commute-xss.txt

Aria-Security Tilte: community Cross-site Scripting XSS proof Of Concept : local/path/require/smallhead.php?retun=Xss-script...

Microsoft Windows Explorer - '.GIF' Image Denial of Service

!/usr/bin/perl Bug Found By ::DeltahackingTEAM Coded By Reza.Yavari Dr.Pantagon Web Site::Www.Deltahacking.net And Www.DeltaSecurity.ir And Www.PersianWhois.com Free Upload :: Www.Persianupload.com And Www.Persianupload.net Email: Dr.Pantagon ADeltasecurity.ir We...

pnv4b-sql.txt

---------------------------------------- PostNuke Journal ---------------------------------------- DISCOVERED BY :Ali Abbasi Olom Fonon Mazandaran University - Security Research Center, Babol, Iran Greetz For All Y! UnderGround Group Members www.2600.ir Greetz For All Persian Bugtraq Members...

PostNuke Module v4bJournal - SQL Injection

PostNuke Module v4bJournal - SQL Injection ---------------------------------------- PostNuke Journal ---------------------------------------- DISCOVERED BY :Ali Abbasi Olom Fonon Mazandaran University - Security Research Center, Babol, Iran Greetz For All Y! UnderGround Group Members www.2600.ir...

PostNuke Module v4bJournal - SQL Injection

---------------------------------------- PostNuke Journal ---------------------------------------- DISCOVERED BY :Ali Abbasi Olom Fonon Mazandaran University - Security Research Center, Babol, Iran Greetz For All Y! UnderGround Group Members www.2600.ir Greetz For All Persian Bugtraq Members...

Joomla! 1.5.0 Beta - 'pcltar.php' Remote File Inclusion

Hi, Joomla! 1.5.0 is in Beta version and "should NOT to be used for live or production sites." Joomla 1.0.12 has a good security but it seems that Joomla 1.5.0 doesnt have a good security approach. Anyway, there is a remote file inclusion in Joomla 1.5.0 Beta : File /libraries/pcl/pcltar.php, Lin...

Joomla! 1.5.0 Beta - pcltar.php Remote File Inclusion

Joomla! 1.5.0 Beta - pcltar.php Remote File Inclusion Hi, Joomla! 1.5.0 is in Beta version and "should NOT to be used for live or production sites." Joomla 1.0.12 has a good security but it seems that Joomla 1.5.0 doesnt have a good security approach. Anyway, there is a remote file inclusion in...

joomla150beta-sql.txt

Hi, These bugs were published in full-disclosure about 2 weeks ago CVE : CVE-2007-0373, CVE-2007-0374 and CVE-2007-0375, CVE-2007-0387 . In Mambo 4.6.1 and Joomla 1.0.11 and 1.5 Beta , the 'id' parameter can cause sql injection when cancelling content editting . Other versions maybe affected too...

aria-dudown.txt

Aria-Security Team Advisory Original Advisory: http://www.aria-security.com/forum/showthread.php?t=60 ----------------------------------------------------------- Software: DuDownload Method: SQL Injection Vendor: http://duware.com PoC: http://target/type.asp?iType=SQL Injection...

aria-clickcontact.txt

Aria-Security Team Advisory ----------------------------------------------------------- Software: Click Contact Method: SQL injection PoC: http://target/default.asp?view=alpha&AlphaSort=SQL Injection http://target/default.asp?In=SQL INJECTION http://target/default.asp?view=All&orderby=SQL Injecti...

aria-uphoto.txt

Aria-Security Team Advisory ----------------------------------------------------------- Software: uPhotoGallery 1.1 Method: SQL injection PoC: http://target/slideshow.asp?imgid=290&ci=SQL Injection http://target/thumbnails.asp?ci=SQL Injection Contact: [email protected]...

aria-inews.txt

Aria-Security Team Advisory Original Advisory: http://www.aria-security.com/forum/showthread.php?t=40 ----------------------- ------------------------------------ Software: iNews News Manager Method: SQL Injection PoC: http://target/path/articles.asp?ex=XSS Contact: [email protected]...

A-Cart 2.0 SQL Injection

Aria-Security Team Advisory www.Aria-security.Com For English www.Aria-Security.net For Persian Original Advisory: http://www.aria-security.com/forum/showthread.php?t=31 ----------------------------------------------------------- Software: A-Cart 2.0 Vendor: http://alanward.net/acart/ Method: SQL...

igwad.txt

Aria-Security Team Advisory Original Advisory : http://aria-security.net/advisory/igwad.txt ----------------------------------------------------------- Software: Image gallery with Access Database Method : SQL Injection PoC: http://target/path/dispimage.asp?id=SQL Injection...

i-Gallery34.txt

Aria-Security Team Advisory Original Advisory : http://aria-security.net/advisory/i-Gallery34.txt ----------------------------------------------------------- Software: i-Gallery 3.4 Method : Cross Site Scripting PoC: http://target/path/igallery.asp?n=XSS http://target/path/igallery.asp&d=XSS and...

Xtreme ASP Photo Gallery Cross Site Scripting And SQL Injection

Aria-Security Team Advisory www.Aria-security.Com For English www.Aria-Security.net For Persian Original Advisory : http://aria-security.net/advisory/xtremeg.txt ----------------------------------------------------------- Software: Xtreme ASP Photo Gallery Method : Cross Site Scripting And SQL...

bpg.txt

Aria-Security Team Advisory Original Advisory : http://aria-security.net/advisory/bpg.txt ----------------------------------------------------------- Software: BPG Content Management System Method: SQL Injection PoC: http://target/path/publicationview.asp?InfoID=SQL CODE...

ecommercestore.txt

Aria-Security Team Advisory Original Advisory : http://aria-security.net/advisory/ecommercestore.txt ----------------------------------------------------------- Software: E Commerce Store Shop Builder Method : SQL Injection PoC:...

aspintranet.txt

Aria-Security Team Advisory Original Advisory : http://aria-security.net/advisory/ASPintranet.txt ----------------------------------------------------------- Software: ASPintranet Method : Sql Injection PoC: http://target/path/default.asp?a=SQL Contact: [email protected]...

sitexpress.txt

Aria-Security Team Advisory Original Advisory : http://aria-security.net/advisory/SiteXpress.txt ----------------------------------------------------------- Software: SiteXpress E-Commerce System Method : SQL Injection PoC: http://target/path/ http://target/path/dept.asp?id=SQL Contact:...