Unfixed XSS vulnerability at www.hasansen.av.tr

Security researcher By Encore, has submitted on 03/09/2007 a cross-site-scripting XSS vulnerability affecting www.hasansen.av.tr, which at the time of submission ranked 693734 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/09/2007. It is...

Unfixed XSS vulnerability at www.antalyaeml.k12.tr

Security researcher Ag-Guvenlik, has submitted on 23/02/2007 a cross-site-scripting XSS vulnerability affecting www.antalyaeml.k12.tr, which at the time of submission ranked 7276524 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 27/02/2007. It...

gnopaste <= 0.5.3 (index.php) Remote File Include Vulnerability

t3K t4b4nc4 gnopaste = 0.5.3 index.php Remote File Include Vulnerability Script site: http://sourceforge.net/projects/gnopaste Find by TrZiNDaN Greetings; ELMuHaMMeD,CyberWolf,CrackersChild,EntriKa,Xyu,Sehzade, B4ct3ry,M3rhametsiz,Cold Z3ro,e-system,blackwolf,Paradox T3K T4B4NC4 Contact:...

Kolayindir Download (Yenionline) (tr) SqL Injection Vuln.

BhhGroup.Org & Bilgi-Yonetimi.Org.Tr script name : Kolayindir Download Yenionline tr Script Download : http://www.aspindir.com/indir.asp?id=4630 Risk : High Found By : ShaFuck31 Vulnerable file : down.asp Vulnerable : http://www.victim.com/ScriptPath/down.asp?id=SqL Contact: ShaFuq31 at HoTMaiL d...

Solaris 7 (i386) : 106541-42

SunOS 5.7x86: tr dumps core with locale de and KJP 106541-07 or newer. You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C...

TR Forum SQL注入及认证绕过漏洞

Tr Forum是一款法语的论坛程序。 Tr Forum中的多个漏洞允许恶意用户执行SQL注入攻击和绕过某些安全限制。 1 admin/insertadmin.php文件中缺少认证，允许创建拥有有限权限的管理员帐号。 2 没有正确过滤对admin/editer.php文件中id2参数的输入，允许攻击者通过注入任意SQL代码操控SQL查询。成功攻击要求某些管理权限。 3 在更新配置文件时缺少访问验证，允许通过更改id参数修改其他用户的设置。 组合使用1和2所述漏洞允许以完全权限访问管理部分。 Tr Forum Tr Forum 2.0 我们建议使用此软件的用户随时关注厂商的主页以获取最新版...

iyzi Forum 1.0 Beta 3 - SQL Injection

iyzi Forum 1.0 Beta 3 - SQL Injection ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ + iyzi Forum s1 b2 tr SQL Injection Vulnerability + + Author : Fix TR + + Site : www.hack.gen.tr + + Contact : fixtratbsdmail.com + ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Download ...

Tekman Portal v1.0 (tr) SQL Injection Vulnerability

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ + Tekman Portal v1.0 tr SQL Injection Vulnerability + + Author : Fix TR + + Site : www.hack.gen.tr + + Contact : fixtratbsdmail.com + ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ + Download: http://www.aspindir.com/goster/44...

haberx.txt

+++++++++++++++++++++++++++++++++++++++++++++++++++ + Haberx v1.1 tr SQL Injection Vulnerability + + Author : Fix TR + + Site : www.hack.gen.tr + + Contact : fixtratbsdmail.com + +++++++++++++++++++++++++++++++++++++++++++++++++++ + Download: http://www.aspindir.com/Goster/3983 + Versions: 1.02...

Haberx 1.02 1.1 - tr SQL Injection

Haberx 1.02 1.1 - tr SQL Injection +++++++++++++++++++++++++++++++++++++++++++++++++++ + Haberx v1.1 tr SQL Injection Vulnerability + + Author : Fix TR + + Site : www.hack.gen.tr + + Contact : fixtratbsdmail.com + +++++++++++++++++++++++++++++++++++++++++++++++++++ + Download:...

Haberx v1.1 (tr) SQL Injection Vulnerability

+++++++++++++++++++++++++++++++++++++++++++++++++++ + Haberx v1.1 tr SQL Injection Vulnerability + + Author : Fix TR + + Site : www.hack.gen.tr + + Contact : fixtratbsdmail.com + +++++++++++++++++++++++++++++++++++++++++++++++++++ + Download: http://www.aspindir.com/Goster/3983 + Versions: 1.02...

trforum20.txt

!/usr/bin/perl Affected.scr..: Tr Forum V2.0 Poc.ID........: 10060903 Type..........: SQL Injection, Bypass Security Restriction Risk.level....: Medium Vendor.Status.: Unpatched Src.download..: comscripts.com/scripts/php.tr-forum.1579.html Poc.link......: acid-root.new.fr/poc/10060903.txt...

CVE-2006-4585

SQL injection vulnerability in admin/editer.php in Tr Forum 2.0 allows remote authenticated users to execute arbitrary SQL commands via the id2 parameter. NOTE: this can be leveraged with other Tr Forum vulnerabilities to allow unauthenticated attackers to gain privileges...

CVE-2006-4586

The admin panel in Tr Forum 2.0 accepts a username and password hash for authentication, which allows remote authenticated users to perform unauthorized actions, as demonstrated by modifying user settings via the id parameter to /membres/modifprofil.php, and changing a password via...

CVE-2006-4584

Tr Forum 2.0 allows remote attackers to bypass authentication and add an administrative account via the login and password parameters to admin/insertadmin.php...

CVE-2006-4586

The admin panel in Tr Forum 2.0 accepts a username and password hash for authentication, which allows remote authenticated users to perform unauthorized actions, as demonstrated by modifying user settings via the id parameter to /membres/modifprofil.php, and changing a password via...

CVE-2006-4585

SQL injection vulnerability in admin/editer.php in Tr Forum 2.0 allows remote authenticated users to execute arbitrary SQL commands via the id2 parameter. NOTE: this can be leveraged with other Tr Forum vulnerabilities to allow unauthenticated attackers to gain privileges...

CVE-2006-4584

Tr Forum 2.0 allows remote attackers to bypass authentication and add an administrative account via the login and password parameters to admin/insertadmin.php...

CVE-2006-4586

CVE-2006-4586 affects the Tr Forum 2.0 admin panel, where authentication can be done by supplying a username and password hash. This enables remote authenticated users to perform unauthorized actions such as modifying user profile settings via /membres/modif_profil.php (id parameter) and changing...

CVE-2006-4585

The CVE-2006-4585 entry describes an SQL injection in Tr Forum 2.0, specifically in admin/editer.php via the id2 parameter. The vulnerability allows remote authenticated users to execute arbitrary SQL commands, and the note indicates this could be leveraged with other Tr Forum vulnerabilities to ...