 Visitor Messages XSS/XSRF + worm Software = vBulletin Addon = Visitor Messages Version = 3.7.3 Attack = XSS/XSRF - Description = A critical vulnerability exists in the new vBulletin 3.7.3 software which comes included + with the...
DSECRG-08-039.txt
Hello, bugtraq. Digital Security Research Group DSecRG Advisory DSECRG-08-039 Application: Pluck CMS Versions Affected: 4.5.3 Vendor URL: http://www.pluck-cms.org/ Bug: Local File Include Exploits: YES Reported: 25.08.2008 Vendor Response: 30.08.2008 Solution: YES Date of Public Advisory:...
fresh email script 1.0 - Multiple Vulnerabilities
+-----------------+-----------------+-----------------+ 2. +-----------------+Fresh Email Script+----------------+ 3. +-----------------versions: 1.0 to 1.11 - all 4. +-----------------exploits: file inclusion & cookie manipulation 5. +-----------------founder: Don 6. +-----------------date:...
Unfixed XSS vulnerability at newyork.going.com
Security researcher JoCk3r, has submitted on 11/09/2008 a cross-site-scripting XSS vulnerability affecting newyork.going.com, which at the time of submission ranked 18493 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 03/10/2008. It is current...
Downline Goldmine newdownlinebuilder - SQL Injection
Downline Goldmine newdownlinebuilder - SQL Injection newdownlinebuilder tr.php id Remote SQL Injection Vulnerability Author: Hussin X Home : www.IQ-TY.com & www.TrYaG.cc script : http://www.downlinegoldmine.com/ DorK : inurl:tr.php?id= Exploit :...
3 3 8 9 new ideas-vulnerability warning-the black bar safety net
Copyright: BK instant group Author: BK group of a certain beverage 1. Can modify the registry 2. Can access 3 3 8 9 exec master..xpregwrite 'HKEYLOCALMACHINE','SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\sethc.exe','debugger','REGsz','c:\windows\system32\cmd.exe on';...
CVE-2008-4691
Unspecified vulnerability in the SQLNLSUNPADDEDCHARLEN function in the New Compiler aka Starburst derived compiler component in the server in IBM DB2 9.1 before FP6 allows attackers to cause a denial of service segmentation violation and trap via unknown vectors...
Code injection
Unspecified vulnerability in the SQLNLSUNPADDEDCHARLEN function in the New Compiler aka Starburst derived compiler component in the server in IBM DB2 9.1 before FP6 allows attackers to cause a denial of service segmentation violation and trap via unknown vectors...