Posse Softball Director CMS - 'team.php' Blind SQL Injection

.-=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=-=--=-=--=-. Posse Softball Director CMS Blind SQL Injection Vulnerability team.php .-=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=-=--=-=--=-. + Autor: easy laster + Vulnerabilities Blind SQL Injection + Page:...

CVE-2011-1657

The 1 ZipArchive::addGlob and 2 ZipArchive::addPattern functions in ext/zip/phpzip.c in PHP 5.3.6 allow context-dependent attackers to cause a denial of service application crash via certain flags arguments, as demonstrated by a GLOBALTDIRFUNC and b GLOBAPPEND...

PT-2011-3156 · Php +1 · Php +1

Name of the Vulnerable Software and Affected Versions: PHP versions prior to 5.3.6 Description: The issue is related to an integer signedness error in the zip stream.c file within the Zip extension. This error allows context-dependent attackers to cause a denial of service, specifically CPU...

php: XSS mitigation bypass via utf8_decode()

The utf8decode function in PHP before 5.3.4 does not properly handle non-shortest form UTF-8 encoding and ill-formed subsequences in UTF-8 data, which makes it easier for remote attackers to bypass cross-site scripting XSS and SQL injection protection mechanisms via a crafted string...

Joomla! Component JE Directory 1.0 - SQL Injection

Joomla! Component JE Directory 1.0 - SQL Injection ----------------------------Information------------------------------------------------ +Name : joomla JE Directory = SQL injection Vulnerability Exploit +Autor : Easy Laster +Date : 30.09.2010 +Script : joomla JE Directory +Demo :...

PHP <= 5.3.2 ext/phar/stream.c和ext/phar/dirstream.c文件多个格式串漏洞

BUGTRAQ ID: 40173 PHP是广泛使用的通用目的脚本语言，特别适合于Web开发，可嵌入到HTML中。 PHP的ext/phar/stream.c文件中内部所使用的pharstreamflush、pharwrapperunlink、 pharparseurl、pharwrapperopenurl函数以及ext/phar/dirstream.c文件中内部所使用的pharwrapperopendir函数在处理出错情况时存在格式串漏洞。在出现错误的情况下会将error变量用作格式串来调用...

React Software Local File Inclusion

React software local file inclusion - date: 29.03.2010 - author: SNK - language: php - page: http://react.nl - vuln: http://page/forum/listmessage/index.php?action=../../../../../../../../../../../../../etc/passwd%00 - dork: Powered by React - www.react.nl -- GMX.at - Österreichs FreeMail-Dienst...

PHPKit 1.6.1 - mailer.php SQL Injection

PHPKit 1.6.1 - mailer.php SQL Injection Phpkit 1.6.1 SQL Injection member.php | | ||| | | | | | -| .'| || | | | -| | | -| | || ||,|||| ||||| ||| ||||| Script: Phpkit 1.6.1 SQL Injection member.php Vulnerabilities SQL Injection Language: PHP Download: this script is for free Founder: ea$y laster...

Erotik Auktionshaus - news.php SQL Injection

Erotik Auktionshaus - news.php SQL Injection Erotik Auktionshaus SQL Injection news.php | | ||| | | | | | -| .'| || | | | -| | | -| | || ||,|||| ||||| ||| ||||| Script: Erotik Auktionshaus news.php Vulnerabilities SQL Injection Language: PHP Download: buy this script Founder: ea$y laster Peace to...

uGround 1.0b - SQL Injection

uGround v1.0b SQL Injection | | ||| | | | | | -| .'| || | | | -| | | -| | || ||,|||| ||||| ||| ||||| Script: uGround v1.0b SQL Injection news.php Vulnerabilities SQL Injection Language: PHP Download: buy this script Founder: ea$y laster Peace to -tmh- ,0qwl ,Crypter ,Dr.ChAoS ,dremicz ,eddy14...

Flash Auktionshaus (news.php) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ========================================================= Flash Auktionshaus news.php SQL Injection Vulnerability ========================================================= Exploit Title: Flash Auktionshaus SQL Injection news.php Date: foun...

Ultimate Uploader 1.3 Remote File Upload Vulnerability

Exploit for unknown platform in category web applications ====================================================== Ultimate Uploader 1.3 Remote File Upload Vulnerability ====================================================== ==========================================================================...

Simplicity oF Upload 1.3.2 - Arbitrary File Upload

Exploit Title: Simplicity oF Upload 1.3.2 Remote File Upload Vulnerability Date: 20-12-2009 Author: Master Mind Software Link: http://www.phpsimplicity.com/scripts.php?id=3 Version: 1.3.2 CVE : N/A Tested on: Windows 2003 Server...

PT-2009-6201 · Php +2 · Php +2

Name of the Vulnerable Software and Affected Versions: PHP versions prior to 5.2.12 PHP versions 5.3.x prior to 5.3.1 Description: The issue allows remote attackers to cause a denial of service due to resource exhaustion by creating multiple temporary files when handling a multipart/form-data POS...

Simple CMS Framework 1.0 - page SQL Injection

Simple CMS Framework 1.0 - page SQL Injection ============================================================================== Hackteach.OrG / / / || |/ | / | | / | / / / | / / | / / / / | / | | / / / /| | / /\ // ============================================================================== »...

vTiger CRM 5.0.4 - Remote Code Execution / Cross-Site Request Forgery / Local File Inclusion / Cross-Site Scripting

Vtiger CRM 5.0.4 Multiple Vulnerabilities Name Multiple Vulnerabilities in Vtiger CRM Systems Affected Vtiger CRM 5.0.4 and possibly earlier versions Severity Medium Impact CVSSv2 Medium 6/10, vector: AV:N/AC:M/Au:S/C:P/I:P/A:P Vendor http://www.vtigercrm.com Advisory...

Mobilelib Gold 3.0 - Authentication Bypass / SQL Injection

------------------Mobilelib Gold v3 Auth Bypass/SQL Multiple Remote Vulnerabilities---------------------------- ---------------------------------------------------------------------------------------------------------------- Script : Mobilelib Gold version : 3.0 Language: PHP Site:...

SaphpLesson 4.0 SQL Injection

---------------------------------SaphpLesson v4.0 Auth Bypass SQL Injection Vulnerability--------------------------------------- ---------------------------------------------------------------------------------------------------------------- Script : SaphpLesson version : 4.0 Language: PHP Site:...

Meta Search Engine Script - 'url' Local File Disclosure

-----------------------------I AM MUSLIM !!------------------------------ ============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || ||...

php: XSS via PHP error messages

Cross-site scripting XSS vulnerability in PHP, possibly 5.2.7 and earlier, when displayerrors is enabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: because of the lack of details, it is unclear whether this is related to CVE-2006-0208...