Sql injection

Multiple SQL injection vulnerabilities in the getGalleryImage function in stadmin/galleryoutput.php in ST-Gallery 0.1 alpha, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 gallerycategory or 2 galleryshow parameter to example.php...

CVE-2009-1799

Multiple SQL injection vulnerabilities in the getGalleryImage function in stadmin/galleryoutput.php in ST-Gallery 0.1 alpha, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 gallerycategory or 2 galleryshow parameter to example.php...

CVE-2009-1799

CVE-2009-1799 affects ST-Gallery 0.1 alpha. The vulnerability is in getGalleryImage() within st_admin/gallery_output.php, where SQL injection is possible when magic_quotes_gpc is disabled. Remote attackers can exploit via the gallery_category or gallery_show parameters to example.php to execute a...

DMXReady Registration Manager 1.1 Database Disclosure

Title : DMXReady Registration Manager 1.1 Remote Database Disclosure Vulnerability Author : S4S-T3rr0r!sT Contact : [email protected] / [email protected] S.Page : DMXReady CMS Plugin Applications Web Site Design Extensions Dreamweaver ASP Template Database Driven Site : WwW.s3curi7y.com / www.h-t.cc D0r...

ST-Gallery 0.1a Multiple SQL Injection Vulnerabilities

No description provided by source. || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH! ------------------...

ST-Gallery 0.1a SQL Injection

|| || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ WEB: http://blog.sebastian-thiele.net/projekte/gallery/ | |--DOWNLOAD: http://sourceforge.net/projects/st-gallery/ |...

ST-Gallery 0.1a - Multiple SQL Injections

ST-Gallery 0.1a - Multiple SQL Injections || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH!...

SQL INJECTION VULNERABILITIES--ST-Gallery version 0.1 alpha-->

----------------------------------------------------------------- SQL INJECTION VULNERABILITIES--ST-Gallery version 0.1 alpha-- ----------------------------------------------------------------- CMS INFORMATION: --WEB: http://blog.sebastian-thiele.net/projekte/gallery/ --DOWNLOAD:...

ST-Gallery 0.1a Multiple SQL Injection Vulnerabilities

Exploit for unknown platform in category web applications ====================================================== ST-Gallery 0.1a Multiple SQL Injection Vulnerabilities ======================================================...

ST-Gallery 0.1a - Multiple SQL Injections

|| || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH! ---------------------------------------------------------------------------------------------- | SQL INJECTIO...

sagem-dos.txt

Sagem Router F@ST 2404 Remote Denial Of Service Exploit Discovery Date : 01/09/2008 !/usr/bin/bash Author : Underz0ne Crew Underz0ne.net Zigma Severity : Medium CVE : Not assigned Example : Zigma@Underz0ne ./sagem2404.sh 192.168.1.1 Sagem Router F@ST 2404 Remote Denial Of Service Exploit By...

Unfixed XSS vulnerability at website.ws

Security researcher st@rext, has submitted on 26/08/2008 a cross-site-scripting XSS vulnerability affecting website.ws, which at the time of submission ranked 6929 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/07/2009. It is currently...

CVE-2008-2458

Cross-site scripting XSS vulnerability in index.php in Starsgames Control Panel 4.6.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the st parameter...

Unfixed XSS vulnerability at top.pin.gr

Security researcher St@R-gaZ3r, has submitted on 25/02/2008 a cross-site-scripting XSS vulnerability affecting top.pin.gr, which at the time of submission ranked 611031 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 19/03/2008. It is currently...

Unfixed XSS vulnerability at www.scriptside.net

Security researcher st@rext, has submitted on 18/01/2008 a cross-site-scripting XSS vulnerability affecting www.scriptside.net, which at the time of submission ranked 73153 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 01/03/2008. It is...

Unfixed XSS vulnerability at www.dha.com.tr

Security researcher st@rext, has submitted on 23/12/2007 a cross-site-scripting XSS vulnerability affecting www.dha.com.tr, which at the time of submission ranked 346185 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 24/12/2007. It is currentl...

CVE-2007-6281

St. Bernard Open File Manager 9.5 is affected by a heap-based buffer overflow in the ofmnt.exe Open File Manager service. The flaw allows remote code execution by sending an oversized request; authentication is not required. Affected product/version: St. Bernard Open File Manager 9.5. Root cause:...

KLA10341 ACE vulnerability in St. Bernard Open File Manager

A buffer overflow was found in St. Bernard Open File Manager. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed request. Original advisories - Related products St-Bernard-Open-File-Manager CVE list...

St. Bernard Open File Manager buffer overflow

Buffer overflow on dynamic TCP port traffic parsing...

ZDI-07-078: St. Bernard Open File Manager Heap Overflow Vulnerability

ZDI-07-078: St. Bernard Open File Manager Heap Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-07-078.html December 17, 2007 -- CVE ID: CVE-2007-6281 -- Affected Vendor: St. Bernard -- Affected Products: Open File Manager 9.5 -- TippingPointTM IPS Customer Protection:...