Sql injection

SQL injection vulnerability in index.php in Uiga Personal Portal, as downloaded on 20100301, allows remote attackers to execute arbitrary SQL commands via the id parameter in a photos action. NOTE: some of these details are obtained from third party information...

CVE-2010-1364

The CVE-2010-1364 entry describes a SQL injection vulnerability in the Uiga Personal Portal’s index.php, exploitable via the id parameter in the photos action. The underlying issue is likely improper input handling/sanitization allowing arbitrary SQL execution by remote attackers. Affected softwa...

CVE-2010-1364

SQL injection vulnerability in index.php in Uiga Personal Portal, as downloaded on 20100301, allows remote attackers to execute arbitrary SQL commands via the id parameter in a photos action. NOTE: some of these details are obtained from third party information...

Countrywide Hit By Suit on Data Breach

Customers of Countrywide Financial have filed a class-action lawsuit over the 2008 data breach that enabled company insiders to steal and sell their personal information. Read the full article. Dark Reading...

Fake iPad, iPhone Giveaways Hit Twitter

Not surprisingly, spam using the Apple iPad as a lure to get users to give up personal or credit card information has began to make rounds of Twitter users. Read the full article. Help Net Security...

eDisplay Personal FTP Server 1.0.0 Post-Auth Buffer Overflow

Exploit Title : eDisplay Personal FTP server 1.0.0 Multiple Post-Authentication Stack BOF Type of sploit: Remote Code Execution Bug found by : loneferret march 19, 2010 Reference : http://www.exploit-db.com/exploits/11810 Exploit date : March 24, 2010 Author : Sud0 Version : 1.0.0 OS : Windows...

Discuz! 7.2 Cross Site Scripting

There is a Permanent-type Cross-Site Vulnerability in “Personal Signature” in all version of Discuz!. It can be written by the worm! Discuz! do not filter the Malicious code when user enter their personal signature, attacker can enter the xss code, Discuz! will save and run it! It maybe lead the...

eDisplay Personal FTP server 1.0.0 Multiple Post-Authentication Stack BOF

Exploit for windows platform in category remote exploits ========================================================================= eDisplay Personal FTP server 1.0.0 Multiple Post-Authentication Stack BOF ========================================================================= Exploit Title :...

eDisplay Personal FTP Server 1.0.0 - (Authenticated) Multiple Stack Buffer Overflows (2)

Exploit Title : eDisplay Personal FTP server 1.0.0 Multiple Post-Authentication Stack BOF Type of sploit: Remote Code Execution Bug found by : loneferret march 19, 2010 Reference : http://www.exploit-db.com/exploits/11810 Exploit date : March 24, 2010 Author : Sud0 Version : 1.0.0 OS : Windows...

There is a Permanent-type Cross-Site Vulnerability in “Personal Signature” in all version of Discuz!. It can be written by the worm!

There is a Permanent-type Cross-Site Vulnerability in “Personal Signature” in all version of Discuz!. It can be written by the worm! Discuz! do not filter the Malicious code when user enter their personal signature, attacker can enter the xss code, Discuz! will save and run it! It maybe lead the...

eDisplay Personal FTP server 1.0.0 Multiple Post-Authentication Stack BOF

No description provided by source. Exploit Title : eDisplay Personal FTP server 1.0.0 Multiple Post-Authentication Stack BOF Type of sploit: Remote Code Execution Bug found by : loneferret march 19, 2010 Reference : http://www.exploit-db.com/exploits/11810 Exploit date : March 20, 2010 Author :...

eDisplay Personal FTP server 1.0.0 Post-Authentication Stack BOF

Exploit for windows platform in category remote exploits ========================================================================= eDisplay Personal FTP server 1.0.0 Multiple Post-Authentication Stack BOF ========================================================================= Exploit Title :...

eDisplay Personal FTP Server 1.0.0 - (Authenticated) Multiple Stack Buffer Overflows (1)

Exploit Title : eDisplay Personal FTP server 1.0.0 Multiple Post-Authentication Stack BOF Type of sploit: Remote Code Execution Bug found by : loneferret march 19, 2010 Reference : http://www.exploit-db.com/exploits/11810 Exploit date : March 20, 2010 Author : corelanc0d3r Version : 1.0.0 OS :...

eDisplay Personal FTP Server 1.0.0 Pre-Authentication Crash

Title: eDisplay Personal FTP server 1.0.0 Pre-Authentication Crash PoC From: The eh?-Team || The Great White Fuzz we're not sure yet Found by: loneferret Hat's off to dookie2000ca Disvovery date: 16/03/2010 Software link: http://edisplay-personal-ftp-server.software.informer.com/ Tested on: Windo...

eDisplay Personal FTP Server 1.0.0 - (Authenticated) Multiple Stack Buffer Overflows (1)

eDisplay Personal FTP Server 1.0.0 - Authenticated Multiple Stack Buffer Overflows 1 Exploit Title : eDisplay Personal FTP server 1.0.0 Multiple Post-Authentication Stack BOF Type of sploit: Remote Code Execution Bug found by : loneferret march 19, 2010 Reference :...

eDisplay Personal FTP Server 1.0.0 Post-Authentication Crash

Title: eDisplay Personal FTP server 1.0.0 Multiple Post-Authentication Crash PoC From: The eh?-Team || The Great White Fuzz we're not sure yet Found by: loneferret Hat's off to dookie2000ca Disvovery date: 16/03/2010 Software link: http://edisplay-personal-ftp-server.software.informer.com/ Tested...

eDisplay Personal FTP Server 1.0.0 - Denial of Service (PoC)

eDisplay Personal FTP Server 1.0.0 - Denial of Service PoC Title: eDisplay Personal FTP server 1.0.0 Pre-Authentication DoS PoC From: The eh?-Team || The Great White Fuzz we're not sure yet Found by: loneferret Hat's off to dookie2000ca Disvovery date: 16/03/2010 Software link:...

eDisplay Personal FTP server 1.0.0 Multiple Post-Authentication Crash

Exploit for windows platform in category dos / poc =========================================================================== eDisplay Personal FTP server 1.0.0 Multiple Post-Authentication Crash PoC =========================================================================== Title: eDisplay...

Flying Forum personal space XSS vulnerability-vulnerability warning-the black bar safety net

Article author: knowledge seekers Version: ftbbs v7. 1static installation versionseems to be the latest Vulnerable page: usercenter. asp The vulnerability occurs in the blogmid filter is not strict lead to blogmid=Checkstrrequest. form"blogmid" if blogmid"" then sql="update "&ft&"clubuser set...

Uiga Personal Portal index.php SQL Injection Vulnerability

Exploit for unknown platform in category web applications ========================================================== Uiga Personal Portal index.php SQL Injection Vulnerability ==========================================================...