4x CMS - 'login.php' Multiple SQL Injections

source: https://www.securityfocus.com/bid/39840/info 4xcms is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the application, access or modi...

Debian Security Advisory DSA 2008-1 (typo3-src)

The remote host is missing an update to typo3-src announced via advisory DSA 2008-1. OpenVAS Vulnerability Test $Id: deb20081.nasl 6614 2017-07-07 12:09:12Z cfischer $ Description: Auto-generated from advisory DSA 2008-1 typo3-src Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...

Xbtit 2.0.0 SQL Injection

Exploit Title: Xbtit SQL Injection Vulnerability Date: 14.03.2010 Author: Ctacok Software Link: http://xbtit.com/ Version: 2.0.0 Tested on: Windows XP SP3 Title : Xbtit SQL Injection Vulnerability Author : Ctacok Homepage : http://ctacok.ru/ Vulnerable File : /index.php?page=users&order=SQL&by=AS...

Preisschlacht V4 Flash System (seite&aid) index.php SQL Injection

Exploit for unknown platform in category web applications ================================================================= Preisschlacht V4 Flash System seite&aid index.php SQL Injection =================================================================...

Easynet Forum Host (topic.php) SQL Injection Vulnerbility

Exploit for unknown platform in category web applications ========================================================= Easynet Forum Host topic.php SQL Injection Vulnerbility ========================================================= Exploit Title: Easynet Forum Host topic.php SQL Injection...

Zblog1.8 search.asp 跨站漏洞

北洋贱队http://bbs.seceye.org Zblog是基于Asp平台的Blog博客网志程序 search.asp在对用户提交数据处理上存在安全漏洞。 demo: http://localhost/search.asp?q=%3Ciframe+src%3Dhttp%3A%2F%2Fwww.gohack.org+insafe Zblog 1.8 等待官方发补丁 !/usr/bin/env python coding: utf-8 from pocsuite.net import req from pocsuite.poc import POCBase, Output from...

[SECURITY] [DSA 2008-1] New typo3-src packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-2008-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff March 08, 2010 http://www.debian.org/security/faq -...

DSA-2008-1 typo3-src - several vulnerabilities

Bulletin has no description...

Auktionshaus 3.0.0.1 - news.php?id SQL Injection

Auktionshaus 3.0.0.1 - news.php?id SQL Injection ----------------------------Information------------------------------------------------ +Name : Auktionshaus 3.0.0.1 news.php id SQL Injection +Autor : Easy Laster +Price : 59.95€ +Language :PHP +Discovered by Easy Laster +Security Group...

Microsoft to Patch 8 Vulnerabilities in Windows, Office

Microsoft has announced plans to ship two security bulletins next week to fix a total of eight vulnerabilities affecting Windows and Office products. Both bulletins are rated “important” because of the risk compromising the confidentiality, integrity or availability of user data. Microsoft is...

smartplugs 1.3 - 'showplugs.php' SQL Injection

----------------------------Information------------------------------------------------ +Name : smartplugs 1.3 SQL Injection showplugs.php +Autor : Easy Laster +Date : 03.03.2010 +Script : smartplugs 1.3 http://www.smart-plugs.com/spv1/ +Download : ------------- +Price : 170$ +Language : PHP...

rbot 0.9.14 - !react Unauthorized Access

rbot 0.9.14 - !react Unauthorized Access source: https://www.securityfocus.com/bid/39915/info Rbot is prone to an unauthorized-access vulnerability because it fails to adequately sanitize user supplied data. An attacker can exploit this vulnerability to gain administrative rights to the rbot...

Joomla! Component HD FLV Player - id SQL Injection

Joomla! Component HD FLV Player - id SQL Injection source: https://www.securityfocus.com/bid/38401/info The HD FLV Player component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this...

PHP Auktion Pro SQL Injection

----------------------------Information------------------------------------------------ +Name : Php Auktion Pro SQL Injection news.php +Autor : Easy Laster +Date : 22.02.2010 +Script : Php Auktion Pro +Download : ----- +Demo :http://wp1072278.vwp3485.webpack.hosteurope.de/demoserver/auktionblau/...

PHP Auktion Pro SQL - news.php SQL Injection

PHP Auktion Pro SQL - news.php SQL Injection ----------------------------Information------------------------------------------------ +Name : Php Auktion Pro SQL Injection news.php +Autor : Easy Laster +Date : 22.02.2010 +Script : Php Auktion Pro +Download : ----- +Price : 34,90€ +Language :PHP...

Ero Auktion 2.0 - 'news.php' SQL Injection

----------------------------Information---------------------------------------- +Autor : Easy Laster +Date : 21.10.2010 +Script : Ero Auktion V.2.0 SQL Injection news.php +Download : ----- +Price : 34,90€ +Language :PHP +Discovered by Easy Laster +Security Group 4004-Security-Project +Greetz to...

vBulletin Multiple Cross Site Scripting Vulnerabilities

vBulletin is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the...

Microsoft Works File Converter WPS File Section Header Index Table Stack Overflow (MS08-011; CVE-2008-0105)

Microsoft Works is a home/office productivity software suite. Its core functionality includes a word processor, a spreadsheet, and a database. A Microsoft Works Document, normally denoted by the extension .wps, has numerous properties which define the appearance of the document, as well as some...

CommodityRentals CD Rental Software - index.php SQL Injection

CommodityRentals CD Rental Software - index.php SQL Injection source: https://www.securityfocus.com/bid/38184/info CommodityRentals CD Rental Software is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploitin...

PHPMySpace Gold 'gid' Parameter SQL Injection Vulnerability

PHPMySpace Gold is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the...