ClearMindGraphics SQL Injection

Exploit Title: ClearMindGraphics SQL Injection Vulnerability -Google Dork-: "Site by: ClearMindGraphics" Date: 2011-18-09 Author: nGa Sa Lu GaNgst3r Service Link: http://www.clearmindgraphics.com/ Tested on: Vista Platform : php Google Dork : "Site by: ClearMindGraphics"...

Intellasoft SQL Injection

Exploit Title: Intellasoft SQL INJECTION Vulnerabilities Date: 12/09/2011 Author: nGa Sa Lu N-S-L Service Link: http://www.intellasoft.ca Tested on: Vista Google Dork: "Site designed by Intellasoft" SQL Error Statement ERROR - Please try again - if this error keeps occurring please notify site...

Web development by Discover Web Solutions SQL injection Vulnerability

Exploit for php platform in category web applications ‡‡‡‡‡‡‡‡‡‡‡‡‡‡ + Exploit Title : Web development by Discover Web Solutions.. SQL injection Vulnerability + Date : 08 June 2011 + Author : k's0uR! + Category : WebApps + d0rk : "Web development by Discover Web...

CVE-2010-4753

Cross-site scripting XSS vulnerability in LightNEasy.php in LightNEasy 3.2.1 allows remote attackers to inject arbitrary web script or HTML via the id parameter, which is not properly handled in a forced SQL error message...

Cross site scripting

Cross-site scripting XSS vulnerability in LightNEasy.php in LightNEasy 3.2.1 allows remote attackers to inject arbitrary web script or HTML via the id parameter, which is not properly handled in a forced SQL error message...

CVE-2010-4753

Cross-site scripting XSS vulnerability in LightNEasy.php in LightNEasy 3.2.1 allows remote attackers to inject arbitrary web script or HTML via the id parameter, which is not properly handled in a forced SQL error message...

CVE-2010-4753: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in LightNEasy.php in LightNEasy 3.2.1 allows remote attackers to inject arbitrary web script or HTML via the id parameter, which is not properly handled in a forced SQL error message...

Joomla! 1.5.x - SQL Error Information Disclosure

Joomla! 1.5.x - SQL Error Information Disclosure source: https://www.securityfocus.com/bid/44674/info Joomla! is prone to an information-disclosure vulnerability due to an SQL error. Exploiting this issue can allow attackers to gain access to sensitive information contained in the application's...

Joomla! 1.5.x - SQL Error Information Disclosure

source: https://www.securityfocus.com/bid/44674/info Joomla! is prone to an information-disclosure vulnerability due to an SQL error. Exploiting this issue can allow attackers to gain access to sensitive information contained in the application's database. Successful exploits may lead to other...

phpMyShopping 1.0.1505 - Multiple Vulnerabilities

.:. Author : Metropolis .:. Home : www.metropolis.fr.cr .:. Script : PhpMyShopping .:. Version : v1.0.1505 .:. Download Script: http://www.phpmyshopping.org/nightbuild/PhpMyShoppingmonoboutiquev1.0.1505.tar.gz .:. Bug Type : Multiple Vulnerabilities / Blind SQL Injections / XSS === Blind Sql...

Nuked-Klan Partenaires NK 1.5 Blind SQL Injection

.:. Author : Metropolis .:. Home : www.metropolis.fr.cr .:. Script : Nuked-Klan Module Partenaires NK 1.5 .:. Version : 1.5 .:. Download Script: http://www.nuked-klan.org/index.php?file=Download&op=description&dlid=317 .:. Bug Type : Blind Sql Injection .:. Dork :...

Nuked-klaN Module Partenaires NK 1.5 - Blind SQL Injection

.:. Author : Metropolis .:. Home : www.metropolis.fr.cr .:. Script : Nuked-Klan Module Partenaires NK 1.5 .:. Version : 1.5 .:. Download Script: http://www.nuked-klan.org/index.php?file=Download&op=description&dlid=317 .:. Bug Type : Blind Sql Injection .:. Dork :...

CVE-2010-2854

Multiple cross-site scripting XSS vulnerabilities in modfile.php in Event Horizon EVH 1.1.10, when magicquotesgpc is disabled, allow remote attackers to inject arbitrary web script or HTML via the 1 YourEmail and 2 VerificationNumber parameters, which are not properly handled in a forced SQL erro...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in modfile.php in Event Horizon EVH 1.1.10, when magicquotesgpc is disabled, allow remote attackers to inject arbitrary web script or HTML via the 1 YourEmail and 2 VerificationNumber parameters, which are not properly handled in a forced SQL erro...

CVE-2010-2854

Multiple cross-site scripting XSS vulnerabilities in modfile.php in Event Horizon EVH 1.1.10, when magicquotesgpc is disabled, allow remote attackers to inject arbitrary web script or HTML via the 1 YourEmail and 2 VerificationNumber parameters, which are not properly handled in a forced SQL erro...

CVE-2010-2854: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in modfile.php in Event Horizon EVH 1.1.10, when magicquotesgpc is disabled, allow remote attackers to inject arbitrary web script or HTML via the 1 YourEmail and 2 VerificationNumber parameters, which are not properly handled in a forced SQL erro...

CVE-2010-2722

Cross-site scripting XSS vulnerability in index.php in RightInPoint Lyrics Script 3.0 allows remote attackers to inject arbitrary web script or HTML via the artistid parameter, which is not properly handled in a forced SQL error message. NOTE: the provenance of this information is unknown; the...

CVE-2010-2722

Cross-site scripting XSS vulnerability in index.php in RightInPoint Lyrics Script 3.0 allows remote attackers to inject arbitrary web script or HTML via the artistid parameter, which is not properly handled in a forced SQL error message. NOTE: the provenance of this information is unknown; the...

CVE-2010-2722

CVE-2010-2722 describes an XSS vulnerability in RightInPoint Lyrics Script 3.0 (index.php) where the attacker can inject arbitrary script via the artist_id parameter, due to inadequate handling of data in a forced SQL error message. The affected component is the web interface’s index.php for Lyri...

CVE-2010-2722: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in index.php in RightInPoint Lyrics Script 3.0 allows remote attackers to inject arbitrary web script or HTML via the artistid parameter, which is not properly handled in a forced SQL error message. NOTE: the provenance of this information is unknown; the...