Xlrstats 2.0.1 SQL Injection Vulnerability

Exploit for php platform in category web applications ========================================== Xlrstats 2.0.1 SQL Injection Vulnerability ========================================== Author : Sky4 Email : email protected Date : 14/10/2010 homepage : http://www.sky4.tk Software Link:...

Xlrstats 2.0.1 - SQL Injection

---------------------------------------------------------------------------- Sql injection vulnerability ---------------------------------------------------------------------------- Exploit Title: Xlrstats Big Brother Bot Game SQL injection 2.0.1...

Xlrstats 2.0.1 - SQL Injection

Xlrstats 2.0.1 - SQL Injection ---------------------------------------------------------------------------- Sql injection vulnerability ---------------------------------------------------------------------------- Exploit Title: Xlrstats Big Brother Bot Game SQL injection 2.0.1...

DNET Live-Stats <= 0.8 RC8 LFI Vulnerability

DNET Live-Stats is prone to a local file include LFI vulnerability because it fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

DNET Live-Stats 'team.rc5-72.php' Local File Include Vulnerability

DNET Live-Stats is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability using directory-traversal strings to view files and execute local scripts in the context of the webserver process. This may aid in...

DNET Live-Stats 0.8 - Local File Inclusion

DNET Live-Stats 0.8 - Local File Inclusion Exploit Title: DNET Live-Stats 0.8 Local File Inclusion Date: 10-04-10 Author: Blake Software Link: http://sourceforge.net/projects/dnetlivestats/files/0.8/dnet-live-stats-0.8-rc8.zip/download Version: 0.8 rc8 Tested on: Windows XP SP3 running xampp lite...

DNET Live-Stats 0.8 Local File Inclusion

Exploit Title: DNET Live-Stats 0.8 Local File Inclusion Date: 10-04-10 Author: Blake Software Link: http://sourceforge.net/projects/dnetlivestats/files/0.8/dnet-live-stats-0.8-rc8.zip/download Version: 0.8 rc8 Tested on: Windows XP SP3 running xampp lite The showlang parameter does not properly...

DNET Live-Stats 0.8 - Local File Inclusion

Exploit Title: DNET Live-Stats 0.8 Local File Inclusion Date: 10-04-10 Author: Blake Software Link: http://sourceforge.net/projects/dnetlivestats/files/0.8/dnet-live-stats-0.8-rc8.zip/download Version: 0.8 rc8 Tested on: Windows XP SP3 running xampp lite The showlang parameter does not properly...

Google Complains and IBM Revises Vulnerability Stats

Search giant Google cried foul after an IBM X-Force report labeled it the vendor with the highest percentage of unpatched, critical security holes, prompting a correction by IBM. HED: Google complains, IBM revises vulnerability stats DEK: In the face of complaints from GOogle, IBM has admitted th...

CVE-2009-4939

Multiple cross-site scripting XSS vulnerabilities in index.php in AdPeeps 8.5d1 allow remote attackers to inject arbitrary web script or HTML via the 1 uid parameter, 2 uid parameter in a loginlookup action, 3 uid parameter in an adminlogin action, 4 campaignid parameter in a createcampaign actio...

Edgephp Clickbank Affiliate Marketplace SQL Injection / Cross Site Scripting

Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title:Edgephp Clickbank Affiliate Marketplace Script Multiple Vulnerability Vendor url:http://www.edgephp.com Version:1 Published: 2010-07-11 Greetz to:r0073r inj3ct0r.com, Sid3^effects, MaYur, MA1201, Sonic Bluehat, Sai, KD, M4n0j...

Banner Management Script SQL Injection Vulnerability

Exploit for php platform in category web applications ==================================================== Banner Management Script SQL Injection Vulnerability ==================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' ...

Banner Management Script - SQL Injection

Banner Management Script - SQL Injection Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title:Banner Management Script SQL Injection Vendor url:http://www.yourfreeworld.com Version:n/a Price:59$ Published: 2010-06-19 Greetz to:Sid3^effects, MaYur, M4n0j, Dark Blue, S1ayer,d3c0d3r,KD...

Banner Management Script - SQL Injection

Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title:Banner Management Script SQL Injection Vendor url:http://www.yourfreeworld.com Version:n/a Price:59$ Published: 2010-06-19 Greetz to:Sid3^effects, MaYur, M4n0j, Dark Blue, S1ayer,d3c0d3r,KD and to all ICW members. Spl Greetz...

Dutch stats cms Remote file inclusion

Exploit for php platform in category web applications ===================================== Dutch stats cms Remote file inclusion ===================================== $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ Dutch stats cms Remote file inclusion +++++++++++++++++++++++++++++++++++++++++++++...

osCommerce Visitor Web Stats AddOn - Accept-Language Header SQL Injection

osCommerce Visitor Web Stats AddOn - Accept-Language Header SQL Injection source: https://www.securityfocus.com/bid/40425/info osCommerce Visitor Web Stats is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query...

SQL injection in OSCommerce Add-On Visitor Web Stats

Popular OSC add-on Visitor Web Stats is completely vulnerable to SQL injections. Although it uses request data i. e. the Accept-Language header, there's no escaping at all. This also applies to the extension's derivative for OSC 3, who's author completely inherited the insufficient code structure...

OSC Visitor Web Stats SQL Injection

Popular OSC add-on Visitor Web Stats is completely vulnerable to SQL injections. Although it uses request data i. e. the Accept-Language header, there's no escaping at all. This also applies to the extension's derivative for OSC 3, who's author completely inherited the insufficient code structure...

chCounter indirect SQL Injection and XSS Vulnerabilities

Exploit for php platform in category web applications ======================================================== chCounter indirect SQL Injection and XSS Vulnerabilities ======================================================== Exploit Title: chCounter indirect SQL Injection and XSS Vulnerabilities...

CVE-2010-0980

The CVE-2010-0980 entry concerns Left 4 Dead (L4D) Stats 1.1. The vulnerability is a SQL injection in player.php that allows remote attackers to modify or exfiltrate data via the steamid parameter. This is supported by multiple sources (NVD entry and related references) which indicate arbitrary S...