e107 Plugin BLOG Engine 2.1.4 - Remote SQL Injection Vulnerability

No description provided by source. e107 Plugin macgurublogmenu macgurublog.php uid Remote Sql inj author: ZoRLu home: z0rlu.blogspot.com concat: [email protected] date: 28/10/2008 n0te: YALNIZLIK YiTiRDi ANLAMINI YALNIZLIGIMDA : n0te: a.q kpss : dork: allinurl:macgurublog.php?uid= exploit:...

iWare CMS 5.0.4 - Multiple Remote SQL Injection Vulnerabilities

No description provided by source. CMS IWARE 5.0.4 REMOTE SQL-injection vulnerability Author : boom3rang Greetz : H!tm@N, KHG, chs, redc00de Vulnerability : Remote SQL-injection Google Dork : N/W -------------------------------------------------- ! Product Site : www.iwarecms.nl ! Download CMS :...

IPBProArcade 2.5.2 GameID Parameter Remote SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/15205/info A remote SQL injection vulnerability reportedly affects ipbProArcade. The problem affects the 'gameid' parameter. An attacker may leverage this issue to manipulate SQL query strings and potentially carry out...

EQdkp <= 1.3.2 (listmembers.php rank) Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl -w EQdkp = 1.3.2 SQL Injection Exploit Discovered by: Silentz Payload: Admin Username & Hash Retrieval Website: http://www.w4ck1ng.com Vulnerable Code listmembers.php: $sql = 'SELECT m., m.memberearned-m.memberspent+m.memberadjustment AS...

OpenBB 1.0/1.1 Board.PHP Remote SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/7404/info It has been reported that OpenBB does not properly check input passed via the 'board.php' script. Because of this, an attacker may be able to inject arbitrary commands to the database in the context of the...

T.G.S. CMS <= 0.1.7 (logout.php) Remote SQL Injection Exploit

No description provided by source. ? print ' ::::::::: :::::::::: ::: ::: ::::::::::: ::: :+: :+: :+: :+: :+: :+: :+: +:+ +:+ +:+ +:+ +:+ +:+ +:+ ++ +:+ +++:++ ++ +:+ ++ ++ ++ ++ ++ ++ ++ ++ ++ + + + +++ + + ::::::::::: :::::::::: ::: :::: :::: :+: :+: :+: :+: +:+:+: :+:+:+ +:+ +:+ +:+ +:+ +:+...

Joomla AJAX Shoutbox <= 1.6 - Remote SQL Injection Vulnerability

Exploit for php platform in category web applications + Details: - include "helper.php"; - parameter: jallastID - Code: 113 $jallastID = JRequest::getVar 'jallastID', 0 ; 114 115 $query = 'SELECT FROM shoutbox WHERE id '.$jallastID.' ORDER BY id DESC'; - Exploit:...

Barracuda CudaTel 2.6.02.040 - Remote SQL Injection Vulnerability

Title: ====== Barracuda CudaTel 2.6.02.040 - Remote SQL Injection Vulnerability Date: ===== 2013-07-20 References: =========== http://vulnerability-lab.com/getcontent.php?id=775 BARRACUDA NETWORK SECURITY ID: BNSEC-723 VL-ID: ===== 775 Common Vulnerability Scoring System:...

WordPress Plugin - W3 Total Cache Remote Sql Injection Exploit

Exploit for php platform in category web applications From the developers' description 1, W3 Total Cache is: The most complete WordPress performance framework. Recommended by web hosts like: MediaTemple, Host Gator, Page.ly and WP Engine and countless more. Trusted by countless sites like:...

FocusAbacus Estate - Remote SQL Injection Vulnerability

Exploit for php platform in category web applications FocusAbacus Estate - Remote SQL Injection Vulnerability 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by...

CVE-2011-5111

Multiple SQL injection vulnerabilities in Kajian Website CMS Balitbang 3.x allow remote attackers to execute arbitrary SQL commands via the hal parameter to 1 the data module in alumni.php; or the 2 lihbuku, 3 artikel, 4 album, or 5 berita module in index.php...

ProQuiz v2.0.2 Multiple Vulnerabilities

Exploit for php platform in category web applications Exploit Title: ProQuiz v2.0.2 - Multiple Vulnerabilities Date: 18/7/2012 Author: L0n3ly-H34rT My Site: http://se3c.blogspot.com/ Contact: email protected Vendor Homepage: http://proquiz.softon.org/ Software Link:...

phpProfiles 4.5.4 Beta XSS / RFI / SQL Injection

Exploit for php platform in category web applications Exploit Title: phpProfiles v4.5.4 Beta - Multiple Vulnerabilities Date: 24/7/2012 Author: L0n3ly-H34rT My Site: http://se3c.tk/ Contact: email protected Software Link: http://sourceforge.net/projects/phpprofiles/files/latest/download Tested on...

phpProfiles 4.5.4 Beta XSS / RFI / SQL Injection

Exploit Title: phpProfiles v4.5.4 Beta - Multiple Vulnerabilities Date: 24/7/2012 Author: L0n3ly-H34rT My Site: http://se3c.tk/ Contact: [email protected] Software Link: http://sourceforge.net/projects/phpprofiles/files/latest/download Tested on: Linux/Windows 1- Remote File Include : In Fi...

Hi-Media SQL Injection

0101010101 010101010101010 01 01 0101 0101 01 01 0101 0101 01 01 0101 0101 01 01 0101 0101 01 01 0101 0101 01 01 0101 0101 01 01 0101010101 01 01 0101 010 01 01 0101 010 01 01 0101 010 01 01 0101 010 01 01 0101 010 0101010101 0101 010 + Exploit Title : hi-media Remote Sql Injection Vulnerability ...

Cotonti 0.6.23 SQL Injection

================================================================== Vulnerable Software: cotonti-0.6.23 Official Site: http://www.cotonti.com/ Tested version: http://cotonti.googlecode.com/files/cotonti-0.6.23.7z ================================================================== About Software:...

Supernews <= 2.6.1 (noticias.php cat) SQL Injection

Exploit for php platform in category web applications Supernews Date: 31/05/2012 Version: 2.6.1 Software Link: http://phpbrasil.com/script/vT0FaOCySSH/supernews ISRAEL Author will be not responsible for any damage. Vulnerable Code - noticias.php 30-31: 30. $idcategoria = formatDados$GET'cat'; 31...

Supernews 2.6.1 - noticias.php?cat SQL Injection

Supernews 2.6.1 - noticias.php?cat SQL Injection Supernews Date: 31/05/2012 Version: 2.6.1 Software Link: http://phpbrasil.com/script/vT0FaOCySSH/supernews ISRAEL Author will be not responsible for any damage. Vulnerable Code - noticias.php 30-31: 30. $idcategoria = formatDados$GET'cat'; 31. $que...

MobileSpy Android|iPhone|W7P|sOS - Web Vulnerabilities

Document Title: =============== MobileSpy Android|iPhone|W7P|sOS - Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=140 Release Date: ============= 2012-05-15 Vulnerability Laboratory ID VL-ID: ==================================== 140...

Proman Xpress v5.0.1 - Multiple Web Vulnerabilities

Exploit for php platform in category web applications Title: ====== Proman Xpress v5.0.1 - Multiple Web Vulnerabilities Introduction: ============= Proman Xpress v5.0.1 is a super project management script coded in PHP & MySQL. It s highly customizable and is used across industries. No Encryption...