philboard 1.14 - 'philboard_forum.asp' SQL Injection

---------------------------------------------------- Philboard id Remote SQL Injection ---------------------------------------------------- Bulan: xoron xoron.info - xoron.biz Google Dork : "Powered by Philboard" , "inurl:philboardforum.asp" ----------------------------------------------------...

SpotLight CRM 1.0 - login.asp SQL Injection

SpotLight CRM 1.0 - login.asp SQL Injection Title : SpotLight CRM 1.0 login.asp | Remote SQL Injection Vulnerability Author : ajann Contact : : $$$ : $2,499 SQL http://target/path//login.asp=POST SQL Example: - All User UserName And Password Changed "kro" // login.asp UserName: ';update login set...

NuRems 1.0 (propertysdetails.asp) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ============================================================== NuRems 1.0 propertysdetails.asp Remote SQL Injection Exploit ============================================================== !/usr/bin/perl Script Name: NuRems 1.0...

Webdrivers Simple Forum (message_details.php) SQL Injection Exploit

Exploit for unknown platform in category web applications =================================================================== Webdrivers Simple Forum messagedetails.php SQL Injection Exploit =================================================================== !perl use IO::Socket; By:Bl0od3r Germa...

opendocman-1.2rc3.txt

opendocman = 1.2rc3 Bypass admin/user Login affected to opendocman-1.2p3 Download Source : http://www.opendocman.com/ Found By : k1tk4t - k1tk4t4tnewhack.org Location : Indonesia -- newhackdotorg @irc.dal.net file; index.php bugs; $frmuser = $POST'frmuser'; $frmpass = $POST'frmpass'; $query =...

CVE-2006-5161

IBM Client Security Password Manager stores and distributes saved passwords based upon the title of a website, which allows remote attackers to obtain username and password credentials by changing the title of an HTML page...

WTcom 0.2.4-alpha - torrents.php SQL Injection

WTcom 0.2.4-alpha - torrents.php SQL Injection WebTorrent WTcom Script Remote SQL Injection Every Username, Password and Email ---------------------------------- Author: sh1r081 sh1r081atgmail.com...

JVN#62307185 QwikiWiki cross-site scripting vulnerability

Impact An arbitrary script may be executed on the user's web browser. User credentials could be leaked as a result. Solution Products Affected QwikiWiki version 1.5.5 and earlier...

Microsoft Office Excel File Rebuilding Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Office. Exploitation requires that the attacker coerce the target into opening a malicious .XLS file. The specific flaw exists within the rebuilding of malformed cell comments. When Excel...

ciscoCall.txt

I. SYNOPSIS Release Date: 07/19/2006 Affected Application: Cisco CallManager 3.1 and up versions prior to 3.1 were not tested but may still be vulnerable Severity If Exploited: High Impact: Arbitrary configuration of phone system/Theft of individual phone users' credentials Mitigating Factors:...

FunkBoard CF0.71 - profile.php Remote User Pass Change

FunkBoard CF0.71 - profile.php Remote User Pass Change /str0ke -- Profile User Name ajann Membership Number 247 First Registered Sat 03 Jun 2006 at 09:20:14 pm Last Login Sat 03 Jun 2006 at 09:21:45 pm Number of posts 0...

Design/Logic Flaw

VMware Server before RC1 does not clear user credentials from memory after a console connection is made, which might allow local attackers to gain privileges...

Information disclosure

admin/redigera/redigera2.asp in Hogstorps hogstorp Guestbook 2.0 does not verify user credentials, which allows remote attackers to edit arbitrary posts via unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2006-2662

VMware Server before RC1 does not clear user credentials from memory after a console connection is made, which might allow local attackers to gain privileges...

CVE-2006-2773

admin/redigera/redigera2.asp in Hogstorps hogstorp Guestbook 2.0 does not verify user credentials, which allows remote attackers to edit arbitrary posts via unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2006-2662: Undefined Security Weakness

VMware Server before RC1 does not clear user credentials from memory after a console connection is made, which might allow local attackers to gain privileges...

qjForum - 'member.asp' SQL Injection

Title : qjForummember.asp SQL Injection Vulnerability Author : ajann greetz : Nukedx,TheHacker Dork : "qjForum" Exploit: Login before injection. http://target/path/member.asp?uName='union%20select%200,0,0,username,0,0,pd,email,0,0,0,0,0,0,0,0,0,0,0,0%20from%20member milw0rm.com 2006-05-26...

Code injection

Privacy leak in install.php for Diesel PHP Job Site sends sensitive information such as user credentials to an e-mail address controlled by the product developers...

CVE-2006-2540

Privacy leak in install.php for Diesel PHP Job Site sends sensitive information such as user credentials to an e-mail address controlled by the product developers...

CVE-2006-2540

The CVE-2006-2540 issue affects a Diesel PHP Job Site component (install.php) in which sensitive data (user credentials) is sent to an email address controlled by the product developers, causing a privacy leak. The published description identifies a leakage of credentials and other sensitive info...