Free Simple Software - SQL Injection

Free Simple Software - SQL Injection 'Free Simple Software' SQL Injection Vulnerability CVE-2010-4298 Mark Stanislav - [email protected] I. DESCRIPTION --------------------------------------- A vulnerability exists in the 'Free Simple Software' download module which allows for a 'UNION...

'Free Simple Software' SQL Injection Vulnerability (CVE-2010-4298)

'Free Simple Software' SQL Injection Vulnerability CVE-2010-4298 Mark Stanislav - [email protected] I. DESCRIPTION --------------------------------------- A vulnerability exists in the 'Free Simple Software' download module which allows for a 'UNION SELECT' to easily expose the application...

IBM OmniFind - several vulnerabilities

============================================ ||| Security Advisory ||| ||| CVE-2010-3890 CVE candidate ||| ||| CVE-2010-3891 CVE candidate ||| ||| CVE-2010-3892 CVE candidate ||| ||| CVE-2010-3893 CVE candidate ||| ||| CVE-2010-3894 CVE candidate ||| ||| CVE-2010-3895 CVE candidate ||| |||...

Easynet Forum Host - 'topic.php' SQL Injection

Exploit Title: Easynet Forum Host topic.php SQL Injection Vulnerbility Date: 05/04/2008 Author: Pr0T3cT10n Software Link: http://www.easynet4u.com/forum Version: all Tested on: all CVE: Code: //------------------------------------------------ // Easynet Forum Host SQL Injection Vulnerbility...

Easynet Forum Host SQL Injection

Exploit Title: Easynet Forum Host topic.php SQL Injection Vulnerbility Date: 05/04/2008 Author: Pr0T3cT10n Software Link: http://www.easynet4u.com/forum Version: all Tested on: all CVE: Code: //------------------------------------------------ // Easynet Forum Host SQL Injection Vulnerbility...

Softbiz Auktios SQL Injection

----------------------------Information------------------------------------------------ +Name : softbiz auktios script sql injection viewfeedback.php +Autor : Easy Laster +Date : 24.02.2010 +Script : softbiz auktios script +Download : ----- +Demo : http://ezpips.com/ +Price : 99$ +Language :PHP...

Softbiz Recipes Portal Script (showcats.php) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ======================================================================== Softbiz Recipes Portal Script showcats.php SQL Injection Vulnerability ========================================================================...

Softbiz Classifieds PLUS - Multiple SQL Injections

----------------------------Information------------------------------------------------ +Name : Softbiz Classifieds PLUS SQL Injection gallery.php +Autor : Easy Laster +Date : 25.02.2010 +Script : Softbiz Classifieds PLUS +Price : 99$ +Language : PHP +Discovered by Easy Laster +Security Group...

EvalSMSI < 2.2.00 Multiple Vulnerabilities

EvalSMSI is prone to multiple vulnerabilities. Copyright C 2010 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Very simple crack CuteFTP password-vulnerability warning-the black bar safety net

Its also not a hack. Tips. Title with crack in order to attract the search engines. Haha/. 1,added to Site Manager 2,as a text export. This see is the plaintext password. Haha. Simple. Image attachmentthumbnail: Image attachment: Image attachment: Image attachmentthumbnail: from:http://52crack...

Penetration of the underlying routing techniques-vulnerability warning-the black bar safety net

Source: Huaxia hacking Union Master scan the underlying routing can greatly facilitate invasion within the network,such as enterprise,company,school, etc..if thorough techniques can intercept sensitive information,simplifying the invasion process,and obtain a routing privilege,it can be prepared...

Design/Logic Flaw

The Websense Reporter Module in Websense Enterprise 6.3.2 stores the SQL database system administrator password in plaintext in CreateDbInstall.log, which allows local users to gain privileges to the database...

[Full-disclosure] EMC Dantz Retrospect 7 backup Client PlainText Password Hash Disclosure Vulnerability

FGA-2008-16: EMC Dantz Retrospect 7 backup Client PlainText Password Hash Disclosure Vulnerability http://www.fortiguardcenter.com/advisory/FGA-2008-16.html July 20, 2008 -- Affected Vendors: EMC -- Affected Products: EMC Dantz Retrospect 7 backup Client 7.5.116 -- Vulnerability Details: The...

CVE-2008-2279

Freelance Auction Script 1.0 stores user passwords in plaintext in the tblusers table, which allows attackers to gain privileges by reading the table...

Design/Logic Flaw

Symantec Altiris Deployment Solution before 6.9.164 stores the Deployment Solution Agent aka AClient password in cleartext in memory, which allows local users to obtain sensitive information by dumping the AClient.exe process memory...

Microsoft Expression Media Plaintext Password Storage Weakness

CVE-2007-5470 Microsoft Expression Media is prone to a weakness because passwords are stored in plain-text format. This issue stems from a design error in the catalog password-protection feature. Attackers could use this issue in conjunction with other vulnerabilities in a host to gain access to...

QQ website login RSA encrypted transmission defect analysis-vulnerability warning-the black bar safety net

! QQ Thanks to anonymous people posting QQ website login not using https is encrypted, instead of using the RSA asymmetric encryption to protect transmission of passwords and sensitive information security. QQ is in javascript to achieve the entire process. This idea is very novel, but is also...

contentcustom-disclose.txt

CONTENTCustomizer Trick: Hit Ctrl+Y on a page that ContentCustomizer controls and it brings you to the login screen ; Dork: inurl:"generator/default.php?doc=" Other fun stuff: dialog.php?action=del&doc='+pagename // Delete dialog.php?action=delbackup&doc='+pagename // Delete Backup...

CVE-2003-1482

The backup configuration file for Microsoft MN-500 wireless base station stores administrative passwords in plaintext, which allows local users to gain access...

CVE-2003-1482

CVE-2003-1482 affects the Microsoft MN-500 wireless base station. The issue is that the backup configuration file stores administrative passwords in plaintext, which enables local users to gain access. The available connected documents corroborate this exact description; no public details about a...