Joomla! Component mosDirectory 2.3.2 - Remote File Inclusion

Joomla! Component mosDirectory 2.3.2 - Remote File Inclusion --==+=================== Electronic Security Team www.Yee7.com =================+==-- --==+ Joomla Component mosDirectory 2.3.2 Remote File Inclusion +==--...

Joomla! Component mosDirectory 2.3.2 - Remote File Inclusion

--==+=================== Electronic Security Team www.Yee7.com =================+==-- --==+ Joomla Component mosDirectory 2.3.2 Remote File Inclusion +==-- --==+=============================================================================+==-- Software: Joomla Component mosDirectory 2.3.2 exploit...

Security vulnerability with Dashboard spacesSelectedTab

Our security team has reported the following vulnerability, which must be resolved for us to use the application. Severity: High Test Type: Application Vulnerable URL: https://gforgewiki.nci.nih.gov/dashboard.action Parameter = spacesSelectedTab Remediation Tasks: Filter out hazardous characters...

neuron-multi.txt

...:::::neuron news1.0 Multiple Remote Vulnerabilities::::.... sql injection/xss Virangar Security Team www.virangar.org www.virangar.net -------- Discoverd By : virangar security team hadihadi & black.shadowes --------------------------------- special tnx to:MR.nosrati,MR.hesy,satan,Zahra & all...

neuron news1.0 Multiple Remote Vulnerabilities (sql injection/xss)

...:::::neuron news1.0 Multiple Remote Vulnerabilities::::.... sql injection/xss Virangar Security Team www.virangar.org www.virangar.net -------- Discoverd By : virangar security team hadihadi & black.shadowes --------------------------------- special tnx to:MR.nosrati,MR.hesy,satan,Zahra & all...

bttlxeForum Multiple SQL Injection And Cross Site Scripting

Aria-Security Team http://Aria-Security.Net ----------------------------- Discovered By: Mormoroth Shout outs The-0utlaw for completing the vuln. I.SQL Injection http://site.ltd/myaccount/viewProfile.asp?member='update Members set ProfileName='hacked';-- This Changes MemberList...

Lotfian.com DATABASE DRIVEN TRAVEL SITE SQL Injection Vuln

No description provided by source. Aria-Security Team http://Aria-Security.Net ----------------------------- DATABASE DRIVEN TRAVEL SITE Vendor: Lotfian.com NewsDetails.asp?NewsID=''UPDATE gtsNews set NewsDescription='HACKED' UPDATE gtsNews set NewsTitle='HACKED' Destination.asp?CID=''UPDATE...

lotfiandb-sql.txt

Aria-Security Team http://Aria-Security.Net ----------------------------- DATABASE DRIVEN TRAVEL SITE Vendor: Lotfian.com NewsDetails.asp?NewsID=''UPDATE gtsNews set NewsDescription='HACKED' UPDATE gtsNews set NewsTitle='HACKED' Destination.asp?CID=''UPDATE gtsCountry set CountyName='HACKED'...

shnews-sql.txt

...:::::SH-News 3.0 SQL Injection Vulnerbility ::::.... Virangar Security Team www.virangar.org www.virangar.net -------- Discoverd By : hadihadi special tnx to:MR.nosrati,black.shadowes,MR.hesy,Zahra & all virangar members & all iranian hackerz greetz:to my best friend in the world hadiaryaie200...

Lotfian.com DATABASE DRIVEN TRAVEL SITE - SQL Injection

Lotfian.com DATABASE DRIVEN TRAVEL SITE - SQL Injection Aria-Security Team http://Aria-Security.Net ----------------------------- DATABASE DRIVEN TRAVEL SITE Vendor: Lotfian.com NewsDetails.asp?NewsID=''UPDATE gtsNews set NewsDescription='HACKED' UPDATE gtsNews set NewsTitle='HACKED'...

SH-News 3.0 (comments.php id) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================ SH-News 3.0 comments.php id Remote SQL Injection Vulnerability ================================================================ ...:::::SH-News 3.0 SQL Injection Vulnerbility...

SH-News 3.0 - comments.php SQL Injection

SH-News 3.0 - comments.php SQL Injection ...:::::SH-News 3.0 SQL Injection Vulnerbility ::::.... Virangar Security Team www.virangar.org www.virangar.net -------- Discoverd By : hadihadi special tnx to:MR.nosrati,black.shadowes,MR.hesy,Zahra & all virangar members & all iranian hackerz greetz:to ...

Content Injector 1.53 (index.php) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ==================================================================== Content Injector 1.53 index.php Remote SQL Injection Vulnerability ====================================================================...

SH-News 3.0 - 'comments.php' SQL Injection

...:::::SH-News 3.0 SQL Injection Vulnerbility ::::.... Virangar Security Team www.virangar.org www.virangar.net -------- Discoverd By : hadihadi special tnx to:MR.nosrati,black.shadowes,MR.hesy,Zahra & all virangar members & all iranian hackerz greetz:to my best friend in the world hadiaryaie200...

NSFOCUS SA2007-02 : Cisco Security Agent Remote Buffer Overflow Vulnerability

NSFOCUS Security Advisory SA2007-02 Cisco Security Agent Remote Buffer Overflow Vulnerability Release Date: 2007-12-06 CVE ID: CVE-2007-5580 http://www.nsfocus.com/english/homepage/research/0702.htm Affected systems & software =================== Cisco Security Agent for Windows 4.5.1.672 Cisco...

Aria-Security.Net: PenPals Login and search page SQL Injection

--------------------------- Aria-Security Team http://Aria-Security.Net ---------------------------- Original Advisory @ http://aria-security.net/forum/showthread.php?p=1148 Shout outs to : AurA TLOTD http://ankoor.com/ vendor Dork:Powered By Anblik Affected fileS: search.asp login.asp 'group by...

Lotfian Brochure and cataloge Script XSS And SQL Injection

Aria-Security Team http://Aria-Security.Net ---------------------------------------- Lotfian Brochure and cataloge Script XSS And SQL Injection Original Advisory @ http://aria-security.net/forum/showthread.php?p=1135 Username/Password Field can run SQL Queries, For Example I got these:...

irola-sql.txt

Aria-Security Team http://Aria-Security.Net ----------------------------- Original Advisory and more details @ http://aria-security.net/forum/showthread.php?p=1106 Irola My-Time v3.5 http://www.irola.com Username/Password Fields can run SQL Queries. Therefore: We get the Tables: UserInfo.UserID...

coolshot-sql.txt

Aria-Security Team http://aria-security.net ------------------------------------- CoolShot E-Lite POS 1.0 http://coolshot.net/index.php/works/49-e-lite-pos Original Advisory @ http://aria-security.net/forum/showthread.php?p=1108post1108 Published on November 24 2007 users.userid users.username...

ci-sql.txt

--==+================================================================================+==-- --==+ Content Injector V1.52 SQL Injection Vulnerbility +==-- --==+================================================================================+==-- AUTHOR: S.W.A.T...