PowerNews 2.5.4 (news.php newsid) SQL Injection Vulnerability

No description provided by source. ...:::::powernews 2.5.4 SQL Injection Vulnerability::::.... Virangar Security Team www.virangar.net -------- Discoverd By :virangar security teamhadihadi special tnx to:MR.nosrati,black.shadowes,MR.hesy,Ali007,Zahra & all virangar members & all hackerz greetz:to...

Hack online MD5 website to collect-bug warning-the black bar safety net

| --- In addition to http://www. cmd5. com/, you can get to the next try MD5 Reverse Lookup http://linardy.com/md5.php Digest-MD5-Reverse-1.3 http://search.cpan.org/blwood/Digest-MD5-Reverse-1.3/ the md5 hash search http://www.hashchecker.com/index.php?sls=searchhash mmkey http://www.mmkey.com/md...

ebayindia-sql.txt

Host Information Server = Apache/2.0.52 CentOS Version = 4.0.20 Powered by = PHP/5.2.0 Current User = root@localhost Current Database = pegasusinfo Supports Union = yes Union Columns = 15 Url| http://shopping.ebay.in/files/template1rupeenew.php?lpid=600 Vuln:...

SlimCMS <= 1.0.0 (edit.php) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ======================================================== SlimCMS 2 114. $query = "UPDATE pages SET title = '".$POST'pageTitle'."', content = '". striptagsstripslashes$POST'cmsText',$allowedTags."' WHERE ID = ".$GET'pageID'; 115...

WEBBDOMAIN Post Card 1.02 - Authentication Bypass

-==============================- Autore: x0r - Road Crew Cms: WebbDomain Web Postcards Bug: Auth ByPass Site Of Seller: http://webbdomain.com -==============================- Exploit: http://webbdomain.com/php/postcarden/admin Username: admin ' or ' 1=1 Pass: x0r Live Demo:...

preshoppingmail-sql.txt

PRE SHOPPING MALLidRemote SQL Injection Vulnerability -------------------------------------------------------------------------------- ---------------------------------------------------------------- script : PRE SHOPPING MALL script : http://www.preprojects.com/pclphp.asp Risk : High...

Easynet4u Link Host - cat_id SQL Injection

Easynet4u Link Host - catid SQL Injection Author : BeyazKurt Contact : [email protected] Site : www.khg-crew.ws - KOSOVA HACKERS GROUP LAHEY mahkemesini kiniyoruz. FUCK THE JUSTICE! Script : Easynet4u Link Host Script Site: http://www.easynet4u.com/linkdem.php SQL Injection Vuln. : Exploit :...

Unfixed XSS vulnerability at www.reno4x4.com

Security researcher CCC, has submitted on 10/03/2008 a cross-site-scripting XSS vulnerability affecting www.reno4x4.com, which at the time of submission ranked 4021579 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 19/03/2008. It is currently...

Pro Chat Rooms 3.0.3 (guid) SQL Injection Vulnerabilities

No description provided by source. Author: !DoktOR! Date found: 28.09.08 Product: Pro Chat Rooms Version: 3.0.3 Price: $55 URL: www.prochatrooms.com Vulnerability Class: SQL Injection Condition: magicquotesgpc = Off Exploit 1:...

PHP pro bid v 6.04 SQL injection

Affected software: PHP pro bid v 6.04 as at 2008-09-11 Vendor description: The Leading Proffessional sic Auction Script Software available online today written in PHP/ Mysql Impact: SQL injection Description: categories.php and other pages of php pro bid accept user-supplied order-by and ASC/DESC...

atmail541-download.txt

@Mail PHP Version 5.41 patch Release http://atmail.com/demo/atmailphpdemo.tgz The default install of Atmail 5.41 creates the following file in the atmail/ directory: build-plesk-upgrade.php If that file is called via http, such as: http://example.com/atmail/build-plesk-upgrade.php it will execute...

ibase 2.03 - Remote File Disclosure

Name: AFD i-base = 2.03 Author: Dyshoo Vendor: http://www.i-base.net/ Dork: "inurl:ibase site:de" http://site/ibase/zubehoer/download.php?filename=file Database config: http://site/ibase/zubehoer/download.php?filename=../config/configdb.php milw0rm.com 2008-07-24...

Million Pixels 3 - 'id_cat' SQL Injection

Million Pixels 3 idcat Remote SQL Injection Vulnerability ======================================================== = Author: Hussin X = = Home : www.tryag.cc/cc = email: darkangelg85atYahooDoTcom = = = ======================================================== script :...

ImperialBB <= 2.3.5 Remote File Upload Exploit

Exploit for unknown platform in category web applications ============================================== ImperialBB = 2.3.5 Remote File Upload Exploit ============================================== Title : ImperialBB = 2.3.5 Remote File Upload Vulnerability Date : 5th July 2008 Howto : 1. Go to...

ezcms 1.2 - Blind SQL Injection Authentication Bypass

ezcms 1.2 - Blind SQL Injection Authentication Bypass -+================================================================================+- -+ EZCMS = 1.2 Multiple Remote Vulnerabilitys +- -+================================================================================+- Discovered By: t0pP8uZz...

WR-Meeting 1.0 (msnum) Local File Disclosure Vulnerability

No description provided by source. | By Cr@zyKing / [email protected] \ ^| GrtZ : TheKacak - CrackersChild - Rmx - TRip - Eno7 - DreamTurk - KnocKout - TheBekir and str0ke \ ^| WR-Meeting v1.0 FI \ ^| Down : http://www.wr-script.ru/ \ ^| Demo : http://www.wr-script.ru/meeting/ ^| Info :...

Unfixed XSS vulnerability at www.ozunderground.com

Security researcher PaPPy, has submitted on 29/04/2008 a cross-site-scripting XSS vulnerability affecting www.ozunderground.com, which at the time of submission ranked 10366548 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 29/04/2008. It is...

simplecustomer-sql.txt

--==+================================================================================+==-- --==+ Simple Customer 1.2 SQL Injection Vulnerabilitys +==-- --==+================================================================================+==-- Discovered By: t0pP8uZz Discovered On: 18 April 2008...

XOOPS Module wfdownloads - cid SQL Injection

XOOPS Module wfdownloads - cid SQL Injection XOOPS module wfdownloads SQL Injection AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 MAiL : [email protected] DORK 1 : allinurl: "modules/wfdownloads/viewcat.php?cid" DORK 2 : allinurl: "modules/wfdownloads" EXPLOIT :...

phpcomasy-sql.txt

By Cr@zyKing / [email protected] phpComasy 0.8 modprojectid Remote Sql İnj. Vuln Script Down : http://www.phpcomasy.com/index.php?id=7&modaction=projectdetail&modprojectid=9 Page : index.php?id=7&modaction=projectdetail&modprojectid=Sql. Exp :...