CVE-2010-2698: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Sijio Community Software allow remote authenticated users to inject arbitrary web script or HTML via the title parameter when 1 editing a new blog, 2 adding an album, or 3 editing an album. NOTE: the provenance of this information is unknown; t...

CVE-2010-2697: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Sijio Community Software allows remote authenticated users to inject arbitrary web script or HTML via the title parameter when adding a new blog, related to editblog/index.php. NOTE: some of these details are obtained from third party information...

SQL inj: вывод данных, без указания имён столбцов

SQL inj: вывод данных, без указания имён столбцов Необходимые условия: MySQL = 4.0 нужно наличие оператора union SQL инъекция должна быть с выводом слепые инъекции не подходят Кол-во столбцов в уязвимом запросе = чем кол-во столбцов в таблице, данные из которой нужно вывести Достаточно большое...

Infotel (pagina.php) SQL Injection Vulnerability

Exploit for php platform in category web applications ================================================ Infotel pagina.php SQL Injection Vulnerability ================================================ 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0...

MooreAdvice - productlist.asp SQL Injection

MooreAdvice - productlist.asp SQL Injection Exploit Title: MooreAdvice productlist.asp SQL injection Vulnerable Date: 1-07-2010 Author: Th3 RDX Software Link: Version: n/a Tested on: Demo Site category: webapp Code : n/a -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=...

VGM Forbin - 'article.asp' SQL Injection

Exploit Title: VGM Forbin article.asp SQL injection Vulnerable Date: 1-07-2010 Author: Th3 RDX Software Link: Version: n/a Tested on: Demo Site category: webapp Code : n/a -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=...

DCMS (SC.php) SQL Injection Vulnerability

Exploit for php platform in category web applications ========================================= DCMS SC.php SQL Injection Vulnerability ========================================= Exploit Title: DCMS SC.php SQL Injection Vulnerability Date: 01.07.2010 Author: Dark.Man email protected Thanks To:...

Specialist Bed and Breakfast Website SQL Injection Vulnerability

Exploit for php platform in category web applications ================================================================ Specialist Bed and Breakfast Website SQL Injection Vulnerability ================================================================ Exploit Title: Specialist Bed and Breakfast...

PageDirector CMS - Multiple Vulnerabilities

PageDirector CMS - Multiple Vulnerabilities Exploit Title : PageDirector CMS Multiple Vulnerabilities Date : 20 - 6 - 2010 Author : Tr0y-x Vendor : www.customerparadigm.com Version : All Versions Tested on : Linux Home : WwW.SeC-WaR.CoM Price : 675.00 $ loooooolz -== SQL Injection Vulenrability =...

Electronic Book (ebook.php) Blind SQL Injection Vulnerability

Exploit for php platform in category web applications ============================================================= Electronic Book ebook.php Blind SQL Injection Vulnerability ============================================================= @ Exploit Title: Electronic Book ebook.php Blind SQL...

CVE-2010-1448

Cross-site scripting XSS vulnerability in lib/LXR/Common.pm in LXR Cross Referencer before 0.9.8 allows remote attackers to inject arbitrary web script or HTML via vectors related to a string in the search page's TITLE element, a different vulnerability than CVE-2009-4497 and CVE-2010-1625...

CVE-2010-1448: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in lib/LXR/Common.pm in LXR Cross Referencer before 0.9.8 allows remote attackers to inject arbitrary web script or HTML via vectors related to a string in the search page's TITLE element, a different vulnerability than CVE-2009-4497 and CVE-2010-1625...

Lentyay script Sql Injection vulnerability

Exploit for php platform in category web applications ========================================== Lentyay script Sql Injection vulnerability ========================================== Exploit Title: Lentyay script review page sql injection...

Joomla Component com_answers Multiple Vulnerabilities

Exploit for php platform in category web applications ===================================================== Joomla Component comanswers Multiple Vulnerabilities ===================================================== Exploit Title: Joomla Component Answers v2.3beta Multiple Vulnerabilities Date: 25...

Joomla! Component Answers 2.3beta - Multiple Vulnerabilities

Joomla! Component Answers 2.3beta - Multiple Vulnerabilities Exploit Title: Joomla Component Answers v2.3beta Multiple Vulnerabilities Date: 25 May 2010 Author: jdc Software Link: http://extensions.joomla.org/extensions/communication/forum/12652 Version: 2.3beta Tested on: PHP5, MySQL5 Blind SQL...

Joomla! Component Answers 2.3beta - Multiple Vulnerabilities

Exploit Title: Joomla Component Answers v2.3beta Multiple Vulnerabilities Date: 25 May 2010 Author: jdc Software Link: http://extensions.joomla.org/extensions/communication/forum/12652 Version: 2.3beta Tested on: PHP5, MySQL5 Blind SQL Injection =================== Requires: magicquotes OFF...

VU Mass Mailer 3.4 SQL Injection

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : Inj3ct0r.com 0 1 + Support e-mail :...

CVE-2010-2281: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in index.php in TomatoCMS 2.0.6 allow remote attackers to inject arbitrary web script or HTML via the 1 keyword or 2 bannerid parameter in conjunction with a /admin/ad/banner/list PATHINFO; and allow remote authenticated users, with certain...

CVE-2009-4890: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the login application in vBook 4.2.17 allow remote attackers to inject arbitrary web script or HTML via the 1 title and 2 message parameters...

Joomla DJ Art Gallery 0.9.1 Cross Site Scripting / SQL Injection

Exploit Title: Joomla Component comdjartgallery Multiple Vulnerabilities Date: 04/06/2010 Author: d0lc3 Software Link: http://www.design-joomla.eu/downloads/download/components/dj-artgallery.html Version: 0.9.1 Tested on: Linux ubuntu32 2.6.32-22-generic x64 Summary: + Cross Site Scripting on...