phpMyAdmin 3.1.0 (XSRF) SQL Injection Vulnerability

No description provided by source. Written by Michael Brooks Special Thanks to str0ke and rGod Intro: phpMyAdmin is by far the most popular PHP project. Between phpmyadmin and the xampp project there are more than 34+ million downloads from sourceforge.net . This exploit was released along side...

phpMyAdmin 3.1.0 - Cross-Site Request Forgery SQL Injection

phpMyAdmin 3.1.0 - Cross-Site Request Forgery SQL Injection Written by Michael Brooks Special Thanks to str0ke and rGod Intro: phpMyAdmin is by far the most popular PHP project. Between phpmyadmin and the xampp project there are more than 34+ million downloads from sourceforge.net . This exploit...

Pre Classified Listings 1.0 - 'detailad.asp' SQL Injection

source: https://www.securityfocus.com/bid/32566/info Pre Classified Listings is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access...

Natterchat 1.1 - Authentication Bypass

Script Name : NATTERCHAT v1.1 remote login bypass + Author : Bl@ckbe@rD 'Tunisian TerrorisT' + Contact : blackbeard-sqlA.Thotmail.fr ; + Dork : Powered by NATTERCHAT v 1.1 --//-- + Expl0iT : 1 Go to the Login page http://www.exemple.ff/chat/nattechat/home.asp 2 Username : admin Password : ' or...

Natterchat 1.1 - Authentication Bypass

Natterchat 1.1 - Authentication Bypass + Script Name : NATTERCHAT v1.1 remote login bypass + Author : Bl@ckbe@rD 'Tunisian TerrorisT' + Contact : blackbeard-sqlA.Thotmail.fr ; + Dork : Powered by NATTERCHAT v 1.1 --//-- + Expl0iT : 1 Go to the Login page...

Easyedit CMS - page.php?intPageID SQL Injection

Easyedit CMS - page.php?intPageID SQL Injection source: https://www.securityfocus.com/bid/32369/info Easyedit is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an...

SpitFire Photo Pro - pages.php SQL Injection

SpitFire Photo Pro - pages.php SQL Injection source: https://www.securityfocus.com/bid/32012/info SpitFire Photo Pro is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attack...

Joekoe(乔客CMS)3.0Sql注入漏洞

JoekoeCMS3在获取客户端浏览器类型参数User-agent时没有严格过滤，导致在引入查询时可以通过修改数据包构造特殊的user-agent值来达到添加后台管理员等目的。 JoekoeCMS3将所有类都封装在了一个JoekoeCMS3b.dll的Dll中， Joekoe是通过cls.ipsys1来获取客户端的User-Agent，所以在其程序中调用cls.ipsys1并放入SQL查询的页面\common\review.asp、\forum\post.asp、\forum\inc\incpost.asp均存在此漏洞。...

myEvent Multiple Remote Vulnerabilities

myEvent is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2008 Josh Zlatin-Amishav Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Dizi Portali - diziler.asp SQL Injection

Dizi Portali - diziler.asp SQL Injection source: https://www.securityfocus.com/bid/31849/info Dizi Portali is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...

PHP-Nuke Sarkilar Module - id SQL Injection

PHP-Nuke Sarkilar Module - id SQL Injection source: https://www.securityfocus.com/bid/31830/info Sarkilar module for PHP-Nuke is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow ...

Stash 1.0.3 (SQL) User Credentials Disclosure Exploit

No description provided by source. !/usr/bin/perl -w User credentials disclosure exploit - stash103exp.pl Gnix [email protected] http://gnix.netsons.org This exploit use an SQL Injection in the file admin/login.php to bypass the login, and then an SQL Injection in the admin/news.php to extract a...

FAQ Management Script - catid SQL Injection

FAQ Management Script - catid SQL Injection || | | FAQ Management catid Remote SQL Injection Vulnerability | | |-------------------- Hussin X -------------------| | | Author: Hussin X | | Home : WwW.IQ-ty.CoM | | email: darkangelg85atYahooDoTcom | | | | | | | | script :...

Invision Power Board 'name'参数SQL注入漏洞

BUGTRAQ ID: 31288 CNCAN ID：CNCAN-2008092307 Invision Power Board是一款基于PHP的论坛程序。 Invision Power Board不正确处理用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，获得敏感信息或可操作数据库。 问题是脚本对'name'参数缺少过滤，构建恶意的SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息。 Invision Power Services Invision Power Board 2.3.5 Invision Power Services Invision Power Boa...

Cars Vehicle - page.php SQL Injection

Cars Vehicle - page.php SQL Injection source: https://www.securityfocus.com/bid/31214/info The Cars & Vehicle script is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attack...

E-PHP B2B Trading Marketplace Script - listings.php SQL Injection

E-PHP B2B Trading Marketplace Script - listings.php SQL Injection source: https://www.securityfocus.com/bid/31072/info E-Php B2B Trading Marketplace Script is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query...

esfaq-sql.txt

|| | | EsFaq Remote Sql Injection Exploit | | |---------------------SuB-ZeRo----------------------| | | Author: SuB-ZeRo | | Home : www.dz-security.com | | email: [email protected] | | | | | | | script :http://editeurscripts.com/ressources/scripts-php/dl.php?idscript=5 | | DorK :...

PHP-Fusion <= 6.00.206 Forum SQL Injection Vulnerability

A vulnerability is reported in the forum module of PHP-Fusion 6.00.206 and some early released versions. SPDX-FileCopyrightText: 2008 Ferdy Riphagen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

joomla-changepasswd.txt

Joomla 1.5.x Remote Admin Password Change Author: d3m0n [email protected] Greets: GregStar, gorion, d3d!k Polish "hackers" used this bug to deface turkish sites BUAHAHHA nice 0-day pff File : /components/comuser/controller.php Line : 379-399 function confirmreset // Check for request forgeries...

PowerGap Shopsystem &quot;ag&quot; SQL注入漏洞

CNCAN ID：CNCAN-2008081110 PowerGap Shopsystem是一款基于PHP的WEB应用程序。 PowerGap Shopsystem不正确处理用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，获得敏感信息或操作数据库。 问题是由于's03.php'脚本不正确过滤"ag"参数，构建恶意SQL查询作为参数数据，可更改原来的SQL逻辑，可获得敏感信息或操作数据库。 PowerGap Shopsystem 目前没有解决方案提供： http://www.powergap.de/shopsystem-powergap.htm...