Simply Classified 0.2 - Cross-Site Scripting / Cross-Site Request Forgery

Simply Classified 0.2 XSS & CSRF Vulnerabilities Found by: mrme Tested On: Windows Vista Note: For educational purposes only Author contact date: 16th December 2009 Advisory: http://www.corelan.be:8800/index.php/forum/security-advisories/corelan-10-002-simply-classifieds-v0.2-xss-and-csrf/ Greetz...

kalimat new system v 1.0 (index.php) SQL Injection

No description provided by source. ===================================== | kalimat v 1.0 admin by pass index.php ===================================== Author: ProF.Code Email :[email protected] ===================================== dorkgoogle : intext:"Kalimat news system v 1.0" demo:...

Vikingboard <= 0.2 Beta SQL Column Truncation Vulnerability

No description provided by source. --------------------------------------------------------------------- Vikingboard = 0.2 Beta SQL Column Truncation --------------------------------------------------------------------- Discovered By: StAkeR - StAkeRathotmaildotit Discovered On: 25/09/2008...

PT-2008-5267 · Opendb · Opendb

Name of the Vulnerable Software and Affected Versions: OpenDb version 1.0.6 Description: The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via the user id parameter in an edit action to "user admin.php", the title parameter to "listings.php", and the...

TOKOKITA - produk_id SQL Injection

TOKOKITA - produkid SQL Injection !/usr/bin/perl k1tk4t Public Security Advisory //////////////////////////////////////////////////////////// TOKOKITA Multiple Remote SQL Injection Demosite : http://www.tokokita.net/toko/ Vendor : http://www.tokokita.com/ Kutu : 1. catlist.php?catid=Blind SQLi 2...

BosNews v4.0 Remote add user admin

-------------------------------------------------------------------------------------------------------------- ----- H-T Team HouSSaMix + ToXiC350 from MoroCCo ---------------------------------------------------------...

YaBB SE 1.5.5 - Remote Command Execution

!/usr/bin/perl YaBB SE version new; $top-title"r57yabbse155ceGUI"; $top-resizable0,0; $url = 'http://server/forum/index.php'; $id = '1'; $cookiename = 'YaBBSE155'; $cmd = 'ls -la; id; uname -a;'; $button1text = 'Found admin ID'; $foundadminid = \ $stop = 0; $xpl = LWP::UserAgent-new or die;...

Agares PhpAutoVideo 2.21 (articlecat) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ================================================================== Agares PhpAutoVideo 2.21 articlecat Remote SQL Injection Exploit ================================================================== !/usr/bin/perl Agares PhpAutoVideo 2.21...

ftpadmin-multi.txt

FTP Admin v0.1.0 - MULTIPLE VULNERABILITIES by Omni 1 Infos --------- Date : 2007-11-28 Product : FTP Admin Version : v0.1.0 Vendor : http://sourceforge.net/projects/ftpadmin/ Vendor Status : 2007-11-30 Informed! Description : FTP admin is a web-based user administration tool, for usage in...

CVE-2004-1605: Undefined Security Weakness

SalesLogix 6.1 allows remote attackers to bypass authentication by modifying the slxweb cookie to set user=Admin, teams=ADMIN!, and usertype=Administrator...