Sql injection

SQL injection vulnerability in starnet/addons/slideshowfull.php in Site@School 2.3.10 and earlier allows remote attackers to execute arbitrary SQL commands via the albumname parameter...

CVE-2008-0129

SQL injection vulnerability in starnet/addons/slideshowfull.php in Site@School 2.3.10 and earlier allows remote attackers to execute arbitrary SQL commands via the albumname parameter...

CVE-2008-0129

CVE-2008-0129 affects Site@School 2.3.10 and earlier. The vulnerability lies in starnet/addons/slideshow_full.php where the album_name parameter is used in a database query without proper input sanitization, causing an SQL injection. The issue enables remote attackers to execute arbitrary SQL com...

Site@School slideshow_full.php album_name Parameter SQL Injection

The remote host is running Site@School, an open source, PHP-based, content management system intended for primary schools. The version of this software installed on the remote host fails to sanitize user-supplied input to the 'albumname' parameter of the 'starnet/addons/slideshowfull.php' script...

Site@School <= 2.3.10 Remote Blind SQL Injection Exploit

No description provided by source. ? / -------------------------------------------------------- Site@School = 2.3.10 Remote Blind SQL Injection Exploit -------------------------------------------------------- author...: EgiX mail.....: n0b0d13satgmaildotcom link.....: http:// details..: works wit...

Site@School 2.4.10 - Blind SQL Injection

Site@School 2.4.10 - Blind SQL Injection ? / -------------------------------------------------------- Site@School = 2.3.10 Remote Blind SQL Injection Exploit -------------------------------------------------------- author...: EgiX mail.....: n0b0d13satgmaildotcom link.....: http:// details..: wor...

Site@School <= 2.4.10 Remote Blind SQL Injection Exploit

No description provided by source. ? / -------------------------------------------------------- Site@School = 2.3.10 Remote Blind SQL Injection Exploit -------------------------------------------------------- author...: EgiX mail.....: n0b0d13satgmaildotcom link.....: http:// details..: works wit...

Site@School 2.4.10 - Blind SQL Injection

? / -------------------------------------------------------- Site@School = 2.3.10 Remote Blind SQL Injection Exploit -------------------------------------------------------- author...: EgiX mail.....: n0b0d13satgmaildotcom link.....: http:// details..: works with magicquotesgpc = off - Blind SQL...

Buffer overflow

Buffer overflow in NetSupport Manager NSM Client 10.00 and 10.20, and NetSupport School Student NSS 9.00, allows remote NSM servers to cause a denial of service or possibly execute arbitrary code via crafted data in the configuration exchange phase of an initial connection setup. NOTE: a vendor...

CVE-2007-5252

Buffer overflow in NetSupport Manager NSM Client 10.00 and 10.20, and NetSupport School Student NSS 9.00, allows remote NSM servers to cause a denial of service or possibly execute arbitrary code via crafted data in the configuration exchange phase of an initial connection setup. NOTE: a vendor...

CVE-2007-5252

Buffer overflow in NetSupport Manager NSM Client 10.00 and 10.20, and NetSupport School Student NSS 9.00, allows remote NSM servers to cause a denial of service or possibly execute arbitrary code via crafted data in the configuration exchange phase of an initial connection setup. NOTE: a vendor...

CVE-2007-5252

CVE-2007-5252 is a buffer overflow in NetSupport Manager (NSM) Client 10.00/10.20 and NetSupport School Student (NSS) 9.00. The flaw allows an unauthenticated, remote attacker to cause a denial of service or possibly execute arbitrary code through crafted data in the configuration exchange phase ...

phpBB Module SupaNav 1.0.0 - 'link_main.php' Remote File Inclusion

phpBB Module SupaNav 1.0.0 linkmain.php Remote File Inclusion Vulnerability Vendor: http://www.phpbbhacks.com/download/8003 Download: http://www.phpbbhacks.com/load.php?id=8003 Founder: bd0rk Website 1: www.soh-crew.it.tt Website 2: www.school-of-hack.net Contact: bd0rkathackermail.com ICQ:...

Unfixed XSS vulnerability at www.beykent.k12.tr

Security researcher frostmaturidi, has submitted on 21/06/2007 a cross-site-scripting XSS vulnerability affecting www.beykent.k12.tr, which at the time of submission ranked 597025 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 26/06/2007. It i...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in Site@School S@S 2.4.10 allows remote attackers to inject arbitrary web script or HTML via the q parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2007-3276

Cross-site scripting XSS vulnerability in index.php in Site@School S@S 2.4.10 allows remote attackers to inject arbitrary web script or HTML via the q parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2007-3276

CVE-2007-3276 describes a Cross-site Scripting (XSS) vulnerability in Site@School (S@S) 2.4.10, specifically in index.php where the q parameter can be exploited to inject arbitrary script or HTML. The vulnerability is exploitable by remote attackers via the web and is associated with a CVSS v2 ba...

Chi Bo room billing system-free Internet access-vulnerability warning-the black bar safety net

My school electronic reading room available on this system. 搹 犸 欕 a? 曧 l ? 駥 ? Would have been sheer curiosity,in the online search a half a day also no results,had to their own research. Chamber 5 狌 d 倅? ��2?? 鑡? Where method A is theoperating systemof the problem,method, two, three, four is a...

Libstats 1.0.3 - 'template_csv.php' Remote File Inclusion

Libstats 1.0.3 Cyber-warrior.org milw0rm.com 2007-05-18...

IP and MAC bundle cracked-vulnerability warning-the black bar safety net

Our school recently the MAC and IP for the bundle, but also in Server 2K on the Internet time restrictions, really annoying dead, I think I'm the one never subject to the limit of the people Ah, how can like this without a fight! The ancient saying goes,“there policies, under the measures”, then...