Simple Machines Forum 1.1.3 - Remote Blind SQL Injection Exploit

No description provided by source. !/usr/bin/perl Written By Michael Brooks contact: th3dotr00katgmaildotcom SMF 1.1.3 Extremely fast Blind SQL Injection Exploit! -Binary Search -Multi-Threaded -NO benchmark's Two SQL Injection flaws. Works with magicquotesgpc=On or Off. Total Bypass of SMF's SQL...

PhpMyLogon 2.0 - SQL Injection Vulnerability

No description provided by source. Exploit Title: PhpMyLogon SQL Injection Date: March 14, 2010 Author: Blake Software Link: http://sourceforge.net/projects/phpmylogon/files/PhpMyLogon/PhpMyLogon%202/phpmylogon2.zip/download Version: 2 Tested on: Windows XP SP3 Proof of Concept: Enter the followi...

Possible DOS attack with long user-submitted passwords

More info at https://symfony.com/blog/security-releases-cve-2013-5958-symfony-2-0-25-2-1-13-2-2-9-and-2-3-6-released...

Possible DOS attack with long user-submitted passwords

More info at https://symfony.com/blog/security-releases-cve-2013-5958-symfony-2-0-25-2-1-13-2-2-9-and-2-3-6-released...

Commonly used background Uploader to get shell-vulnerability warning-the black bar safety net

Sometimes into the background, take the shell also may be your fetters. With the editor, then specifically say, in case the editor is the Lite or is the vulnerability patching of the FCK, only the use of some small to upload, don't underestimate these upload points.! \ Can use the NC to submit, i...

Dimensions social sharing system word vulnerability-vulnerability warning-the black bar safety net

Brief description: Profile filter is not strict, resulting in the word arbitrary code execution. Detailed description: Profile filter is not strict, the user-submitted code is saved, the template cache after the read again when the direct execution of user code! Vulnerability to prove: ! ! Repair...

[waraxe-2012-SA#086] - Local File Inclusion in Invision Power Board 3.3.0

waraxe-2012-SA086 - Local File Inclusion in Invision Power Board 3.3.0 =============================================================================== Author: Janek Vind "waraxe" Date: 12. April 2012 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-86.html CVE:...

Unfixed XSS vulnerability at www.citibus.fr

Security researcher Atmon3r, has submitted on 04/02/2012 a cross-site-scripting XSS vulnerability affecting www.citibus.fr, which at the time of submission ranked 8806411 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/02/2012. It is current...

Unfixed XSS vulnerability at www.lgjobs.com

Security researcher haRI, has submitted on 04/02/2012 a cross-site-scripting XSS vulnerability affecting www.lgjobs.com, which at the time of submission ranked 565488 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 16/02/2012. It is currently...

Unfixed XSS vulnerability at old.cageprisoners.com

Security researcher jokers, has submitted on 20/02/2012 a cross-site-scripting XSS vulnerability affecting old.cageprisoners.com, which at the time of submission ranked 3249336 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 10/03/2015. It is...

Unfixed XSS vulnerability at www.delamaison.fr

Security researcher Atmon3r, has submitted on 22/12/2011 a cross-site-scripting XSS vulnerability affecting www.delamaison.fr, which at the time of submission ranked 19143 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 23/12/2011. It is...

Unfixed XSS vulnerability at library.mkm.edu.my

Security researcher p0pc0rn, has submitted on 09/12/2011 a cross-site-scripting XSS vulnerability affecting library.mkm.edu.my, which at the time of submission ranked 815782 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/12/2011. It is...

Oracle website vulnerable to SQL injection

Oracle website vulnerable to SQL injection vulnerability Oracle database website itself vulnerable to SQL injection attack. The website having a loophole by which any attacker can easily hack into it. The vulnerability is found and submitted by Hacker "m@m@ ". Oracle provides the world's most...

Unfixed XSS vulnerability at coral-tell.co.il

Security researcher Jonturk75, has submitted on 24/05/2011 a cross-site-scripting XSS vulnerability affecting coral-tell.co.il, which at the time of submission ranked 2815047 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 11/12/2011. It is...

Unfixed XSS vulnerability at cinestar.de

Security researcher bursali, has submitted on 04/01/2011 a cross-site-scripting XSS vulnerability affecting cinestar.de, which at the time of submission ranked 17437 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 11/12/2011. It is currently...

Simple-Log 1.2 delay injection vulnerability-vulnerability warning-the black bar safety net

Vulnerability file: /user.php ! Continue to follow issetmember a function of usage. The interception of the part of the code. /includes/base.function.php ! Not a deeper layer of the call, lest everyone see the mess. As long as the POST submitted in the admin +injected into the statement to make i...

Unfixed XSS vulnerability at www.balticnordic.com

Security researcher p0pc0rn, has submitted on 16/02/2011 a cross-site-scripting XSS vulnerability affecting www.balticnordic.com, which at the time of submission ranked 126021 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 11/12/2011. It is...

Unfixed XSS vulnerability at www.adcocorp.com

Security researcher VirtualSystEm, has submitted on 22/01/2011 a cross-site-scripting XSS vulnerability affecting www.adcocorp.com, which at the time of submission ranked 7630747 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/11/2011. It is...

Unfixed XSS vulnerability at interneteyes.co.uk

Security researcher PaPPy, has submitted on 12/11/2010 a cross-site-scripting XSS vulnerability affecting interneteyes.co.uk, which at the time of submission ranked 645831 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 25/12/2011. It is...

Unfixed XSS vulnerability at www.whistlerbike.com

Security researcher tenest, has submitted on 12/05/2010 a cross-site-scripting XSS vulnerability affecting www.whistlerbike.com, which at the time of submission ranked 459992 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 27/06/2010. It is...