CVE-2010-0462

Heap-based buffer overflow in IBM DB2 9.1 before FP9, 9.5 before FP6, and 9.7 before FP2 allows remote authenticated users to have an unspecified impact via a SELECT statement that has a long column name generated with the REPEAT function...

Joomla Jobads Cross Site Scripting

Joomla Component comjobads XSS Vulnerability Author : N0KT4 Name : comjobads Bug Type : SQL Ýnjection Infection : Administrator bilgileri çalýnabilir Demo Vuln. : :http://www.beer.lv/index.php?option=comjobads&task=view&type=SQL...

Joomla Countries SQL Injection

Joomla Component comcountries SQL Injection Vulnerability Author : FL0RiX Name : comcountries Greez : Deep-Power, PyskE,Septemb0x,KaCaK Bug Type : SQL Injection Infection : Admin login bilgileri alinabilir. Demo Vuln. : http://www.gocvg.com/index.php?option=comcountries&locat=SQL INJ. Bug Fix...

Nuke Remote SQL Injection

=-==-==-==-==-==-==-==T==K==R==D==-==-==-==-==-==-==-==-==-==-==-==-= Nuke Remote SQL Injection Vulnerability =-==-==-==-==-==-==-==T==K==R==D==-==-==-==-==-==-==-==-==-==-==-==-= Found: FormatXFormaT contact: [email protected] Forum: Tkurd.com...

Koobi Pro v6.1 gallery (img_id)

No description provided by source. Koobi Pro v6.1 gallery imgid AUTHOR : BILGEKAGAN HOME : http://www.1923turk.biz DORK 1 : allinurl: "index.php?p=gallerypic imgid" EXPLOiT: index.php?p=gallerypic&imgid=-1+union+select+0,1,2,concatemail,0x3a,pass,4,5,6,7,8+from+kpro6user aDMN PANEL: admin/login.p...

Mambo Component Material Suche 1.0 - SQL Injection

Mambo Component Material Suche 1.0 SQL injection Vulnerability Author: Gamoscu Site: www.1923turk.biz Site: http://gamoscu.wordpress.com/ Greetz: Manas58 Baybora Delibey Tiamo Psiko Turco infazci X-TRO Exploit: index.php?option=commaterialsuche&Itemid=70&tsk=detail&id=SQL-inj...

Nuke - SQL Injection

Nuke - SQL Injection =-==-==-==-==-==-==-==T==K==R==D==-==-==-==-==-==-==-==-==-==-==-==-= Nuke Remote SQL Injection Vulnerability =-==-==-==-==-==-==-==T==K==R==D==-==-==-==-==-==-==-==-==-==-==-==-= Found: FormatXFormaT contact: [email protected] Forum: Tkurd.com...

Joomla Component com_acmisc SQL injection

Exploit for unknown platform in category web applications ========================================= Joomla Component comacmisc SQL injection ========================================= Joomla Component comacmisc SQL injection Vulnerability author : Fl0riX Name : comacmisc Bug Type : SQL Injection...

Joomla Component com_digistore SQL injection

Exploit for unknown platform in category web applications ============================================ Joomla Component comdigistore SQL injection ============================================ Joomla Component comdigistore SQL injection Vulnerability author : Fl0riX Greetz : BARCOD3 , Septemb0x,...

SpireCMS 2.0 - SQL Injection

SpireCMS 2.0 - SQL Injection ALGERIAN HACKER - NORTH-AFRICA SECURITY TEAM - ! SpireCMS v2.0 SQL Injection Vulnerability ! Author : Dr.0rYX and Cr3w-DZ ! MAIL : [email protected] & [email protected] / Software Information + Vendor : http://www.spiread.com/ + script : SpireCMS v2.0 + Download :...

MySQL SELECT语句处理拒绝服务漏洞

CVE ID: CVE-2009-4019 MySQL是一款使用非常广泛的开放源代码关系数据库系统，拥有各种平台的运行版本。 MySQL的mysqld守护程序没有正确地处理在执行某些带有子查询的SELECT语句期间所产生的错误，在执行使用GeomFromWKB函数的语句期间没有保留某些nullvalue标记，这允许通过认证的远程攻击者通过提交特制语句导致守护程序崩溃。 MySQL AB MySQL 5.1.x MySQL AB MySQL 5.0.x 厂商补丁： MySQL AB -------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

Code injection

mysqld in MySQL 5.0.x before 5.0.88 and 5.1.x before 5.1.41 does not 1 properly handle errors during execution of certain SELECT statements with subqueries, and does not 2 preserve certain nullvalue flags during execution of statements that use the GeomFromWKB function, which allows remote...

CVE-2009-4019

CVE-2009-4019 affects MySQL 5.0.x before 5.0.88 and 5.1.x before 5.1.41. The vulnerability arises from two issues during statement execution: (1) improper error handling in certain SELECT statements with subqueries, and (2) failure to preserve certain null_value flags when using the GeomFromWKB f...

ita-forum 5.1.32 - SQL Injection

ita-forum 5.1.32 - SQL Injection / + Homepage : www.1923turk.biz / EXPLOIT : http://server/index.php?cat=-89+union+select+1,2,3,concatusername,0x3a,userpass,5,6,7,8,9,0,1,2,3,4,5+from+itafuser-- ----------------------------------------------- Manas58 Delibey Tiamo...

phpBazar <= 2.1.1fix (cid) SQL Injection

No description provided by source. / Author : MizoZ from MA Group : EvilWay, evilwayatmaildotcom Email : mizozxatgmaildotcom Greetz : Zuka, Dyle !! MABROOK L3IIIIIIIIIID / The vulnerability is in the $GET'catid' , exploit :...

Flashden Multiple File Uploader Shell Upload Vulnerability

No description provided by source. Exploit Title: Flashden Shell Upload Vulnerability Date: 26.12.2009 Author: DigitALL Greetz: Zombie KroNickq HackSpy and ALL 1923Turk.Biz Members Vendor: http://www.jurgenvisser.nl Version: 2.0 Dork: inurl:"selectfile2.php" Application: Please Add Files Your She...

Flashden - Multiple Arbitrary File Uploads

Flashden - Multiple Arbitrary File Uploads Exploit Title: Flashden Shell Upload Vulnerability Date: 26.12.2009 Author: DigitALL Greetz: Zombie KroNickq HackSpy and ALL 1923Turk.Biz Members Vendor: http://www.jurgenvisser.nl Version: 2.0 Dork: inurl:"selectfile2.php" Application: Please Add Files...

Flashden - Multiple Arbitrary File Uploads

Exploit Title: Flashden Shell Upload Vulnerability Date: 26.12.2009 Author: DigitALL Greetz: Zombie KroNickq HackSpy and ALL 1923Turk.Biz Members Vendor: http://www.jurgenvisser.nl Version: 2.0 Dork: inurl:"selectfile2.php" Application: Please Add Files Your Shell And Upload. Shell: /test/shell.p...

MySQL 5.0 < 5.0.88 Multiple Vulnerabilities

The version of MySQL 5.0 installed on the remote host is earlier than 5.0.88. It is, therefore, potentially affected by the following vulnerabilities : - MySQL clients linked against OpenSSL are vulnerable to man-in-the-middle attacks. Bug 47320 - The GeomFromWKB function can be manipulated to...

MySQL 5.1 < 5.1.41 Multiple Vulnerabilities

The version of MySQL 5.1 installed on the remote host is earlier than 5.1.41 and is, therefore, potentially affected by the following vulnerabilities : - An incomplete fix was provided in 5.1.24 for CVE-2008-2079, a symlink-related privilege escalation issue. Bug 39277 - MySQL clients linked...