GENU CMS 2012.3 - Multiple SQL Injection Vulnerabilities

Document Title: =============== GENU CMS 2012.3 - Multiple SQL Injection Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=538 Release Date: ============= 2012-04-29 Vulnerability Laboratory ID VL-ID: ==================================== 53...

Symantec IM Manager IMAdminLDAPConfig.asp SQL injection

Added: 10/31/2011 CVE: CVE-2011-0553 BID: 49738 OSVDB: 75984 Background Symantec IM Manager is a solution for managing and securing instant-messaging traffic in an enterprise. Problem An SQL injection vulnerability in IMAdminLDAPConfig.asp allows remote, authenticated attackers to execute arbitra...

VietNext cms multiple defects and repair-vulnerability warning-the black bar safety net

Exploit Title:Multiple Vulnerabilities + Date: 2 0 1 1 + script:VietNext cms + Software: http://vietnextco.com & amp; http://vietnext.vn + Author : pentesters. ir + Website : WwW.PenTesters.IR + dorks :"Developed & Design By VietNext" and "Design by VietNext"...

JVN#60969543 HL-SiteManager vulnerable to SQL injection

HL-SiteManager from Heartlogic is a contents management system CMS software. HL-SiteManager contains a SQL injection vulnerability. Impact A remote attacker may view or modify information stored by the product. Solution Do not use HL-SiteManager As patches will not be provided, users are...

PDQ Script 1.0 <== [listingid] SQL Injection

Exploit for unknown platform in category web applications ============================================ PDQ Script 1.0 == listingid SQL Injection ============================================ +===================================================================================+ | | | PDQ Script 1.0 ...

SitePal v1.1(Auth Bypass) SQL Injection Vulnerability

No description provided by source. SitePal v1.1Auth Bypass Remote SQL Injection Vulnerability ---------------------------------------------------------- author: R3d-D3v!L Date: 15.12.2009 7!M3:1-35 Home: www.Xp10.ME contact: N/A ----------------------------------------------------------- Exploit:...

Max.Blog 1.0.6 SQL Injection

Salvatore "drosophila" Fresta Application: Max.Blog http://www.mzbservices.com Version: Max.Blog = 1.0.6 Bug: SQL Injection Exploitation: Remote Dork: intext:"Powered by Max.Blog" Date: 27 Jan 2009 Discovered by: Salvatore "drosophila" Fresta Author: Salvatore "drosophila" Fresta e-mail:...

PhpMesFilms 1.0 (index.php id) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================= PhpMesFilms 1.0 index.php id Remote SQL Injection Vulnerability ================================================================= in the name of God Download script :...

CVE-2008-5195

Multiple SQL injection vulnerabilities in SebracCMS sbcms 0.4 allow remote attackers to execute arbitrary SQL commands via 1 the recid parameter to cms/form/read.php, 2 the uname parameter to cms/index.php, and other unspecified vectors...

YourFreeWorld Programs Rating (details.php id) SQL Injection Vuln

No description provided by source. ||| Programs Rating details.php id Remote SQL Injection Vulnerability || Author: Hussin X || Home : WwW.IQ-TY.CoM || email: darkangelg85atYahooDoTcom ||| script :http://www.yourfreeworld.com/script/rating.php ||| DorK : ^ Exploit...

Catviz 0.4.0 beta1 Multiple Remote SQL Injection Vulnerabilities

No description provided by source. Catviz 0.4.0 beta1 SQL Injection Vulnerability Bug by: h0yt3r Dork: n/a Homepage: catviz.sourceforge.net This CMS suffers from some not correctly verified variables which are used in SQL Querys. An Attacker can easily get sensitive information from the database ...

pSys v0.7.0 Alpha (chatbox.php) Remote SQL Injection Vulnerability

No description provided by source. '/ -.- ---------------------oOO------OOo-------------------- | pSys v0.7.0 Alpha chatbox.php Remote SQL Injection | | works only with magic quotes = off | | coded by DNX | -------------------------------------------------------- ! Discovered.: DNX ! Vendor.....:...

PHP-Fusion Mod Classifieds - lid SQL Injection

PHP-Fusion Mod Classifieds - lid SQL Injection Php fusion "classifieds" SQL-injetion ++++++++++++++++++++++++++++ Author : boom3rang contact : boomerang at knaqu-shqipe dot de webpage : www.khg-crew.ws ++++++++++++++++++++++++++++ ---- Remote SQL Injection ------ + Dork:...

ShareCMS 0.1 - Multiple SQL Injections

============================================================== ShareCMS 0.1 Multiple Remote SQL Injection Vulnerabilities ============================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team...

MyMarket 1.72 Blind SQL Injection Exploit

No description provided by source. !/usr/bin/perl MyMarket 1.72 Blind SQL Injection Exploit Bug by: h0yt3r Demo: http://mymarket.sourceforge.net/demo/shopping/ http://www.site.de/mymarket/shopping/?id=bluah Ok when we give $id an unexpected value like this we get an SQL Error. Union selecting see...

PostNuke Module pnEncyclopedia 0.2.0 - SQL Injection

PostNuke Module pnEncyclopedia 0.2.0 - SQL Injection \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV90$2008 ----------------------------------------------------------------------------------------- ECHOADV90$2008 PostNuke Module pnEncyclopedia = 0.2.0 id...

w-Agora <= 4.2.1 (cat) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ========================================================= w-Agora = 4.2.1 cat Remote SQL Injection Vulnerability ========================================================= W-Agora = 4.2.1 Class: SQL Injection Found: 30/12/2007 Remote: Yes...

Vulnerabilities

New Advisory: modx-0.9.6 http://www.dear-pets.com ——————–Summary—————- Software: modx-0.9.6 Sowtware’s Web Site: http://www.modxcms.com Versions: 0.9.6 Critical Level: Moderate Type: Multiple Vulnerabilities Class: Remote Status: Unpatched PoC/Exploit: Not Available Solution: Not Available...

phpFullAnnu (PFA) 6.0 Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ======================================================== phpFullAnnu PFA 6.0 Remote SQL Injection Vulnerability ======================================================== Inclusion Hunter Team http://www.ihteam.net phpFullAnnu PFA 6.0 Class:...

CVE-2007-3582

SQL injection vulnerability in index.php in SuperCali PHP Event Calendar 0.4.0 allows remote attackers to execute arbitrary SQL commands via the o parameter...