EUVD-2009-1814

Malware in sbrugna...

Metasploit Weekly Wrap-Up

Metasploit T-Shirt Design Contest In honor of Metasploit's 20th anniversary, Rapid7 is launching special edition t-shirts - and we're inviting members of our community to have a hand in its creation. The contest winner will have their design featured on the shirts, which will then be available to...

CVE-2010-2692

Cross-site scripting XSS vulnerability in 2daybiz Custom T-Shirt Design Script allows remote attackers to inject arbitrary web script or HTML via a review comment...

CVE-2010-2691

Multiple SQL injection vulnerabilities in 2daybiz Custom T-Shirt Design Script allow remote attackers to execute arbitrary SQL commands via the 1 sbid parameter to productsdetails.php, 2 pid parameter to products/products.php, and 3 designid parameter to designview.php...

Sql injection

Multiple SQL injection vulnerabilities in 2daybiz Custom T-Shirt Design Script allow remote attackers to execute arbitrary SQL commands via the 1 sbid parameter to productsdetails.php, 2 pid parameter to products/products.php, and 3 designid parameter to designview.php...

CVE-2010-2692

Cross-site scripting XSS vulnerability in 2daybiz Custom T-Shirt Design Script allows remote attackers to inject arbitrary web script or HTML via a review comment...

CVE-2010-2691

CVE-2010-2691 involves multiple SQL injection vulnerabilities in the 2daybiz Custom T-Shirt Design Script. The affected vectors are (1) sbid parameter to products_details.php, (2) pid parameter to products/products.php, and (3) designid parameter to designview.php, enabling remote attackers to ex...

CVE-2010-2691

Multiple SQL injection vulnerabilities in 2daybiz Custom T-Shirt Design Script allow remote attackers to execute arbitrary SQL commands via the 1 sbid parameter to productsdetails.php, 2 pid parameter to products/products.php, and 3 designid parameter to designview.php...

CVE-2010-2692

CVE-2010-2692 describes a cross-site scripting (XSS) vulnerability in the 2daybiz Custom T‑Shirt Design Script that allows remote attackers to inject arbitrary web script or HTML via a review comment. The issue is documented with a NVD CVSS v2 base score of 4.3 (Medium) and lists XSS as the impac...

CVE-2009-1819

SQL injection vulnerability in product.php in 2daybiz Custom T-shirt Design Script allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2009-1819

CVE-2009-1819 is a SQL injection vulnerability in the 2daybiz Custom T-shirt Design Script (product.php) that allows remote attackers to execute arbitrary SQL commands via the id parameter. Root cause: unsanitized input in a PHP script leading to injection. The exploitation vector is network-base...

CVE-2009-1819

SQL injection vulnerability in product.php in 2daybiz Custom T-shirt Design Script allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2009-1820

CVE-2009-1820 describes a cross-site scripting (XSS) vulnerability in the 2daybiz Custom T-shirt Design Script, specifically in the file product.php. The flaw allows remote attackers to inject arbitrary web script or HTML via the id parameter. The provided references confirm the vulnerability des...

2daybiz Custom T-shirt Design (SQL/XSS) Multiple Remote Vulns

Exploit for unknown platform in category web applications ============================================================= 2daybiz Custom T-shirt Design SQL/XSS Multiple Remote Vulns ============================================================= -------------------------AllaH...

2DayBiz Custom T-shirt Design - SQL Injection / Cross-Site Scripting

-------------------------AllaH AkbaR------------------------------- Custom T-shirt Design SQL & xss MULTIPLE Remote Sql Injection --------------------------------------------------------------------------- Discovered By: Snakespc ALGERIAN HaCkEr Mail: [email protected]...