WordPress Simple Forum Plugin - SQL Injection

Because of this vulnerability in ahah/sf-profile.php, the attackers can execute arbitrary SQL commands via the "u" parameter. Solution Update the plugin...

WebLeague 2.2.0 SQL Injection

DESCRIPTION: WebLeague 2.2.0 profile.php Remote SQL Injection DISCOVERED BY: Arka69 BUG: SQL Injection DOWNLOAD: http://www.worms-league.com/WebLeague/WebLeague2.2.0.zip EXPLOIT: profile.php?name='+UNION+SELECT+1,password,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22+FROM+webladmin%23...

WebLeague 2.2.0 - profile.php SQL Injection

WebLeague 2.2.0 - profile.php SQL Injection DESCRIPTION: WebLeague 2.2.0 profile.php Remote SQL Injection DISCOVERED BY: Arka69 BUG: SQL Injection DOWNLOAD: http://www.worms-league.com/WebLeague/WebLeague2.2.0.zip EXPLOIT:...

WebLeague 2.2.0 (profile.php) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ========================================================= WebLeague 2.2.0 profile.php SQL Injection Vulnerability ========================================================= DESCRIPTION: WebLeague 2.2.0 profile.php Remote SQL Injection...

WebLeague 2.2.0 - 'profile.php' SQL Injection

DESCRIPTION: WebLeague 2.2.0 profile.php Remote SQL Injection DISCOVERED BY: Arka69 BUG: SQL Injection DOWNLOAD: http://www.worms-league.com/WebLeague/WebLeague2.2.0.zip EXPLOIT: profile.php?name='+UNION+SELECT+1,password,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22+FROM+webladmin%23...

Sql injection

SQL injection vulnerability in co-profile.php in Jobbr 2.2.7 allows remote attackers to execute arbitrary SQL commands via the empid parameter...

CVE-2009-2427

SQL injection vulnerability in co-profile.php in Jobbr 2.2.7 allows remote attackers to execute arbitrary SQL commands via the empid parameter...

MyMsg 1.0.3 (uid) Remote SQL Injection Vulnerability

No description provided by source. MyMsg 1.0.3 Profile.php Remote SQL Injection Vuln Founder : Monster-Dz Mail: u.2datHotmaildotCoM Download:http://www.mymsg.al4us.com/index.php?Page=Download Home: WwW.Sa-SaFe.NeT H4ckF0rU.CoM Back Sooon SQL Injection Vulnerability Exploit: 1 First Register On Th...

MyMsg 1.0.3 SQL Injection

MyMsg 1.0.3 Profile.php Remote SQL Injection Vuln Founder : Monster-Dz Mail: u.2datHotmaildotCoM Download:http://www.mymsg.al4us.com/index.php?Page=Download Home: WwW.Sa-SaFe.NeT H4ckF0rU.CoM Back Sooon SQL Injection Vulnerability Exploit: 1 First Register On ThE Site...

MyMsg 1.0.3 - 'uid' SQL Injection

MyMsg 1.0.3 Profile.php Remote SQL Injection Vuln Founder : Monster-Dz Mail: u.2datHotmaildotCoM Download:http://www.mymsg.al4us.com/index.php?Page=Download Home: WwW.Sa-SaFe.NeT H4ckF0rU.CoM Back Sooon SQL Injection Vulnerability Exploit: 1 First Register On ThE Site...

MyMsg 1.0.3 - uid SQL Injection

MyMsg 1.0.3 - uid SQL Injection MyMsg 1.0.3 Profile.php Remote SQL Injection Vuln Founder : Monster-Dz Mail: u.2datHotmaildotCoM Download:http://www.mymsg.al4us.com/index.php?Page=Download Home: WwW.Sa-SaFe.NeT H4ckF0rU.CoM Back Sooon SQL Injection Vulnerability Exploit: 1 First Register On ThE...

Sql injection

SQL injection vulnerability in the awardsMembers function in Sources/Profile.php in the Member Awards component 1.0.2 for Simple Machines Forum SMF allows remote attackers to execute arbitrary SQL commands via the id parameter in a profile action to index.php. NOTE: some of these details are...

CVE-2009-2010

Multiple SQL injection vulnerabilities in Haudenschilt Family Connections CMS FCMS 1.9 and earlier allow remote authenticated users to execute arbitrary SQL commands via the 1 thread parameter to messageboard.php, 2 member parameter to profile.php, 3 pid parameter to gallery/index.php, and the 4...

Mole Adult Portal Script (profile.php user_id) SQL Injection Vulnerability

No description provided by source. || || | || o,7 || . o7 || q||| ow, : / / . =By: Qabandi =Email: iqaahotmail.fr From Kuwait PEACE =Vuln: Mole Adult Portal Script - SQL Injection Vulnerability =INFO: http://www.mole-group.com/scripts/scripts/adult-portal-escort-listing-script.html =BUY:...

Mole Adult Portal Script - profile.php?user_id SQL Injection

Mole Adult Portal Script - profile.php?userid SQL Injection || || | || o,7 || . o7 || q||| ow, : / / . =By: Qabandi =Email: iqaahotmail.fr From Kuwait PEACE =Vuln: Mole Adult Portal Script - SQL Injection Vulnerability =INFO:...

Mole Adult Portal Script - 'profile.php?user_id' SQL Injection

|| || | || o,7 || . o7 || q||| ow, : / / . =By: Qabandi =Email: iqaahotmail.fr From Kuwait PEACE =Vuln: Mole Adult Portal Script - SQL Injection Vulnerability =INFO: http://www.mole-group.com/scripts/scripts/adult-portal-escort-listing-script.html =BUY:...

Authentication flaw

profile.php in Simple Customer 1.3 does not require administrative authentication, which allows remote attackers to change the admin e-mail address and password via the email and password parameters...

CVE-2009-1637

profile.php in Simple Customer 1.3 does not require administrative authentication, which allows remote attackers to change the admin e-mail address and password via the email and password parameters...

CVE-2009-1637

The CVE-2009-1637 entry concerns profile.php in Simple Customer 1.3, where administrative authentication is not required. This allows remote attackers to modify the admin email address and password by passing email and password parameters. The NVD data lists a CVSS v2 base score of 6.4 (Network a...

Simple Customer 1.3 Arbitrary Change Admin Password Exploit

Exploit for unknown platform in category web applications =========================================================== Simple Customer 1.3 Arbitrary Change Admin Password Exploit =========================================================== ---- Remote Change admin Password----...