activephotogal-sql.txt

----------------------------بسم الله الرحمن الرحيم------------------------------ Tybe:Auth Bypass Remote SQL Injection Vulnerability Vendor:www.activewebsoftwares.com Software: Active Photo Gallery v 6.2 author: я3d D3v!L Date: 28.11.2008 Home: www.ahacker.biz contact: N/A...

Active Force Matrix v2 (Auth Bypass) Remote SQL Injection Vulnerability

No description provided by source. ----------------------------بسم الله الرحمن الرحيم------------------------------ Tybe:Auth Bypass Remote SQL Injection Vulnerability Vendor:www.activewebsoftwares.com Software: Active Force Matrix v 2 author: я3d D3v!L Date: 28.11.2008 Home:...

activevotes-sql.txt

----------------------------بسم الله الرحمن الرحيم------------------------------ Tybe:Auth Bypass Remote SQL Injection Vulnerability Vendor: www.activewebsoftwares.com Software: ActiveVotes v 2.2 author: я3d D3v!L Date: 28.11.2008 Home: www.ahacker.biz contact: N/A...

Multiple vulnerabilities in Envolution

Здравствуйте 3APA3A! Сообщаю вам о найденных мною многочисленных уязвимостях в системе Envolution, в частности Insuficient Anti-automation и Cross-Site Scripting. Insuficient Anti-automation: Уязвимость в user.php в модуле NS-NewUser...

Vulnerabilities in PostNuke Phoenix

Здравствуйте 3APA3A! Сообщаю вам о найденных мною Insufficient Anti-automation и Cross-Site Scripting уязвимостях в PostNuke Phoenix. Insufficient Anti-automation: Уязвимость в user.php в модуле NS-NewUser...

Vulnerabilities in PostNuke

Здравствуйте 3APA3A! Сообщаю вам о найденных мною Insufficient Anti-automation и Cross-Site Scripting уязвимостях в PostNuke. Insufficient Anti-automation: Уязвимость в user.php в модуле NS-NewUser...

Unfixed XSS vulnerability at www.iauq.ac.ir

Security researcher MK, has submitted on 13/07/2008 a cross-site-scripting XSS vulnerability affecting www.iauq.ac.ir, which at the time of submission ranked 886585 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/07/2009. It is currently...

FairSoft S.Mini web Busines Prelease & Calendar asp Sql injection

thnx bro FairSoft S.Mini web Busines Prelease Calendar asp Sql injection include patch...ocf,ns ocf/Calendar/ViewEvent.asp,ns/Calendar/ViewEvent.asp,aboutus/newsroom/ViewPressRelease.asp Credit : CodeXpLoder'tq Mail : codexploderathotmaildotcom Site : codexploder.biyosecurity.net,biyofrm.com Sour...

CVE-2006-4175

The CVE-2006-4175 issue affects Sun Java System Directory Server and ONE Directory Server (ns-slapd) versions 5.2 Patch4 and earlier, and 5.1/5.2 for ONE. Affected component: LDAP server; root cause: malformed BER queries in the BER decoding/cleanup path lead to a free of uninitialized memory. Im...

Sql injection

Multiple SQL injection vulnerabilities in index.php in HB-NS 1.1.6 allow remote attackers to execute arbitrary SQL commands via the 1 topic or 2 id parameter...

CVE-2006-2145

Multiple SQL injection vulnerabilities in index.php in HB-NS 1.1.6 allow remote attackers to execute arbitrary SQL commands via the 1 topic or 2 id parameter...

CVE-2006-2146

Multiple cross-site scripting XSS vulnerabilities in index.php in HB-NS 1.1.6 allow remote attackers to inject arbitrary web script or HTML via the 1 postername, 2 posteremail, 3 posterhomepage, or 4 message parameter...

CVE-2006-2145

In the provided documents, CVE-2006-2145 affects HB-NS 1.1.6 and relates to multiple SQL injection flaws in index.php that allow remote attackers to execute arbitrary SQL commands via the (1) topic or (2) id parameter. The NVD entry lists a CVSS v2 base score of 6.4 (Medium) with network attack v...

CVE-2006-2146

HB-NS (Harold Bakker’s NewsScript) 1.1.6 contains multiple cross-site scripting (XSS) vulnerabilities in index.php. The CVE-2006-2146 entry states remote attackers can inject arbitrary script/HTML via the (1) poster_name, (2) poster_email, (3) poster_homepage, or (4) message parameters. The NVD e...

CVE-2006-2146

Multiple cross-site scripting XSS vulnerabilities in index.php in HB-NS 1.1.6 allow remote attackers to inject arbitrary web script or HTML via the 1 postername, 2 posteremail, 3 posterhomepage, or 4 message parameter...

Sql injection

SQL injection vulnerability in the NS-Languages module for PostNuke 0.761 and earlier, when magicquotesgpc is off, allows remote attackers to execute arbitrary SQL commands via the language parameter to admin.php...

CVE-2006-0801

SQL injection vulnerability in the NS-Languages module for PostNuke 0.761 and earlier, when magicquotesgpc is off, allows remote attackers to execute arbitrary SQL commands via the language parameter to admin.php...

CVE-2006-0802

CVE-2006-0802 is an XSS flaw in the NS-Languages module of PostNuke 0.761 and earlier, exploitable when magic_quotes_gpc is enabled. The vulnerability allows remote attackers to inject arbitrary web script or HTML via the language parameter during a missing or translation operation. Multiple conn...

CVE-2005-1698

PostNuke 0.750 and 0.760RC3 allows remote attackers to obtain sensitive information via a direct request to 1 theme.php or 2 Xanthia.php in the Xanthia module, 3 user.php, 4 thelang.php, 5 text.php, 6 html.php, 7 menu.php, 8 finclude.php, or 9 button.php in the pnblocks directory in the Blocks...

HP-UX PHNE_18017 : s700_800 11.00 Domain Management (DESMS-NS B.01.11)

s700800 11.00 Domain Management DESMS-NS B.01.11 : Domain Enterprise Server Management System DESMS processes allow increased privileges. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were extracted from HP patch PHNE18017. The text itse...