Joomla Appointinator 1.0.1 SQL Injection

Appointinator 1.0.1 Joomla Component Multiple Remote Vulnerabilities Name Appointinator Vendor http://appointinator.chemeia.info Versions Affected 1.0.1 Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact salvatorefresta at gmail dot com Date 2010-07-27 X. INDEX ...

WhiteBoard 0.1.30 Blind SQL Injection

WhiteBoard 0.1.30 Multiple Blind SQL Injection Vulnerabilities Name WhiteBoard Vendor http://sarosoftware.com Versions Affected 0.1.30 Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact salvatorefresta at gmail dot com Date 2010-07-24 X. INDEX I. ABOUT THE...

WhiteBoard 0.1.30 - Multiple Blind SQL Injections

WhiteBoard 0.1.30 - Multiple Blind SQL Injections WhiteBoard 0.1.30 Multiple Blind SQL Injection Vulnerabilities Name WhiteBoard Vendor http://sarosoftware.com Versions Affected 0.1.30 Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact salvatorefresta at gmail d...

CMSQLite SQL Injection Vulnerability

Exploit for php platform in category web applications ==================================== CMSQLite SQL Injection Vulnerability ==================================== Product: CMSQLite Vendor: CMSQLite-Team Vulnerable Version: 1.3 and Probably Prior Versions June 2010 Vulnerability Type: SQL...

ISC BIND query_addsoa denial of service (CVE-2007-2241)

The Domain Name System DNS is a system of mapping host names to IP addresses. Domain names consist of alphabetic characters such that they are easier for human to remember. BIND Berkeley Internet Name Domain is an implementation of the DNS protocol and provides an openly redistributable reference...

Task Freak Cross Site Scripting and SQL Injection Vulnerabilities

This host is running Task Freak and is prone to Cross Site Scripting and SQL Injection vulnerabilities. OpenVAS Vulnerability Test $Id: gbtaskfreakxssnsqlinjvuln.nasl 7573 2017-10-26 09:18:50Z cfischer $ Task Freak Cross Site Scripting and SQL Injection Vulnerabilities Authors: Madhuri D Copyrigh...

WordPress Plugin Simple:Press 4.3.0 - SQL Injection

WordPress Plugin Simple:Press 4.3.0 - SQL Injection Title: Simple:Press Wordpress Plugin SQL Injection Vulnerability Author: ADEO Security Published: 03/07/2010 Version: v4.3.0 Possible all versions Vendor: http://simple-press.com Download: http://simple-press.com/download-manager.php?id=228...

iScripts EasySnaps 2.0 - Multiple SQL Injections

iScripts EasySnaps 2.0 Multiple SQL Injection Vulnerabilities Name iScripts EasySnaps Vendor http://www.iscripts.com Versions Affected 2.0 Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact salvatorefresta at gmail dot com Date 2010-01-07 X. INDEX I. ABOUT THE...

SQL injection vulnerability in WebDB

No description provided by source. The vulnerability exists due to failure in the "index.asp" script to properly sanitize user-supplied input in "qt" variable. Attacker can alter queries to the application SQL database, execute arbitrary queries to the database, compromise the application, access...

[SECURITY] Fedora 11 Update: drupal-views-6.x.2.11-1.fc11

The views module provides a flexible method for Drupal site designers to control how lists of content nodes are presented. Traditionally, Drupal has hard-coded most of this, particularly in how taxonomy and tracker lists are formatted. This tool is essentially a smart query builder that, given...

http-php-version NSE Script

Attempts to retrieve the PHP version from a web server. PHP has a number of magic queries that return images or text that can vary with the PHP version. This script uses the following queries: /?=PHPE9568F36-D428-11d2-A769-00AA001ACF42: gets a GIF logo, which changes on April Fool's Day...

Havij 1.10 Cross Site Scripting

Exploit Title: Havij Persistent XSS =v1.10 Date: 15/6/2010 Author: hexon Software Link: http://itsecteam.com/files/Havij%201.10.rar Version: 1.10 and below Tested on: Windows XP Service Pack 2 Professional, Windows 7 Code : htttp://site.com/file.php?param=XSS Code Havij Persistent XSS =v1.10 By :...

Joomla! Component My Car 1.0 - Multiple Vulnerabilities

Exploit Title: Joomla Component My Car Multiple Vulnerabilities Date: 28th May 2010 Author: Valentin Category: webapps/0day Version: 1.0 Tested on: CVE : Code : :::::::::::::::::::::::::::::::::::::: 0x1 :::::::::::::::::::::::::::::::::::::: General Information Advisory/Exploit Title = Joomla...

RokModule Component for Joomla! 'moduleid' Parameter SQi

The version of the RokModule component for Joomla! running on the remote host is affected by a SQL injection vulnerability due to improper sanitization of user-supplied input to the 'moduleid' parameter before using it to construct database queries. Regardless of the PHP 'magicquotesgpc' setting,...

phpMyAdmin <= 2.6.1 disclosure ways

=================================== phpMyAdmin = 2.6.1 disclosure ways =================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' /' / /' 0 0 /, // ,/ / 1 1 // /' / // /' / /' 0 0 / / / / / / 1 1 / / 0 0 ////// // // // // // 1 1 / Exploi...

Manage Engine Service Desk Plus 7.6 woID SQL Injection Vulnerability

Exploit for jsp platform in category web applications ==================================================================== Manage Engine Service Desk Plus 7.6 woID SQL Injection Vulnerability ==================================================================== Advisory Name: SQL injection in Mana...

ManageEngine ServiceDesk Plus 7.6 - woID SQL Injection

ManageEngine ServiceDesk Plus 7.6 - woID SQL Injection Advisory Name: SQL injection in Manage Engine Service Desk Plus 7.6 Vulnerability Class: SQL injection Release Date: 03-18-2010 Affected Applications: Confirmed in version 7.6. Other versions may also be affected. Affected Platforms: Multiple...

Secunia Research: Quicksilver Forums Cross-Site Request Forgery Vulnerability

====================================================================== Secunia Research 17/03/2010 - Quicksilver Forums Cross-Site Request Forgery Vulnerability - ====================================================================== Table of Contents Affected...

Tribisur Multiple Vulnerabilities

Tribisur is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

ManageEngine ServiceDesk Plus 7.6 - woID SQL Injection

Advisory Name: SQL injection in Manage Engine Service Desk Plus 7.6 Vulnerability Class: SQL injection Release Date: 03-18-2010 Affected Applications: Confirmed in version 7.6. Other versions may also be affected. Affected Platforms: Multiple Local / Remote: Remote Severity: High – CVSS: 9...