6617 matches found
kwsphp-sql.txt
KwsPHP Module jeuxflash Remote SQL Injection Vulnerability AUTHOR : H-T Team HouSSamix ToXiC350 HOME : http://no-hack.fr & http://no-hack.net Site: http://koogar.alorys-hebergement.com/kwsphp/index.php?mod=downloads&filedl=30&before=8&pdl=1 Dork : inurl:index.php?mod=jeuxflash EXPLOITS :...
AuraCMS 1.5rc - Multiple SQL Injections
AuraCMS version 1.5rc - Multiple Remote SQL Injection Vulnerabilities Vendor : http://www.auracms.org/ Ditemukan oleh : k1tk4t - k1tk4t4tnewhack.org Lokasi : Indonesia -- newhackdotorg @ irc.dal.net // Kutu pada berkas 'hal.php' baris-7 $perintah="SELECT FROM halaman WHERE id=$id"; $hasil =...
TLM CMS 3.2 - Multiple SQL Injections
TLM CMS 3.2 - Multiple SQL Injections TLM CMS v3.2 - Multiple Remote SQL Injection Vulnerabilities Vendor : http://tlm.hebserv.fr/ Download : http://tlm.hebserv.fr/modfile/upload/tlmcms32.zip Ditemukan oleh : k1tk4t - k1tk4t4tnewhack.org Lokasi : Indonesia -- newhackdotorg @ irc.dal.net Kutu pada...
SOL7886 - Remote vulnerability in the mod_jk2 Apache module, VU #771937
A vulnerability exists in the legacy version of the modjk2 Apache module. If successfully exploited, an attacker may be able to run arbitrary code on affected system. Information about this advisory is available at the following location: F5 Product Development tracked this issue as CR83564 and i...
Ourspace 2.0.9 (uploadmedia.cgi) Remote File Upload Vulnerability
No description provided by source. ++++++++++++++++++++++++++++++++++++ | Discovered by Breakerunit & Don | | Ourspace 2.0.9| script info: http://www.codedworld.com/download/our-space/26931.html Exploit: /cgi-bin/ourspace/newswire/uploadmedia.cgi dork: inurl:"/cgi-bin/ourspace/ Greetz to: Balcan...
Sylpheed和Sylpheed-Claws POP3远程格式串处理漏洞
BUGTRAQ ID: 25430 CVECAN ID: CVE-2007-2958 Sylpheed和Sylpheed-Claws都是轻型的邮件客户端。 Sylpheed和Sylpheed-Claws在处理用户请求存在格式串处理漏洞，远程攻击者可能利用此漏洞控制客户端。 Sylpheed和Sylpheed-Claws邮件客户端的src/inc.c文件中的incputerror函数在显示POP3服务器的错误响应时存在格式串漏洞处理，如果用户受骗连接到了恶意的POP3服务器并接收到包含有格式标识符的回复的话，就可能触发这个漏洞，导致执行任意指令。 Sylpheed Sylpheed 2.4...
litecommerce 2004 (category_id) Remote SQL Injection Vulnerability
No description provided by source. litecommerce Copyright 2004 - Remote SQL Injection Vendor : http://www.litecommerce.com/ Found By : k1tk4t - k1tk4t4tnewhack.org Location : Indonesia -- newhackdotorg @irc.dal.net Dork : Powered by LiteCommerce POC;...
[HS-A007] Qbik WinGate Remote Denial of Service
Title ===== HS-A007 Qbik WinGate Remote Denial of Service Date ==== 10 August 2007 Affected Software ================= WinGate versions 5.x and 6.x prior to 6.2.2. Overview ======== WinGate by Qbik IP Management Limited is a sophisticated gateway and server product used in over 600,000 networks...
ZYXEL ZyWALL 2 3.62 - FormsGeneral_1?sysSystemName Cross-Site Scripting
ZYXEL ZyWALL 2 3.62 - FormsGeneral1?sysSystemName Cross-Site Scripting source: https://www.securityfocus.com/bid/25262/info ZyXEL ZyWALL 2 is prone to multiple remote vulnerabilities that affect the management interface. An attacker can exploit these issues to carry out cross-site request forgery...
FishCart <= 3.2 RC2 (fc_example.php) Remote File Inclusion Vulnerability
Exploit for unknown platform in category web applications ======================================================================== FishCart bug found: "/fishcartv3/fcfunctions/fcexample.php?docroot=shell" 0day.today 2018-03-16...
CartWeaver (Details.cfm ProdID) Remote SQL Injection Vulnerability
No description provided by source. author:meoconxatvnbrain.net product:CartWeaver main site:www.cartweaver.com 1.with CFM CartWeaver: sql injection in: Details.cfm?ProdID=a' demo: http://www.jbracing.co.uk/Details.cfm?ProdID=1' exploit: http://www.xxx.com/Details.cfm?ProdID=sql query link admin:...
wolioCMS Auth Bypass / Remote SQL Injection Vulnerabilities
Exploit for unknown platform in category web applications =========================================================== wolioCMS Auth Bypass / Remote SQL Injection Vulnerabilities =========================================================== wolioCMS - SQL Injection and Bypass Administrator Login...
Seditio CMS 121 - 'pfs.php' Arbitrary File Upload
Seditio CMS Remote File Upload Vulnerability ReSearcher : A.D.T Script : Seditio and Ldu Cms Version : All Versions Script HomePage : http://neocrome.net/ Dork : "powered by seditio" or "powered by ldu" Risk : Very High! Usage : Firstly, you register the victim web site. After, go to "pfs.php" an...
CVE-2007-4025
CVE-2007-4025 affects Sun Java System Application Server (SJS) 8.1–9.0 prior to 20070724 on Windows. It allows remote attackers to obtain JSP source code via unspecified vectors. The connected documents do not specify root cause, explicit exploit method, or a fix/remediation. No remediation detai...
CMScout <= 1.23 (index.php) Remote SQL Injection Vulnerability
No description provided by source. / \ / \ | | | | | | | | | | | / | | | | | | | ' / | | ' \ / \ | | | | || | || | | | \ | | | | / | , |/ /|| ||| |||| / | |/ Program Title CMScout = 1.23 SQL Injection Script Download&n...
07 GameSiteScript <= 3.1 (profile id) Remote SQL Injection Vulnerability
No description provided by source. GameSiteScript Profile$id SQL-Injection Exploit Vulnerability Discovered By: Xenduer77 ---July 7th, 2007 $id Is passed straight to the query without being filtered. SQL-INJECTION: For Version 3.1: -------...
[SECURITY] [DSA 1331-1] New php4 packages fix arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 1331-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff July 7th, 2007 http://www.debian.org/security/faq -...
GameSiteScript <= 3.1 (profile id) Remote SQL Injection Vulnerability
No description provided by source. GameSiteScript Profile$id SQL-Injection Exploit Vulnerability Discovered By: Xenduer77 ---July 7th, 2007 $id Is passed straight to the query without being filtered. SQL-INJECTION: For Version 3.1: -------...
Girlserv ads 1.5 - details_news.php SQL Injection
Girlserv ads 1.5 - detailsnews.php SQL Injection Girlserv ads = 1.5 Remote SQL Injection Vulnerability Found By : Cold z3ro , [email protected] Homepages : http://hackteach.org , http://h4ps.com Script : http://www.girlserv-demo.com/girlserv-ads1.5.zip For Admin :...
AV Arcade 2.1b (index.php id) Remote SQL Injection Vulnerability
No description provided by source. Web: AV Arcade 2.1b Site : www.avscripts.net Dork : "Powered By AV Arcade" Author: Kw3rLn tehlostbyteatYaHoOd0tCom Romanian Security Team Ethical Hacking - hTTp://RSTZONE.nET Description: SQL injection in $id of includes/viewpage.php Exploit:...