e107 Plugin BLOG Engine 2.2 (uid) Blind SQL Injection Vulnerability

No description provided by source. ::e107 Plugin BLOG Engine v2.2 macgurublog.php/uid Blind SQL Injection Vulnerability:: &nbs...

e107blog-sql.txt

::e107 Plugin BLOG Engine v2.2 macgurublog.php/uid Blind SQL Injection Vulnerability:: Virangar Security Team www.virangar.net -------- Discoverd By :virangar security teamhadihadi special tnx to:MR.nosrati,black.shadowes,MR.hesy,Zahra & all virangar members & all hackerz greetz:to my best friend...

e107 Plugin BLOG Engine 2.2 (uid) Blind SQL Injection Vulnerability

Exploit for unknown platform in category web applications =================================================================== e107 Plugin BLOG Engine 2.2 uid Blind SQL Injection Vulnerability =================================================================== ::e107 Plugin BLOG Engine v2.2...

e107 Plugin BLOG Engine 2.2 - uid Blind SQL Injection

e107 Plugin BLOG Engine 2.2 - uid Blind SQL Injection ::e107 Plugin BLOG Engine v2.2 macgurublog.php/uid Blind SQL Injection Vulnerability:: Virangar Security Team www.virangar.net -------- Discoverd By :virangar security teamhadihadi special tnx to:MR.nosrati,black.shadowes,MR.hesy,Zahra & all...

openinvoice-passwd.txt

!/usr/bin/perl OpenInvoice 0.9 Arbitrary Change User Password Exploit Discovered && Coded By t0pP8uZz Discovered On: 18 April 2008 Vendor has not been notified! see exploit for more details.. Greetz: milw0rm.com, h4ck-y0u.org, CipherCrew! use strict; use LWP::UserAgent; use HTTP::Cookies; print...

IBM DB2数据库db2dasrrm缓冲区溢出和文件创建漏洞

BUGTRAQ ID: 27870 CVECAN ID: CVE-2007-5758,CVE-2007-5664 IBM DB2是一个大型的商业关系数据库系统，面向电子商务、商业资讯、内容管理、客户关系管理等应用，可运行于AIX、HP-UX、Linux、Solaris、Windows等系统。...

Solaris sadmind Command Execution

This exploit targets a weakness in the default security settings of the sadmind RPC application. This server is installed and enabled by default on most versions of the Solaris operating system. Vulnerable systems include solaris 2.7, 8, and 9 This module requires Metasploit:...

Code injection

CDS Invenio 0.92.1 and earlier allows remote authenticated users to delete email notification alerts of arbitrary users via a modified internal UID...

CVE-2008-1627

CDS Invenio 0.92.1 and earlier allows remote authenticated users to delete email notification alerts of arbitrary users via a modified internal UID...

FreeBSD : mplayer -- multiple vulnerabilities (de4d4110-ebce-11dc-ae14-0016179b2dd5)

The Mplayer team reports : A buffer overflow was found in the code used to extract album titles from CDDB server answers. When parsing answers from the CDDB server, the album title is copied into a fixed-size buffer with insufficient size checks, which may cause a buffer overflow. A malicious...

MiniNuke 2.1 (members.asp uid) Remote SQL Injection Vulnerability

No description provided by source. MiniNuke v2.1 forum SQL Injection AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 MA陌L : [email protected] DORK 1 : allinurl:"members.asp?action" DORK 2 : allinurl: "members.asp"uid EXAMPLE= members.asp?action=memberdetails&uid=SQL explo...

MiniNuke 2.1 (members.asp uid) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================= MiniNuke 2.1 members.asp uid Remote SQL Injection Vulnerability ================================================================= MiniNuke v2.1 forum SQL Injection DORK 1 :...

MiniNuke 2.1 - uid SQL Injection

MiniNuke 2.1 - uid SQL Injection MiniNuke v2.1 forum SQL Injection AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 MAÄ°L : [email protected] DORK 1 : allinurl:"members.asp?action" DORK 2 : allinurl: "members.asp"uid EXAMPLE= members.asp?action=memberdetails&uid=SQL exploi...

IBM DB2数据库db2db本地权限提升漏洞

BUGTRAQ ID: 27680 CVECAN ID: CVE-2007-5757 IBM DB2是一个大型的商业关系数据库系统，面向电子商务、商业资讯、内容管理、客户关系管理等应用，可运行于AIX、HP-UX、Linux、Solaris、Windows等系统。 在设置DB2INSTANCE环境变量的时候，libdb2库会使用相关用户的目录而不是DB2例程目录，这会允许本地非特权用户控制一些set-uid root二进制程序所操作的目录结构。...

IBM AIX逻辑卷标管理器多个命令本地缓冲区溢出漏洞

BUGTRAQ ID: 27431 IBM AIX是一款商业性质的UNIX操作系统。 AIX的逻辑卷标管理命令工具集实现上存在缓冲区溢出漏洞，本地攻击者可能利用此漏洞提升自己的权限。 AIX的逻辑卷标管理器提供了一套用于管理逻辑卷标的工具。逻辑卷标管理器的bos.rte.lvm和bos.clvm.enh命令中存在缓冲区溢出漏洞。如果本地攻击者执行了以下bos.rte.lvm命令： /usr/sbin/lchangevg /usr/sbin/ldeletepv /usr/sbin/putlvodm /usr/sbin/lvaryoffvg /usr/sbin/lvgenminor...

IBM AIX swap命令本地缓冲区溢出漏洞

BUGTRAQ ID: 27432 IBM AIX是一款商业性质的UNIX操作系统。 AIX的swap命令工具集实现上存在缓冲区溢出漏洞，本地攻击者可能利用此漏洞提升自己的权限。 AIX的swap命令用于激活和关闭paging space，其主文件集为bos.rte.control。以下bos.rte.control文件集命令存在缓冲区溢出漏洞。如果本地攻击者执行了这些命令的话： /usr/sbin/swap /usr/sbin/swapoff /usr/sbin/swapon...

OpenBSD 4.2 - rtlabel_id2name() Local Null Pointer Dereference Denial of Service

OpenBSD 4.2 - rtlabelid2name Local Null Pointer Dereference Denial of Service / OpenBSD 4.2 rtlabelid2name SIOCGIFRTLABEL ioctl Null Pointer Dereference local Denial of Service Exploit by Hunger Advisory: http://marc.info/?l=openbsd-security-announce&m=120007327504064 FOR TESTING PURPOSES ONLY! $...

Debian Security Advisory DSA 042-1 (gnuserv, xemacs21)

The remote host is missing an update to gnuserv, xemacs21 announced via advisory DSA 042-1. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Sql injection

SQL injection vulnerability in uprofile.php in ClipShare allows remote attackers to execute arbitrary SQL commands via the UID parameter...

CVE-2008-0089

CVE-2008-0089 is a SQL injection flaw in ClipShare’s uprofile.php that can be exploited remotely via the UID parameter to execute arbitrary SQL. Affected: ClipShare (uprofile.php). Root cause: improper input handling leading to SQL injection. Impact per NVD: partial confidentiality, integrity, an...