PHP-Nuke Module My_eGallery 2.7.9 - SQL Injection

PHP-Nuke Module MyeGallery 2.7.9 - SQL Injection Aria-Security Team http://Aria-Security.Net ----------------------------- Shoutz: Aura, Null, imm02tal, Kinglet, and our staff PHP-Nuke MyeGallery "gid" Remote SQL Injection Dork: inurl:"modules.php?name=MyeGallery"...

PHP-Nuke Module My_eGallery 2.7.9 - SQL Injection

Aria-Security Team http://Aria-Security.Net ----------------------------- Shoutz: Aura, Null, imm02tal, Kinglet, and our staff PHP-Nuke MyeGallery "gid" Remote SQL Injection Dork: inurl:"modules.php?name=MyeGallery"...

SA-2008-018 - Drupal core - Cross site scripting

Titles are not escaped prior to being displayed on content edit forms, allowing users to inject arbitrary HTML and script code into these pages. The Drupal.checkPlain function, used to escape text in ECMAScript, contains a bug which causes it to escape only the first instance of a character,...

Aria-Security.Net: Joomla Com_publication "pid" Remote SQL Injection

Aria-Security Team Persian Security Network http://Aria-Security.Net ------------------------------- Shoutz: Aura, imm02tal, Kinglet, iM4n Joomla Compublication "pid" Remote SQL Injection...

Pigyard Art Gallery Multiple SQL Injection

Aria-Security Team, http://Aria-Security.net ------------------------------- Shout Outs: AurA, imm02tal, iM4N, Kinglet, Vendor: Pigyard Art Gallery Multiple SQL Injection This is a completation of the original advisory reported by ZoRLu @ Milw0rm http://www.milw0rm.com/exploits/5181 Original Link...

Php Nuke "Sell" module SQL Injection ("cid")

Aria-Security Team Persian Security Network http://Aria-Security.Net ------------------------------------------------------------------------ Shoutz: Aura, imm02tal, Kinglet, iM4n Php Nuke "Sell" module SQL Injection "cid"...

joomlapub-sql.txt

Aria-Security Team Persian Security Network http://Aria-Security.Net ------------------------------- Shoutz: Aura, imm02tal, Kinglet, iM4n Joomla Compublication "pid" Remote SQL Injection...

pigyard-sql.txt

Aria-Security Team, http://Aria-Security.net ------------------------------- Shout Outs: AurA, imm02tal, iM4N, Kinglet, Vendor: Pigyard Art Gallery Multiple SQL Injection This is a completation of the original advisory reported by ZoRLu @ Milw0rm http://www.milw0rm.com/exploits/5181 Original Link...

bestwebapp-sql.txt

Aria-Security Team Persian Security Network http://Aria-Security.net ------------------------------- Shutouts: AurA, imm02tal Original Advisory and more info about this vulnerability: http://forum.aria-security.net/showthread.php?p=1442 Vendor: http://www.bestwebapp.com Google Search:...

joomlastats-sql.txt

Aria-Security Team Persian Security Network http://Aria-Security.Net ------------------------------- Shoutz : The-0utl4w, Sc0rp!on, mormoroth, Kinglet, iM4N, Joomla comstat "id" Remote SQL Injection...

phpnukesell-sql.txt

Aria-Security Team Persian Security Network http://Aria-Security.Net ------------------------------------------------------------------------ Shoutz: Aura, imm02tal, Kinglet, iM4n Php Nuke "Sell" module SQL Injection "cid"...

[Aria-Security.Net] BestWebApp Dating System SQL Injection

Aria-Security Team Persian Security Network http://Aria-Security.net ------------------------------- Shutouts: AurA, imm02tal Original Advisory and more info about this vulnerability: http://forum.aria-security.net/showthread.php?p=1442 Vendor: http://www.bestwebapp.com Google Search:...

aeries browser interface(ABI) 3.7.2.2 Remote SQL Injection

Discovered By : Arsalan Emamjomehkashan [email protected] aeries browser interface 3.7.2.2 SQL Injection Website:http://aeries.com/ Demo:you can test it on http://demo.aeries.com/abi/ Comments.asp?&FC=SQL Labels.asp?&Term=SQL ClassList.asp&Term=SQL -------------------------------- Aria-Security...

aeries-sql.txt

Discovered By : Arsalan Emamjomehkashan [email protected] aeries browser interface 3.7.2.2 SQL Injection Website:http://aeries.com/ Demo:you can test it on http://demo.aeries.com/abi/ Comments.asp?&FC=SQL Labels.asp?&Term=SQL ClassList.asp&Term=SQL -------------------------------- Aria-Security...

aeries browser interface(ABI) 3.8.2.8 Remote SQL Injection

Discovered By : Arsalan Emamjomehkashan [email protected] aeries browser interfaceABI 3.8.2.8 Remote SQL Injection Website:http://aeries.com/ GradebookStuScores.asp?GrdBk=SQL -------------------------- Aria-Security Team httP://Aria-Security.Net...

aeries3828-sql.txt

Discovered By : Arsalan Emamjomehkashan [email protected] aeries browser interfaceABI 3.8.2.8 Remote SQL Injection Website:http://aeries.com/ GradebookStuScores.asp?GrdBk=SQL -------------------------- Aria-Security Team httP://Aria-Security.Net...

aeries browser interface(ABI) 3.8.2.8 XSS

Discovered By : Arsalan Emamjomehkashan [email protected] aeries browser interfaceABI 3.8.2.8 XSS Website:http://aeries.com/ Login on it add a new event with scriptalert"xss/script and it will work each time you load your homepage -------------------------------- Aria-Security Team...

aeries-xss.txt

Discovered By : Arsalan Emamjomehkashan [email protected] aeries browser interfaceABI 3.8.2.8 XSS Website:http://aeries.com/ Login on it add a new event with alert"xss and it will work each time you load your homepage -------------------------------- Aria-Security Team httP://Aria-Security.Net...

GLSA-200802-08 : Boost: Denial of Service

The remote host is affected by the vulnerability described in GLSA-200802-08 Boost: Denial of Service Tavis Ormandy and Will Drewry from the Google Security Team reported a failed assertion in file regex/v4/perlmatchernonrecursive.hpp CVE-2008-0171 and a NULL pointer dereference in function...

Tested on Webmin 1.390

Aria-Security Team Persian Security Network http://Aria-Security.Net ---------------------------------- Tested on Webmin 1.390 Cross Site Scripting This vuln was tested on Webmin as an administrator account root and it has worked on the search section file of the system. Value Inserted:...