phpBazar 2.1.1 stable - Remote File Inclusion

phpBazar 2.1.1 stable - Remote File Inclusion Title: phpBazar V2.1.1 stable rfi Vulnerability Author: Sid3^effects Published: 2010-06-03 Verison: 2.1.1 stable vendor: SmartISoft ooooo .oooooo. oooooo oooooo oooo 888' d8P' Y8b 888. 888. .8' 888 888 888. .8888. .8' 888 888 888 .8'888. .8' 888 888...

CORELAN-10-035 NolaPro Enterprise multiple vulnerabilities

Advisory : CORELAN-10-035 Disclosure date : May 1st, 2010 http://www.corelan.be:8800/advisories.php?id=CORELAN-10-035 00 : Vulnerability information Product : NolaPro Enterprise Version : 4.0.5538 Vendor : Noguska LLC URL : http://www.nolapro.com Platform : Windows PHP/MySQL Type of vulnerabiliti...

NolaPro Enterprise 4.0.5538 Cross Site Scripting / SQL Injection

Advisory : CORELAN-10-035 Disclosure date : May 1st, 2010 http://www.corelan.be:8800/advisories.php?id=CORELAN-10-035 00 : Vulnerability information Product : NolaPro Enterprise Version : 4.0.5538 Vendor : Noguska LLC URL : http://www.nolapro.com Platform : Windows PHP/MySQL Type of vulnerabiliti...

Snipe Gallery 3.1.5 Remote File Inclusion

======================================================================== snipegallery-3.1.5 Multiple Remote FIle Inclusion Vulnerability ======================================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'...

Secunia Research: Quicksilver Forums Backup Information Disclosure

====================================================================== Secunia Research 17/03/2010 - Quicksilver Forums Backup Information Disclosure - ====================================================================== Table of Contents Affected...

CORELAN-10-008 - Multiple vulnerabilities found in evalmsi 2.1.03

|------------------------------------------------------------------| | | | / / / / | | / / / / / / / / / / / | | / // // / / / / / // / / / / / // / // / / / / / / | | /// //,// // //,// // // | | | | http://www.corelan.be:8800 | | [email protected] | | |...

PHP-MySQL-Quiz - SQL Injection

PHP-MySQL-Quiz SQL Injection Vulnerability Author: Hussin X Home : www.iq-ty.com email: darkangelg85atYahooDoTcom HomE script : http://www.widgetmonkey.com/ Download : http://www.getfreesofts.com/scriptdownload.php?id=18744&id1=881 DorK : inurl:quizinfo.php Exploit:...

Linkster PHP/MySQL SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================== Linkster PHP/MySQL SQL Injection Vulnerability ============================================== o=====================================================================================o -:- Linkst...

Nucleus CMS Remote File Inclusion

/ ! Nucleus CMS Remote File Include Vulneralbility ! Author : Don Tukulesto [email protected] ! Homepage : http://www.indonesiancoder.com ! Date : November 30, 2009 ! Tune In : http://antisecradio.fm choose your weapon / Software Information + Nucleus: PHP/MySQL Weblog CMS...

BPMusic 1.0 blind SQL Injection

Exploit for unknown platform in category web applications =============================== BPMusic 1.0 blind SQL Injection =============================== x========================================================================================================================================x |...

[MORNINGSTAR-2009-01] Multiple security issues in Open Auto Classifieds version <= 1.5.9

MorningStar Security - Advisory http://www.morningstarsecurity.com/ Multiple security issues in Open Auto Classifieds 1. Advisory Information ---------------------------------------------------------------------------------------------- Title: Multiple security issues in Open Auto Classifieds...

Unfixed XSS vulnerability at www.refashion.us

Security researcher Dark.Man, has submitted on 28/08/2009 a cross-site-scripting XSS vulnerability affecting www.refashion.us, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/12/2011. It is currently...

AlumniServer 1.0.1 (Auth Bypass) SQL Injection Vulnerability

No description provided by source. || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ VIVA SPAIN!...GANAREMOS EL MUNDIAL!...o.O PROUD TO BE SPANISH! -------------------------------------...

AlumniServer 1.0.1 - resetpwemail Blind SQL Injection

AlumniServer 1.0.1 - resetpwemail Blind SQL Injection !/usr/bin/python || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ VIVA SPAIN!... GANAREMOS EL MUNDIAL!...o.O PROUD TO BE SPANISH!...

AlumniServer 1.0.1 - 'resetpwemail' Blind SQL Injection

!/usr/bin/python || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ VIVA SPAIN!... GANAREMOS EL MUNDIAL!...o.O PROUD TO BE SPANISH! --------------------------------------------------------------------------------------------- |...

AlumniServer 1.0.1 Blind SQL Injection

!/usr/bin/python -------------------------------------------------------------------------------- POST var 'resetpwemail' BLIND SQL INJECTION EXPLOIT --AlumniServer v-1.0.1-- -------------------------------------------------------------------------------- CMS INFORMATION: --WEB:...

TorrentTrader Classic 1.09 Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ========================================================== TorrentTrader Classic 1.09 Multiple Remote Vulnerabilities ========================================================== waraxe-2009-SA074 - Multiple Vulnerabilities in TorrentTrader...

TorrentTrader Classic 1.09 SQL Injection

waraxe-2009-SA074 - Multiple Vulnerabilities in TorrentTrader Classic 1.09 =============================================================================== Author: Janek Vind "waraxe" Date: 15. June 2009 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-74.html Description of vulnerable...

Open Biller 0.1 Blind SQL Injection

!/usr/bin/perl || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ WEB: http://sourceforge.net/projects/geekbill/ | |--DOWNLOAD: http://sourc...

Open Biller 0.1 (username) Blind SQL Injection Exploit

No description provided by source. !/usr/bin/perl || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH!...