vsp stats processor 0.45 (gamestat.php gameID) SQL Injection Vuln

Exploit for unknown platform in category web applications ================================================================= vsp stats processor 0.45 gamestat.php gameID SQL Injection Vuln ================================================================= Product : vsp stats processor Version : all...

CVE-2008-6212

Cross-site scripting XSS vulnerability in admin.php in Php-Stats 0.1.9.1 allows remote attackers to inject arbitrary web script or HTML via the 1 selmese and 2 selanno parameters in a systems action. NOTE: the provenance of this information is unknown; the details are obtained solely from third...

Cross site scripting

Cross-site scripting XSS vulnerability in admin.php in Php-Stats 0.1.9.1 allows remote attackers to inject arbitrary web script or HTML via the 1 selmese and 2 selanno parameters in a systems action. NOTE: the provenance of this information is unknown; the details are obtained solely from third...

CVE-2008-6212

Cross-site scripting XSS vulnerability in admin.php in Php-Stats 0.1.9.1 allows remote attackers to inject arbitrary web script or HTML via the 1 selmese and 2 selanno parameters in a systems action. NOTE: the provenance of this information is unknown; the details are obtained solely from third...

CVE-2008-6212

Php-Stats 0.1.9.1 is affected by a cross-site scripting (XSS) vulnerability in admin.php, exploitable via the sel_mese and sel_anno parameters in a systems action. The issue could allow a remote attacker to inject arbitrary web script or HTML when the affected page is loaded. No remediation detai...

CVE-2009-0659: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in the GetStatsFromLine function in TPTEST 3.1.7 allows remote attackers to have an unknown impact via a STATS line with a long email field. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2008-6212: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in admin.php in Php-Stats 0.1.9.1 allows remote attackers to inject arbitrary web script or HTML via the 1 selmese and 2 selanno parameters in a systems action. NOTE: the provenance of this information is unknown; the details are obtained solely from third...

Sql injection

SQL injection vulnerability in index.php in My PHP Baseball Stats MyPBS allows remote attackers to execute arbitrary SQL commands via the seasonID parameter...

CVE-2008-5851

SQL injection vulnerability in index.php in My PHP Baseball Stats MyPBS allows remote attackers to execute arbitrary SQL commands via the seasonID parameter...

CVE-2008-5851

SQL injection vulnerability in index.php in My PHP Baseball Stats MyPBS allows remote attackers to execute arbitrary SQL commands via the seasonID parameter...

CVE-2008-5851

CVE-2008-5851 describes an SQL injection in the MyPHP Baseball Stats (MyPBS) application. The vulnerability is in index.php via the seasonID parameter, allowing remote attackers to alter the backend database by issuing arbitrary SQL. The NVD data lists a base score of 7.5 (HIGH) with NETWORK atta...

CVE-2008-5851: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in My PHP Baseball Stats MyPBS allows remote attackers to execute arbitrary SQL commands via the seasonID parameter...

CVE-2008-5793

Multiple PHP remote file inclusion vulnerabilities in the Clickheat - Heatmap stats comclickheat component 1.0.1 for Joomla! allow remote attackers to execute arbitrary PHP code via a URL in the 1 GLOBALSmosConfigabsolutepath parameter to a install.clickheat.php, b Cache.php and c...

CVE-2008-5793: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in the Clickheat - Heatmap stats comclickheat component 1.0.1 for Joomla! allow remote attackers to execute arbitrary PHP code via a URL in the 1 GLOBALSmosConfigabsolutepath parameter to a install.clickheat.php, b Cache.php and c...

Ho' Detector Promiscuous mode detector shellcode 56 bytes

Ho' Detector Promiscuous mode detector shellcode 56 bytes. Shellcode exploit for linx86 platform / ▐▄∙ ▄ ▄▄▄ . ▐ ▄ ∙ ▌ ▄ ·. ▄∙ ▄▌ ▄▄▄▄▄ ▄▄▄· █▌█▌■▀▄.▀· ∙█▌▐█ ■·██ ▐███■█■██▌ ∙██ ▐█...

Ultrastats 0.2.1440.3.11 - serverid SQL Injection

Ultrastats 0.2.1440.3.11 - serverid SQL Injection ||| ||| ||| ||| ||| |||| ||| |||||||||||| +++++++++++ ++++++++++++ ++++++++++++ | ++++++++++++| | ++++++++ | | ++ | |+| Ultrastats exploit by eeee eeee e e -------------------- 8 8 8 8 8eee 8eee 8eee8e 88 88 88 8 88ee 88ee 88 8 --- mail: hexdez@nm...

irc-info NSE Script

Gathers information from an IRC server. It uses STATS, LUSERS, and other queries to obtain this information. Example Usage nmap -sV -sC Script Output 6665/tcp open irc | irc-info: | server: asimov.freenode.net | version: ircd-seven-1.1.320111112-b71671d1e846,charybdis-3.4-dev. asimov.freenode.net...

Nuked-klaN 1.7.7 / SP4.4 - Multiple Vulnerabilities

URL: http://real.o-n.fr/ Date: 14/10/2008 Special thanks to Louis for remembering me I had to finish it = VULNERABILITY DETAILS --------------------- Nuked-klaN suffers from a vulnerability due to HTTPREFERER, which is not correctly filtered before being inserted in nukedstatsvisitor table. If HT...

Cross site scripting

Cross-site scripting XSS vulnerability in Bitweaver 2.0.2 allows remote attackers to inject arbitrary web script or HTML via the URL parameter to 1 edit.php and 2 list.php in articles/; 3 listblogs.php and 4 rankings.php in blogs/; 5 calendar/index.php; 6 calendar.php, 7 index.php, and 8...

CVE-2008-4337: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Bitweaver 2.0.2 allows remote attackers to inject arbitrary web script or HTML via the URL parameter to 1 edit.php and 2 list.php in articles/; 3 listblogs.php and 4 rankings.php in blogs/; 5 calendar/index.php; 6 calendar.php, 7 index.php, and 8...