Sql injection

SQL injection vulnerability in admin/login.asp in Professional Download Assistant 0.1 allows remote attackers to execute arbitrary SQL commands via the 1 uname parameter aka user field or the 2 psw parameter aka passwd field. NOTE: some of these details are obtained from third party information...

CVE-2008-5571

SQL injection vulnerability in admin/login.asp in Professional Download Assistant 0.1 allows remote attackers to execute arbitrary SQL commands via the 1 uname parameter aka user field or the 2 psw parameter aka passwd field. NOTE: some of these details are obtained from third party information...

CVE-2008-5572

Professional Download Assistant 0.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for database/downloads.mdb...

CVE-2008-5571

CVE-2008-5571 describes an SQL injection vulnerability in the web app Professional Download Assistant 0.1 , specifically in admin/login.asp . An attacker can pass crafted values in the two fields, uname (user) or psw (passwd), to cause arbitrary SQL execution on the backend database. This can lea...

JVN#07468800 Predictable session ID vulnerability in Access Analyzer CGI by futomi's CGI Cafe

Access Analyzer CGI provided by futomi's CGI Cafe is a software to analyze web access logs. Access Analyzer CGI contains a predictable session ID vulnerability. Impact A remote attacker could impersonate an administrator of Access Analyzer CGI. As a result, a remote attacker could view access...

DesignWorks Professional 4.3.1 Local .CCT File Stack Buffer Overflow (PoC)

DesignWorks Professional 4.3.1 Local .CCT File Stack Buffer Overflow PoC Vive L'Algerie . . . /Cn4phux. PoC : http://www.zshare.net/download/52308289a25b9dc8/ I'm Cn4phux ------ | --, || | ¤ | | | | ! | | | | | | | | |----- |/ | | ¤ | | .. | |! || | | | |-----| | | ----- | ::: | | | || | | | ,|. ...

Professional Download Assistant 0.1 (Auth Bypass) SQL Injection Vuln

Exploit for unknown platform in category web applications ==================================================================== Professional Download Assistant 0.1 Auth Bypass SQL Injection Vuln ==================================================================== Professional Download Assistant 0....

Professional Download Assistant 0.1 (Auth Bypass) SQL Injection Vuln

No description provided by source. Professional Download Assistant 0.1 Bypass ---------------------------------------------------------- Discovered By: ZoRLu msn: [email protected] Home: www.z0rlu.blogspot.com Date: 08/12/2008 N0T: TUM iSLAM ALEMiNiN BAYRAMINI KUTLARIM...! N0T: YALNIZLIK,...

Professional Download Assistant 0.1 SQL Injection

Professional Download Assistant 0.1 Bypass ---------------------------------------------------------- Discovered By: ZoRLu msn: [email protected] Home: www.z0rlu.blogspot.com Date: 08/12/2008 N0T: TUM iSLAM ALEMiNiN BAYRAMINI KUTLARIM...! N0T: YALNIZLIK, YiTiRDi ANLAMINI YALNIZLIGIMDA :...

Visagesoft eXPert PDF EditorX (VSPDFEditorX.ocx) Insecure Method

No description provided by source. VISAGESOFT eXPert PDF EditorX VSPDFEditorX.ocx INSECURE METHOD SITE: http://www.visagesoft.com This was written for educational purpose. Use it at your own risk. Author will be not responsible for any damage. Author: Marco Torti mail: marcotorti2atyahoodotcom...

DesignWorks Professional 4.3.1 Overflow

I'm Cn4phux ------ | --, || | ¤ | | | | ! | | | | | | | | |----- |/ | | ¤ | | .. | |! || | |\ | |-----| | | \ ----- | ::: | | | \ || | \ | | ,|. / | \ | | | | | ././,' 8 / ' ' \ | /\ | | " | | | + Application : DesignWorks Professional 4.3.1 + Application's Description : " DesignWorks...

Professional Download Assistant 0.1 Database Disclosure Vulnerability

No description provided by source. Professional Download Assistant downloads.mdb Database Disclosure Vulnerability © Ghost Hacker - REAL-H.COM Author : Ghost Hacker Homepage : http://Real-h.com Contact Me : Ghost-r00tatHotmaildotcom Bug : Database Disclosure Name Script : Professional Download...

Professional Download Assistant 0.1 - Database Disclosure

Professional Download Assistant downloads.mdb Database Disclosure Vulnerability © Ghost Hacker - REAL-H.COM Author : Ghost Hacker Homepage : http://Real-h.com Contact Me : Ghost-r00tatHotmaildotcom Bug : Database Disclosure Name Script : Professional Download Assistant Download :...

Professional Download Assistant 0.1 Database Disclosure Vulnerability

Exploit for unknown platform in category web applications ===================================================================== Professional Download Assistant 0.1 Database Disclosure Vulnerability ===================================================================== Professional Download Assista...

DesignWorks Professional 4.3.1 - '.CCT' File Local Stack Buffer Overflow (PoC)

I'm Cn4phux ------ | --, || | ¤ | | | | ! | | | | | | | | |----- |/ | | ¤ | | .. | |! || | |\ | |-----| | | \ ----- | ::: | | | \ || | \ | | ,|. / | \ | | | | | ././,' 8 / ' ' \ | /\ | | " | | | + Application : DesignWorks Professional 4.3.1 + Application's Description : " DesignWorks...

DesignWorks Professional 4.3.1 - .CCT File Local Stack Buffer Overflow (PoC)

DesignWorks Professional 4.3.1 - .CCT File Local Stack Buffer Overflow PoC I'm Cn4phux ------ | --, || | ¤ | | | | ! | | | | | | | | |----- |/ | | ¤ | | .. | |! || | |\ | |-----| | | \ ----- | ::: | | | \ || | \ | | ,|. / | \ | | | | | ././,' 8 / ' ' \ | /\ | | " | | | + Application :...

calendarmx-sql.txt

----------------------------بسم الله الرحمن الرحيم------------------------------ Tybe:calendarEventupdate.asp ID Blind SQL Injection Vulnerability Vendor: www.mxmania.net Software: Calendar Mx Professional author: я3d D3v!L Date: 28.11.2008 Home: www.ahacker.biz contact: N/A...

Calendar MX Professional 2.0.0 - Blind SQL Injection

Calendar MX Professional 2.0.0 - Blind SQL Injection ----------------------------بسم الله الرحمن الرحيم------------------------------ Tybe:calendarEventupdate.asp ID Blind SQL Injection Vulnerability Vendor: www.mxmania.net Software: Calendar Mx Professional author: я3d D3v!L...

Calendar MX Professional 2.0.0 Blind SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================ Calendar MX Professional 2.0.0 Blind SQL Injection Vulnerability ================================================================ Tybe:calendarEventupdate.asp ID Blind SQL...

Calendar MX Professional 2.0.0 - Blind SQL Injection

----------------------------بسم الله الرحمن الرحيم------------------------------ Tybe:calendarEventupdate.asp ID Blind SQL Injection Vulnerability Vendor: www.mxmania.net Software: Calendar Mx Professional author: я3d D3v!L Date: 28.11.2008 Home: www.ahacker.biz contact: N/A...