Crafty Syntax Live Help 2.14.6 - 'department' SQL Injection

Crafty Syntax Live Help = 2.14.6 SQL Injection August 25, 2008 Vendor : Eric Gerdes URL : http://www.craftysyntax.com Version : Crafty Syntax Live Help = 2.14.6 Risk : SQL Injection Description: Crafty Syntax Live Help is a full featured, open source, online support system written in php that...

atmail-disclose.txt

!/usr/bin/perl LEGAL: Permission is granted to freely reproduce this document in its entirety under the condition that the contents are not altered in any way. milw0rm IS permitted to add their standard footer: // milw0rm.com / date Permission to view or reproduce this file is NOT granted to any...

Pligg CMS 9.9.0 - Cross-Site Scripting Local File Inclusion SQL Injection

Pligg CMS 9.9.0 - Cross-Site Scripting Local File Inclusion SQL Injection GulfTech Security Research July 30, 2008 Vendor : Pligg LLC URL : http://www.pligg.com/ Version : Pligg alertdocument.cookie; The above example link would display the end users cookie to them. Of course this can also be use...

Galatolo Web Manager 1.3a - Cross-Site Scripting / SQL Injection

--==+============================================================================+==-- --==+ Galatolo Web Manager 1.3a alertdocument.cookie SQL plugin users 1.3a + plugins/users/index.php?id= Code SQL +...

joomlaversioning-sql.txt

Name : Joomla Component comversioning id Remote Sql Injection Vulnerability + Team : DarkMatter Crew + Crew website : WwW.SykoPainKilla.CoM + Author : SpK & His0k4 + Contact : fatal.1.tyathotmail.comdotcom + D0rk : inurl:index.php?option=comversioning + Expl0iT :...

XchangeBoard 1.70 (boardID) Remote SQL Injection Vulnerability

No description provided by source. xchangeboard 1.70 final and lower Bug by: haZl0oh Dork: "Powered by xchangeboard" info:you have to be an registered user to use it like this !!!! there should be a lot more vulns there ; credentials like passwords are saved as cookies .... :D PoC:...

XchangeBoard 1.70 (boardID) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================== XchangeBoard 1.70 boardID Remote SQL Injection Vulnerability ============================================================== xchangeboard 1.70 final and lower Bug by: haZl0oh...

PHP-Fusion Mod Classifieds - lid SQL Injection

PHP-Fusion Mod Classifieds - lid SQL Injection Php fusion "classifieds" SQL-injetion ++++++++++++++++++++++++++++ Author : boom3rang contact : boomerang at knaqu-shqipe dot de webpage : www.khg-crew.ws ++++++++++++++++++++++++++++ ---- Remote SQL Injection ------ + Dork:...

phpsitelock-sql.txt

Viva IslaM Viva IslaM Remote SQL Injection Vulnerability PHP Site Lock 2.0 index.php page AuTh0r : Mr.SQL H0ME : WwW.PaL-HaCkEr.CoM Email : [email protected] !! SYRIAN HaCkErS !! Script : PHP Site Lock version : 2.0 Site : www.phpsitelock.com -:: SQL ::- www.site.com/...

ducnoip-disclose.txt

/ DUC NO-IP Local Password Information Disclosure Authors: Charalambous Glafkos George Nicolaou Date: March 11, 2008 Site: http://www.astalavista.com Mail: [email protected] [email protected] Synopsis: DUC NO-IP is prone to an information disclosure vulnerability due to a design error...

Joomla! Component Bible Study 1.5.0 - 'id' SQL Injection

!/usr/bin/perl -w Joomla Component biblestudy Remote SQL Injection Founded & Exploited by : Stack & Jadi Contact: Ev!L = see down Greetz : Houssamix & Djekmani & Jadi & iuoisn &Room-Hackers All muslims HaCkeRs : P0c 1:...

flashblog-sql.txt

Name : FlashBlog sql Inyeccion Author : Her0 Dork : "flashblog", allinurl:flashblog.html Greetz : Komtec1,Freak,Knet,Boer,ka0x Proof of Concept :...

scoutportal-sql.txt

!/usr/bin/perl Scout Portal Toolkit new or die; my $go=$cnx-get$victim."/SPT--BrowseResources.php?ParentId=337+and+1=2+union+all+select+0,1,2,3,4,concatUserName,char34,UserPassword,6,7,8+from+APUsers/"; if $go-content = m/APUsers/\' class=''.?/ms print "+ $1\n\n"; else print "\n- exploit...

joovili-sql.txt

-Joovili- Rem0te SQL Injection Vulnerability IN == browse.videos.php Author: HaCkeR-EgY H^0mE: WWW.PAL-HACKER.COM , ATSDP.COM CONTact: [email protected] ================================================ Script : Joovili version : Version 3.1.0 price :$155 USD DOWNL0AD : www.joovili.com...

phpizabi-disclose.txt

-------------------------------------------------------- PHPizabi v0.848b C1 HFP3 database information exposure -------------------------------------------------------- I would like to state that I am in no way responsible for how this information is used. It is just that, information and is...

PHPizabi v0.848b C1 HFP3 Database Information Disclosure Vuln

No description provided by source. -------------------------------------------------------- PHPizabi v0.848b C1 HFP3 database information exposure -------------------------------------------------------- I would like to state that I am in no way responsible for how this information is used. It is...

PHPizabi 0.848b C1 HFP3 - Database Information Disclosure

PHPizabi 0.848b C1 HFP3 - Database Information Disclosure -------------------------------------------------------- PHPizabi v0.848b C1 HFP3 database information exposure -------------------------------------------------------- I would like to state that I am in no way responsible for how this...

PHPizabi 0.848b C1 HFP3 - Database Information Disclosure

-------------------------------------------------------- PHPizabi v0.848b C1 HFP3 database information exposure -------------------------------------------------------- I would like to state that I am in no way responsible for how this information is used. It is just that, information and is...

PostNuke Module PostSchedule 1.0 - eid SQL Injection

PostNuke Module PostSchedule 1.0 - eid SQL Injection Vuln: Postnuke Mod PostSchedule SQL Vuln Author: Vuln search Kacper kacper1964atyahoo.pl google:"PostSchedule ver 1" Vuln:...

Host Directory PRO - Cookie Security Bypass

source: https://www.securityfocus.com/bid/28863/info Host Directory PRO is prone to a security-bypass vulnerability because it fails to properly validate user credentials before performing certain actions. Exploiting this issue may allow an attacker to bypass certain security restrictions and gai...