Mambo Component Material Suche 1.0 - SQL Injection

Mambo Component Material Suche 1.0 SQL injection Vulnerability Author: Gamoscu Site: www.1923turk.biz Site: http://gamoscu.wordpress.com/ Greetz: Manas58 Baybora Delibey Tiamo Psiko Turco infazci X-TRO Exploit: index.php?option=commaterialsuche&Itemid=70&tsk=detail&id=SQL-inj...

Joomla Component com_digistore SQL injection

Exploit for unknown platform in category web applications ============================================ Joomla Component comdigistore SQL injection ============================================ Joomla Component comdigistore SQL injection Vulnerability author : Fl0riX Greetz : BARCOD3 , Septemb0x,...

Joomla Component com_acmisc SQL injection

Exploit for unknown platform in category web applications ========================================= Joomla Component comacmisc SQL injection ========================================= Joomla Component comacmisc SQL injection Vulnerability author : Fl0riX Name : comacmisc Bug Type : SQL Injection...

SpireCMS 2.0 - SQL Injection

SpireCMS 2.0 - SQL Injection ALGERIAN HACKER - NORTH-AFRICA SECURITY TEAM - ! SpireCMS v2.0 SQL Injection Vulnerability ! Author : Dr.0rYX and Cr3w-DZ ! MAIL : [email protected] & [email protected] / Software Information + Vendor : http://www.spiread.com/ + script : SpireCMS v2.0 + Download :...

MySQL SELECT语句处理拒绝服务漏洞

CVE ID: CVE-2009-4019 MySQL是一款使用非常广泛的开放源代码关系数据库系统，拥有各种平台的运行版本。 MySQL的mysqld守护程序没有正确地处理在执行某些带有子查询的SELECT语句期间所产生的错误，在执行使用GeomFromWKB函数的语句期间没有保留某些nullvalue标记，这允许通过认证的远程攻击者通过提交特制语句导致守护程序崩溃。 MySQL AB MySQL 5.1.x MySQL AB MySQL 5.0.x 厂商补丁： MySQL AB -------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

Code injection

mysqld in MySQL 5.0.x before 5.0.88 and 5.1.x before 5.1.41 does not 1 properly handle errors during execution of certain SELECT statements with subqueries, and does not 2 preserve certain nullvalue flags during execution of statements that use the GeomFromWKB function, which allows remote...

CVE-2009-4019

CVE-2009-4019 affects MySQL 5.0.x before 5.0.88 and 5.1.x before 5.1.41. The vulnerability arises from two issues during statement execution: (1) improper error handling in certain SELECT statements with subqueries, and (2) failure to preserve certain null_value flags when using the GeomFromWKB f...

ita-forum 5.1.32 - SQL Injection

ita-forum 5.1.32 - SQL Injection / + Homepage : www.1923turk.biz / EXPLOIT : http://server/index.php?cat=-89+union+select+1,2,3,concatusername,0x3a,userpass,5,6,7,8,9,0,1,2,3,4,5+from+itafuser-- ----------------------------------------------- Manas58 Delibey Tiamo...

phpBazar <= 2.1.1fix (cid) SQL Injection

No description provided by source. / Author : MizoZ from MA Group : EvilWay, evilwayatmaildotcom Email : mizozxatgmaildotcom Greetz : Zuka, Dyle !! MABROOK L3IIIIIIIIIID / The vulnerability is in the $GET'catid' , exploit :...

Flashden Multiple File Uploader Shell Upload Vulnerability

No description provided by source. Exploit Title: Flashden Shell Upload Vulnerability Date: 26.12.2009 Author: DigitALL Greetz: Zombie KroNickq HackSpy and ALL 1923Turk.Biz Members Vendor: http://www.jurgenvisser.nl Version: 2.0 Dork: inurl:"selectfile2.php" Application: Please Add Files Your She...

Flashden - Multiple Arbitrary File Uploads

Flashden - Multiple Arbitrary File Uploads Exploit Title: Flashden Shell Upload Vulnerability Date: 26.12.2009 Author: DigitALL Greetz: Zombie KroNickq HackSpy and ALL 1923Turk.Biz Members Vendor: http://www.jurgenvisser.nl Version: 2.0 Dork: inurl:"selectfile2.php" Application: Please Add Files...

Flashden - Multiple Arbitrary File Uploads

Exploit Title: Flashden Shell Upload Vulnerability Date: 26.12.2009 Author: DigitALL Greetz: Zombie KroNickq HackSpy and ALL 1923Turk.Biz Members Vendor: http://www.jurgenvisser.nl Version: 2.0 Dork: inurl:"selectfile2.php" Application: Please Add Files Your Shell And Upload. Shell: /test/shell.p...

MySQL 5.0 < 5.0.88 Multiple Vulnerabilities

The version of MySQL 5.0 installed on the remote host is earlier than 5.0.88. It is, therefore, potentially affected by the following vulnerabilities : - MySQL clients linked against OpenSSL are vulnerable to man-in-the-middle attacks. Bug 47320 - The GeomFromWKB function can be manipulated to...

MySQL 5.1 < 5.1.41 Multiple Vulnerabilities

The version of MySQL 5.1 installed on the remote host is earlier than 5.1.41 and is, therefore, potentially affected by the following vulnerabilities : - An incomplete fix was provided in 5.1.24 for CVE-2008-2079, a symlink-related privilege escalation issue. Bug 39277 - MySQL clients linked...

MySQL拒绝服务和客户端证书校验漏洞

MySQL是一款流行的数据库服务程序。 MySQL存在多个安全漏洞，恶意攻击者可以进行拒绝服务和伪造攻击。 -链接OpenSSL库的MySQL客户端包含的"vioverifycallback"函数存在错误，MySQL服务器如果使用深度为零的证书，攻击者可以进行中间人攻击。 -对在WHERE子句中包含子查询的"SELECT"缺少错误处理和指派一个SELECT结果给用户变量，这个结果可导致服务程序崩溃。 -当处理Geometry值作为第一个参数时"GeomFromWKB"函数不正确保留参数的空值标记，可导致服务程序崩溃。 MySQL 5.x MySQL...

Oracle MySQL < 5.1.41 Multiple Vulnerabilities

Binary data 5240.prm...

MySQL < 5.1.41 Multiple Vulnerabilities

Binary data 801137.prm...

MySQL 6.0.9 - SELECT Statement WHERE Clause Sub-query Denial of Service

MySQL 6.0.9 - SELECT Statement WHERE Clause Sub-query Denial of Service source: https://www.securityfocus.com/bid/37297/info MySQL is prone to multiple remote denial-of-service vulnerabilities because it fails to handle certain SQL expressions. An attacker can exploit these issues to crash the...

Joomla Component Com_Joomclip (cat) SQL injection

No description provided by source. 0000000000000000000000000000000000 000000000000000000000 00000000000000000000000000000000000 0000000000000000 00000000000000000000000000000000 + Joomla Component ComJoomclip cat SQL injection + Author : 599eme Man + Contact : [email protected]...

Joomla! Component Com_Joomclip - 'cat' SQL Injection

0000000000000000000000000000000000 000000000000000000000 00000000000000000000000000000000000 0000000000000000 00000000000000000000000000000000 + Joomla Component ComJoomclip cat SQL injection + Author : 599eme Man + Contact : [email protected]...