EUVD-2009-4691

Malware in sbrugna...

EUVD-2009-2636

Malware in sbrugna...

Sql injection

SQL injection vulnerability in x/login in JungleScripts Ajax Short Url Script allows remote attackers to execute arbitrary SQL commands via the username parameter...

CVE-2009-4727: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in x/login in JungleScripts Ajax Short Url Script allows remote attackers to execute arbitrary SQL commands via the username parameter...

Ajax Short URL Script (Auth Bypass) SQL Injection Vulnerability

No description provided by source. - Discovered By: Cicklow - Date: 03.08.2009 Exploit: username: realadminname ' or ' 1=1 password: cicklow note: generally admin name: admin or any user Buy Script: http://junglescripts.com/shorturls.php Admin login Demo: http://href.in/x/login sebug.net...

CVE-2009-2642

index.php in Desi Short URL Script 1.0 allows remote attackers to bypass authentication by setting the logged cookie to 1 and the uid cookie to an integer value, as demonstrated by a value of 13...

CVE-2009-2642

The CVE-2009-2642 issue affects Desi Short URL Script 1.0, where index.php allows remote attackers to bypass authentication by tampering with cookies: set logged=1 and uid= (example 13). This indicates insufficient server-side validation of session cookies, enabling partial integrity and confiden...

CVE-2009-2642: Improper Authentication

index.php in Desi Short URL Script 1.0 allows remote attackers to bypass authentication by setting the logged cookie to 1 and the uid cookie to an integer value, as demonstrated by a value of 13...