The Open Pentest Bookmark Collection v1.4

We are pleased to announce the release of version 1.4 yes 1.3 squeaked by without a blog post of the Open Pentest Bookmarks Collection. They have added a large amount of community submissions, with the addition of severalnew sections. They have also moved around some of the bookmarks to better...

Peel E-Commerce / Shopping SQL Injection

!/usr/bin/python This was written for educational purpose and pentest only. Use it at your own risk. Author will be not responsible for any damage! !!! Special greetz for my friend sinner01 !!! Toolname : peelinject.py Coder : baltazar a.k.a b4ltazar Version : 0.1 greetz for d3hydr8, rsauron,...

Cisco Unified Videoconferencing multiple vulnerabilities - CVE-2010-3037 CVE-2010-3038

Matta Consulting - Matta Advisory http://www.trustmatta.com Cisco Unified Videoconferencing multiple vulnerabilities Advisory ID: MATTA-2010-001 CVE reference: CVE-2010-3037 CVE-2010-3038 Affected platforms: Cisco Unified Videoconferencing 3515,3522,3527,5230,3545, 5110,5115 Systems and unspecifi...

Apache Axis 1.5 Session Fixation

===== Tempest Security Intelligence - Advisory 02 / 2010 =========== Vulnerability = 'Apache Axis Session Fixation Vulnerability' Authors = 'Tiago Ferreira ' 'Leandro Oliveira ' ======== Table of Contents =========================================== 1. Overview 2. Detailed description 3. Other...

CMS Ariadna 2009 - SQL Injection

Exploit Title : CMS Ariadna 2009 SQL Injection Date : 2010-04-19 Author : Andrés Gómez Contact : [email protected] Dork : "allinurl: detResolucion.php?tipodocid=" Exploit in Perl Start In Next Line: use LWP::Simple; Malicious users may inject SQL querys into a vulnerable application to fo...

CMS Ariadna 2009 - SQL Injection

CMS Ariadna 2009 - SQL Injection Exploit Title : CMS Ariadna 2009 SQL Injection Date : 2010-04-19 Author : Andrés Gómez Contact : [email protected] Dork : "allinurl: detResolucion.php?tipodocid=" Exploit in Perl Start In Next Line: use LWP::Simple; Malicious users may inject SQL querys in...

INVOhost SQL Injection

Andrés Gómez Exploit Title : INVOhost SQL Injection Date : 2010-04-24 Author : Andrés Gómez Software Link : http://www.invohost.com/ Contact : [email protected] Dork : "Powered by INVOhost" An attacker may execute arbitrary SQL statements on the vulnerable system. This may compromise the...

INVOhost - SQL Injection

INVOhost - SQL Injection Andrés Gómez Exploit Title : INVOhost SQL Injection Date : 2010-04-24 Author : Andrés Gómez Software Link : http://www.invohost.com/ Contact : [email protected] Dork : "Powered by INVOhost" An attacker may execute arbitrary SQL statements on the vulnerable system...

moziloCMS 1.10.1 Traversal / XSS / Fixation

MajorSecurity Advisory 55moziloCMS - Directory Traversal, Cross Site Scripting and Session Fixation Issues Details ======= Product: moziloCMS Security-Risk: high Remote-Exploit: yes Vendor-URL: http://cms.mozilo.de/ Vendor-Status: informed Advisory-Status: published Credits ============ Discovere...

Built2Go PHP Realestate 1.5 - 'event_detail.php' SQL Injection

----------------------------------------------------------------------------- Built2Go PHP RealEstate v1.5 eventdetail.php - SQL Injection Vulnerability A professional real estate listings website. Lists homes for sale and apartments for rent, and provides a powerful search similar to the...

JETIK-WEB Software - kat SQL Injection

JETIK-WEB Software - kat SQL Injection ----------------------------------------------------------- JETIK-WEB Software v1 - SQL Injection Vulnerability http://www.jetik.net ---------------------------------------------------------- Bug founded by d3v1l Date: 22.09.2008 [email protected]...

JETIK-WEB Software - 'kat' SQL Injection

----------------------------------------------------------- JETIK-WEB Software v1 - SQL Injection Vulnerability http://www.jetik.net ---------------------------------------------------------- Bug founded by d3v1l Date: 22.09.2008 [email protected]...

WSN Links 2.20 - comments.php SQL Injection

WSN Links 2.20 - comments.php SQL Injection WSN Links 2.20 comments.php - SQL Injection Vulnerability http://scripts.webmastersite.net/wsnlinks/ ---------------------------------------------------------- Bug founded by d3v1l Date: 21.09.2008 [email protected]...

fez-sql.txt

------------------------------------------------------------------------------ Fez software Version 1.3 AND 2.0 RC1 list.php - SQL Injection Vulnerability http://sourceforge.net/projects/fez About:- Fez is an open source project to produce and maintain a highly flexible web interface to FEDORA fo...

phpkb-1.5-email.php.txt

PHPKB Knowledge Base Software v1.5 Professional email.php - SQL Injection Vulnerability http://www.knowledgebase-script.com ---------------------------------------------------------- Bug founded by d3v1l Date: 20.09.2007 [email protected] ----------------------------------------------------------...

PHPKB 1.5 Professional Multiple Remote SQL Injection Vulnerabilities

No description provided by source. PHPKB Knowledge Base Software v1.5 Professional email.php - SQL Injection Vulnerability http://www.knowledgebase-script.com ---------------------------------------------------------- Bug founded by d3v1l Date: 20.09.2007 [email protected]...

WSN Links 2.20 (comments.php) SQL Injection Vulnerability

No description provided by source. WSN Links 2.20 comments.php - SQL Injection Vulnerability http://scripts.webmastersite.net/wsnlinks/ ---------------------------------------------------------- Bug founded by d3v1l Date: 21.09.2008 [email protected]...

Fez 1.3/2.0 RC1 - 'list.php' SQL Injection

------------------------------------------------------------------------------ Fez software Version 1.3 AND 2.0 RC1 list.php - SQL Injection Vulnerability http://sourceforge.net/projects/fez About:- Fez is an open source project to produce and maintain a highly flexible web interface to FEDORA fo...

WSN Links 2.20 (comments.php) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ========================================================= WSN Links 2.20 comments.php SQL Injection Vulnerability ========================================================= WSN Links 2.20 comments.php - SQL Injection Vulnerability...

wsnlinksvote-sql.txt

1 WSN Links 2.23 AND 2.22 vote.php - SQL Injection Vulnerability http://scripts.webmastersite.net/wsnlinks/ ---------------------------------------------------------- Bug founded by d3v1l Date: 21.09.2008 [email protected] ----------------------------------------------------------- Greetz tO:-...