YenerTurk Haber Script 1.0 - SQL Injection

YenerTurk Haber Script v1.0 SQL Injection Vulnebrality Credit:ASIANEAGLE Contact:[email protected] Exploit: Admin Nick: http://SITE/Path to YenerTurk/default.asp?x=2&kategori=11&id=-1%20union%20select%200,kullaniciadi,2,3,4,5,6,7,8%20from%20admin%20where%20id%20like%201 Admin pass:...

YenerTurk Haber Script 1.0 Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================= YenerTurk Haber Script 1.0 Remote SQL Injection Vulnerability ============================================================= YenerTurk Haber Script v1.0 SQL Injection Vulnebralit...

CVE-2006-2816

CVE-2006-2816 describes multiple XSS vulnerabilities in index.php of CoolPHP Magazine. The issue affects the web application’s index.php and is exploitable via the (1) op and (2) nick parameters, and possibly (3) 0000, (4) userinfo, (5) comp_der, (6) encuestas, and (7) pagina parameters. The note...

CVE-2006-2816: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in index.php in coolphp magazine allow remote attackers to inject arbitrary web script or HTML via the 1 op and 2 nick parameters, and possibly the 3 0000, 4 userinfo, 5 compder, 6 encuestas, and 7 pagina parameters. NOTE: it is not clear whether...

CVE-2006-1107

Cross-site scripting XSS vulnerability in news.php in NMDeluxe before 1.0.1 allows remote attackers to inject arbitrary web script or HTML via the nick parameter...

CVE-2006-1107

Cross-site scripting XSS vulnerability in news.php in NMDeluxe before 1.0.1 allows remote attackers to inject arbitrary web script or HTML via the nick parameter...

CVE-2006-1107

CVE-2006-1107 concerns NMDeluxe prior to 1.0.1, where the vulnerable script is news.php. The root cause is an XSS flaw in the nick parameter due to insufficient input sanitization, allowing remote attackers to inject arbitrary web script or HTML. Documents across multiple sources confirm the affe...

PT-2006-2134 · Nmdeluxe · Nmdeluxe

Name of the Vulnerable Software and Affected Versions: NMDeluxe versions prior to 1.0.1 Description: A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the nick parameter in the news.php file. Recommendations: For versions prior to 1.0.1, update to...

CVE-2006-1107: Undefined Security Weakness

Cross-site scripting XSS vulnerability in news.php in NMDeluxe before 1.0.1 allows remote attackers to inject arbitrary web script or HTML via the nick parameter...

Cyphor 0.19 - lostpwd.php?nick SQL Injection

Cyphor 0.19 - lostpwd.php?nick SQL Injection source: https://www.securityfocus.com/bid/15047/info Cyphor is prone to multiple cross-site scripting and SQL injection vulnerabilities. Exploitation could allow for theft of cookie-based authentication credentials or unauthorized access to database...

[SA15739] Razor-agents Denial of Service Vulnerabilities

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

CVE-2004-1599

CVE-2004-1599 concerns a Cross-site Scripting (XSS) vulnerability in CoolPHP 1.0-stable, exploitable via index.php using the query or nick parameters. The underlying issue is insufficient input handling in the affected script, allowing an attacker to inject and execute arbitrary web scripts/HTML ...

CVE-2004-1599: Undefined Security Weakness

Cross-site scripting XSS vulnerability in index.php in CoolPHP 1.0-stable allows remote attackers to execute arbitrary web script or HTML via the 1 query or 2 nick parameters...

PISG 0.54 - IRC Nick HTML Injection

source: https://www.securityfocus.com/bid/10195/info pisg has been reported prone to an input validation vulnerability. The issue will only present itself when pisg is used to monitor an IRC server that does not place limitations on IRC Nick values that can be used. If an attacker specifies HTML...

CVE-1999-1261: Undefined Security Weakness

Buffer overflow in Rainbow Six Multiplayer allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long nickname nick command...

bisonware.ftp.txt

Date: Mon, 17 May 1999 12:52:02 -0400 From: Russ To: [email protected] Subject: Vulnerabilities in BisonWare FTP Server 3.5 Arne Vidstrom submitted the following observations regarding BisonWare FTP Server 3.5. I contacted the authors of BisonWare and gave them a copy of Arne's...