1299 matches found
Event Script PHP v1.1 CMS - Multiple Web Vulnerabilities
Document Title: =============== Event Script PHP v1.1 CMS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=606 Release Date: ============= 2012-06-09 Vulnerability Laboratory ID VL-ID: ==================================== 60...
PHP Volunteer Management System 1.0.2 SQL Injection
Title: PHP Volunteer Management System v 1.0.2 multiple SQLi Vulnerabilities Version: 1.0.2 Author/Found by: loneferret Software Site: https://sourceforge.net/projects/phpvolunteer/ Other vulnerabilities: http://www.exploit-db.com/exploits/18941/ Date found: May 28th 2012 Tested on: Ubuntu Server...
PHP Volunteer Management System 1.0.2 - Multiple SQL Injections
PHP Volunteer Management System 1.0.2 - Multiple SQL Injections Title: PHP Volunteer Management System v 1.0.2 multiple SQLi Vulnerabilities Version: 1.0.2 Author/Found by: loneferret Software Site: https://sourceforge.net/projects/phpvolunteer/ Other vulnerabilities:...
Matterdaddy Market 1.1 - 'cat_name' Multiple SQL Injections
source: https://www.securityfocus.com/bid/52970/info Matterdaddy Market is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. A successful exploit may allow an attacker to compromise the application, access...
CVE-2011-5072
Multiple SQL injection vulnerabilities in Support Incident Tracker aka SiT! before 3.65 allow remote attackers to execute arbitrary SQL commands via the 1 start parameter to portal/kb.php; 2 contractid parameter to contractaddservice.php; 3 id parameter to editescalationpath.php; 4 unlock, 5 lock...
Alstrasoft EPay Enterprise 4.0 - Blind SQL Injection
Alstrasoft EPay Enterprise 4.0 - Blind SQL Injection Exploit Title: AlstraSoft EPay Enterprise v4.0 Blind SQL Injection Google Dork: Copyright @ 2010 iPayGold.com Date: Decembar/6/2011 Author: Don BalcanCrew & BalcanHack Software Link: http://www.alstrasoft.com/epayenterprise.htm Version: 4.0...
Xenon - id Multiple SQL Injections
Xenon - id Multiple SQL Injections source: https://www.securityfocus.com/bid/50141/info Xenon is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit may allow an attacker to...
La Poste FR Website - Multiple SQL Injection Vulnerabilities
Document Title: =============== La Poste FR Website - Multiple SQL Injection Vulnerabilities Release Date: ============= 2011-09-12 Vulnerability Laboratory ID VL-ID: ==================================== 267 Product & Service Introduction: =============================== La Poste is the mail...
CVE-2011-2930
Multiple SQL injection vulnerabilities in the quotetablename method in the ActiveRecord adapters in activerecord/lib/activerecord/connectionadapters/ in Ruby on Rails before 2.3.13, 3.0.x before 3.0.10, and 3.1.x before 3.1.0.rc5 allow remote attackers to execute arbitrary SQL commands via a...
zSecure - Web Security Consultancy Hacked by Mr52
zSecure - Web Security Consultancy Hacked by Mr52 ZSecure.net - Web Security Consultancy services Provider hacked by Indian Hacker Mr52. Zsecure is the same firm who expose the Timesofmoney SQL Injection Vulnerability, Sify.com SQL Injection Vulnerability and Dukascopy.com SQL Injection...
CVE-2011-2703
Multiple SQL injection vulnerabilities in MapServer before 4.10.7, 5.x before 5.6.7, and 6.x before 6.0.1 allow remote attackers to execute arbitrary SQL commands via vectors related to 1 OGC filter encoding or 2 WMS time support...
PT-2011-25: SQL injection vulnerabilities in Support Incident Tracker
Positive Research Center has discovered multiply SQL injection vulnerabilities in Support Incident Tracker. Application incorrectly validates input data, which allows attackers to conduct an SQL injection attack. "SQL Injection" is a way to bypass network protection and attack the database...
eClime eCommerce JE 1.0.6b - SQL Injection Vulnerabilities
Document Title: =============== eClime eCommerce JE 1.0.6b - SQL Injection Vulnerabilities Release Date: ============= 2011-07-13 Vulnerability Laboratory ID VL-ID: ==================================== 82 Product & Service Introduction: =============================== eclime is a very powerful...
A Really Simple Chat Multiple SQL Injection Vulnerabilities
A Really Simple Chat is prone to multiple SQL injection vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Guru JustAnswer Professional 1.25 - Multiple SQL Injections
Guru JustAnswer Professional 1.25 - Multiple SQL Injections / / / \ \ \ \ \ / / \\ \ \ \ \ // /// \ \ / / \ //|\ / \ \ \ \ \ \ / / \ \ / / \ | | | \ | | || | | |/ / \ V / || |\ V / / \ | / \ | /| | | || / | | | | . | ' || / | || // \ // \|||/|||||||||\ .WEB.ID...
E-lokaler CMS 2 - Admin Login Multiple SQL Injections
E-lokaler CMS 2 - Admin Login Multiple SQL Injections source: https://www.securityfocus.com/bid/45098/info E-lokaler CMS is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could...
Link Bid Script (links.php id) SQL Injection Vulnerability
Exploit for php platform in category web applications ========================================================== Link Bid Script links.php id SQL Injection Vulnerability ========================================================== In The Name Of Allah The Mercifull Tybe: SQL Injection Vulnerabiliti...
Press Release Script - 'page.php?id' SQL Injection
In The Name Of Allah The Mercifull Tybe: SQL Injection Vulnerabilities Vendor: www.v-eva.com + Software: Press Release Script + author: R3d-D3v!L + TEAM: ArAB!AN !NFORMAT!ON SeCuR!TY ----4.!.5 ? contact: Xathotmail.co.jp - ? Date: 14.Jan.2010 ? T!ME: 05:15 am GMT ? Home: © Offensive Security ?...
PHP-Nuke多个SQL注入漏洞
BUGTRAQ ID: 39922 PHP-Nuke是一个广为流行的网站创建和管理工具，可使用很多数据库软件作为后端，如MySQL、PostgreSQL、mSQL、 Interbase、Sybase等。 PHP-Nuke没有正确地过滤提交给/modules/Journal/savenew.php页面的mood变量，以及提交给/modules /YourAccount/admin/index.php页面的chnguser变量。远程攻击者可以通过提交恶意查询请求执行SQL注入攻击，完全入侵数据库系统。 PHP-Nuke PHP-Nuke 8.1.35 PHP-Nuke PHP-Nuke 8....