Authentication flaw

AJ Square AJ Auction Pro Platinum Skin 1 sends a redirect but does not exit when it is called directly, which allows remote attackers to bypass authentication via a direct request to admin/user.php...

CVE-2008-6966

The CVE-2008-6966 entry concerns AJ Square AJ Auction Pro Platinum Skin #1, where a redirect is not exited when accessed directly, enabling a remote attacker to bypass authentication via a direct request to admin/user.php. The issue is tied to improper flow control after a redirect, allowing an a...

CVE-2008-6965

AJ Square AJ Auction OOPD, Pro Platinum Skin 1, Pro Platinum Skin 2, and Web 2.0 send a redirect but do not exit when certain scripts are called directly, which allows remote attackers to bypass authentication via a direct request to 1 site.php, 2 auction.php, 3 mail.php, 4 feesetting.php, 5...

CVE-2008-6966

AJ Square AJ Auction Pro Platinum Skin 1 sends a redirect but does not exit when it is called directly, which allows remote attackers to bypass authentication via a direct request to admin/user.php...

Million-Dollar Pixel Ads Platinum (SQL/XSS) Multiple Vulnerabilities

No description provided by source. -----------------------------I AM MUSLIM !!------------------------------ ============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || ||...

Million-Dollar Pixel Ads Platinum - SQL Injection Cross-Site Scripting

Million-Dollar Pixel Ads Platinum - SQL Injection Cross-Site Scripting -----------------------------I AM MUSLIM !!------------------------------ ============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE...

Million Dollar Pixel Ads - Cross-Site Scripting / SQL Injection

source: https://www.securityfocus.com/bid/43443/info Million Dollar Pixel Ads is prone to an SQL-injection vulnerability and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to steal...

Million-Dollar Pixel Ads Platinum - SQL Injection / Cross-Site Scripting

-----------------------------I AM MUSLIM !!------------------------------ ============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || ||...

I-Rater Pro/Plantinum v4 (Auth Bypass) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================== I-Rater Pro/Plantinum v4 Auth Bypass SQL Injection Vulnerability ================================================================== I-Rater Platinum V4 By : Hakxer I-Rater...

I-Rater Platinum SQL Injection

I-Rater Platinum V4 By : Hakxer Greetz : ExH , ProViDoR , Error Code , Bright D@rk , Stealth , Kof2002 , Datafr34ck3r , HcJ , Virushima I-Rater Platinum V4 Auth bypass Sql injection poc : http://www.i-rater.com/platinumadmin.html in username : admin 'or' 1=1 in password : Photo Rating Script Pro ...

I-Rater Pro/Plantinum v4 (Auth Bypass) SQL Injection Vulnerability

No description provided by source. I-Rater Platinum V4 By : Hakxer Greetz : ExH , ProViDoR , Error Code , Bright D@rk , Stealth , Kof2002 , Datafr34ck3r , HcJ , Virushima I-Rater Platinum V4 Auth bypass Sql injection poc : http://www.i-rater.com/platinumadmin.html in username : admin 'or' 1=1 in...

I-Rater Pro/Plantinum 4.0 - Authentication Bypass

I-Rater Platinum V4 By : Hakxer Greetz : ExH , ProViDoR , Error Code , Bright D@rk , Stealth , Kof2002 , Datafr34ck3r , HcJ , Virushima I-Rater Platinum V4 Auth bypass Sql injection poc : http://www.i-rater.com/platinumadmin.html in username : admin 'or' 1=1 in password : Photo Rating Script Pro ...

CVE-2008-6414

SQL injection vulnerability in detail.php in AJ Auction Pro Platinum Skin 2 allows remote attackers to execute arbitrary SQL commands via the itemid parameter...

Sql injection

SQL injection vulnerability in detail.php in AJ Auction Pro Platinum Skin 2 allows remote attackers to execute arbitrary SQL commands via the itemid parameter...

CVE-2008-6414

CVE-2008-6414 describes a SQL injection in the file detail.php of AJ Auction Pro Platinum Skin 2, exploitable via the item_id parameter. The underlying issue is improper handling of user-supplied input in a query, allowing remote attackers to craft and execute arbitrary SQL commands. The vulnerab...

Sql injection

SQL injection vulnerability in sellersothersitem.php in AJ Auction Pro Platinum 2 allows remote attackers to execute arbitrary SQL commands via the sellerid parameter...

CVE-2008-6004

CVE-2008-6004 is a Cross-site scripting (XSS) vulnerability affecting AJ Auction Pro Platinum 2, specifically in search.php via the product parameter. The NVD entry describes an attacker injecting arbitrary script/HTML, with a CVSSv2 base score of 4.3 (Medium) and vector: AV:N/AC:M/Au:N/C:N/I:P/A...

CVE-2008-6003

SQL injection vulnerability in sellersothersitem.php in AJ Auction Pro Platinum 2 allows remote attackers to execute arbitrary SQL commands via the sellerid parameter...

CVE-2008-6003

CVE-2008-6003 is an SQL injection vulnerability in AJ Auction Pro Platinum 2’s sellers_othersitem.php, exploitable via the seller_id parameter to allow remote attackers to execute arbitrary SQL commands. The NVD entry lists this as a NETWORK attack with HIGH impact on confidentiality and integrit...

AJ Auction Authentication Bypass Vulnerability

Exploit for unknown platform in category web applications ============================================== AJ Auction Authentication Bypass Vulnerability ============================================== ============================================================================== AJ Auction Auth...