2990 matches found
CVE-2008-4455
CVE-2008-4455: A directory traversal vulnerability in EKINdesigns MySQL Quick Admin 1.5.5 and earlier affects the index.php script. When magic_quotes_gpc is disabled, an attacker can cause the language cookie to include a .. sequence, enabling reading and execution of arbitrary files. The conditi...
CVE-2008-4454
Directory traversal vulnerability in EKINdesigns MySQL Quick Admin 1.5.5 allows remote attackers to read and execute arbitrary files via a .. dot dot in the lang parameter to actions.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...
MySQL Quick Admin <= 1.5.5 (COOKIE) Local File Inclusion Vulnerability
No description provided by source. MySQL Quick Admin = 1.5.5 COOKIE Local File Inclusion Vulnerability url: http://www.mysqlquickadmin.com/ Author: JosS mail: sys-projectathotmaildotcom site: http://spanish-hackers.com team: Spanish Hackers Team - SHT This was written for educational purpose. Use...
MySQL Quick Admin <= 1.5.5 (COOKIE) Local File Inclusion Vulnerability
Exploit for unknown platform in category web applications ====================================================================== MySQL Quick Admin = 1.5.5 COOKIE Local File Inclusion Vulnerability ====================================================================== MySQL Quick Admin = 1.5.5...
MySQL Quick Admin 1.5.5 - cookie Local File Inclusion
MySQL Quick Admin 1.5.5 - cookie Local File Inclusion MySQL Quick Admin = 1.5.5 COOKIE Local File Inclusion Vulnerability url: http://www.mysqlquickadmin.com/ Author: JosS mail: sys-projectathotmaildotcom site: http://spanish-hackers.com team: Spanish Hackers Team - SHT This was written for...
mysqlquick-lfi.txt
MySQL Quick Admin = 1.5.5 COOKIE Local File Inclusion Vulnerability url: http://www.mysqlquickadmin.com/ Author: JosS mail: sys-projectathotmaildotcom site: http://spanish-hackers.com team: Spanish Hackers Team - SHT This was written for educational purpose. Use it at your own risk. Author will b...
MySQL Quick Admin 1.5.5 - 'cookie' Local File Inclusion
MySQL Quick Admin = 1.5.5 COOKIE Local File Inclusion Vulnerability url: http://www.mysqlquickadmin.com/ Author: JosS mail: sys-projectathotmaildotcom site: http://spanish-hackers.com team: Spanish Hackers Team - SHT This was written for educational purpose. Use it at your own risk. Author will b...
PT-2008-5439
Name of the Vulnerable Software and Affected Versions Quick.Cart version 3.1 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML. This is achieved via the query string in the admin.php file. Recommendations For Quick.Cart version...
Quick Cart 3.1 - 'admin.php' Cross-Site Scripting
source: https://www.securityfocus.com/bid/31216/info Quick.Cart is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context...
Sql injection
SQL injection vulnerability in code.php in Quick Poll Script allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2008-3765
SQL injection vulnerability in code.php in Quick Poll Script allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2008-3765
The CVE-2008-3765 entry describes an SQL injection in the Quick Poll Script, specifically in code.php, exploitable via the id parameter. The vulnerability allows remote attackers to potentially execute arbitrary SQL commands. The NVD CVSSv2 score is 7.5 (HIGH) with network attack vector and low a...
CVE-2008-3765
SQL injection vulnerability in code.php in Quick Poll Script allows remote attackers to execute arbitrary SQL commands via the id parameter...
quickpoll-sql.txt
|| | | Quick Poll code.php id Remote SQL Injection Vulnerability | | |---------------------Hussin X----------------------| | | Author: Hussin X | | Home : www.tryag.cc/cc | | email: darkangelg85atYahooDoTcom | | | | | | | script :http://discountedscripts.com/productinfo.php?productsid=69 | ||...
Ultrastats <= 0.2.142 (players-detail.php) Blind SQL Injection Exploit
Exploit for unknown platform in category web applications ====================================================================== Ultrastats = 0.2.142 players-detail.php Blind SQL Injection Exploit ====================================================================== !/usr/bin/perl use...
Ultrastats 0.2.142 - players-detail.php Blind SQL Injection
Ultrastats 0.2.142 - players-detail.php Blind SQL Injection !/usr/bin/perl use LWP::UserAgent; use Getopt::Long; ! Discovered.: DNX ! Vendor.....: http://www.shooter-szene.de | http://www.ultrastats.org ! Detected...: 29.06.2008 ! Reported...: 04.07.2008 ! Response...: xx.xx.2008 ! Background.:...
QUICK CART cross-site scripting vulnerability
Overview QUICK CART is a shopping cart system for building Internet shop sites. QUICK CART contains a cross-site scripting vulnerability as it does not validate inputs properly. Impact An arbitrary script could be executed on the user's web browser. Solution None...
QUICK CART OS command injection vulnerability
Overview QUICK CART is a shopping cart system that provides functionalities used for managing an Internet store. An OS command injection vulnerability exists in QUICK CART as it does not properly validate the user input. Impact A remote attacker could execute arbitrary operating system commands o...
Yayoi Kaikei improper handling of credential information
Overview Yayoi Kaikei Quick Navigator sends user credentials unencrypted. Yayoi Kaikei Quick Navigator makes the user log into the vendor's server, and sends the user credentials unencrypted. Impact By monitoring the communication between Quick Navigator and the vendor's server, an attacker can...
CVE-2008-2131
Cross-site scripting XSS vulnerability in mvnForum 1.1 GA allows remote authenticated users to inject arbitrary web script or HTML via the topic field, which is later displayed by user/viewthread.jsp through use of the "quick reply button."...