OpenDocMan 1.2.5 - department.php Cross-Site Scripting

OpenDocMan 1.2.5 - department.php Cross-Site Scripting source: https://www.securityfocus.com/bid/36777/info OpenDocMan is prone to an SQL-injection vulnerability and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues...

Meeting Room Booking System SQL Injection Vulnerability

This host is installed with Meeting Room Booking System and is prone to SQL Injection vulnerability. OpenVAS Vulnerability Test $Id: gbmrbssqlinjvuln.nasl 4869 2016-12-29 11:01:45Z teissa $ Meeting Room Booking System SQL Injection Vulnerability Authors: Nikita MR Copyright: Copyright c 2009...

Joomla! Component CB Resume Builder - group_id SQL Injection

Joomla! Component CB Resume Builder - groupid SQL Injection source: https://www.securityfocus.com/bid/36598/info The CB Resume Builder 'comcbresumebuilder' component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it...

Joomla! Component CB Resume Builder - 'group_id' SQL Injection

source: https://www.securityfocus.com/bid/36598/info The CB Resume Builder 'comcbresumebuilder' component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an...

[ONSEC-09-010] Undersky CMS SQL injection

ONSEC-09-010 Undersky CMS SQL injection Цель: Undersky CMS http://www.undersky.ru Тип: SQL инъекция Угроза: Высокая Дата обнаружения: 03.07.2009 Дата оповещения разработчика: 03.07.2009 Дата выхода исправления: 05.07.2009 Автор: Vladimir Vorontsov OnSec Russian Security Group onsec dot ru Описани...

Phishing Tool

Added: 09/23/2009 Background This tool serves an HTML form which collects information from users. It allows you to either replicate a real web page, or specify a custom header graphic, a custom footer graphic, and an introductory text message. For best results, design the HTML form to look like a...

Joomla! Component JoomlaFacebook - SQL Injection

Joomla! Component JoomlaFacebook - SQL Injection source: https://www.securityfocus.com/bid/36484/info The JoomlaFacebook component 'comfacebook' for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query...

Accommodation Hotel Booking Portal (hotel_id) SQL Injection Vuln

No description provided by source. Viva IslaM Viva IslaM Remote SQL Injection Vulnerability hotel.php hotelid Accommodation Hotel Booking Portal http://www.tourismscripts.com AuTh0r : Mr.SQL H0ME : WwW.55a.NeT Email : [email protected] -: ExploiteS :-...

Accommodation Hotel Booking Portal (hotel_id) SQL Injection Vuln

Exploit for unknown platform in category web applications ================================================================ Accommodation Hotel Booking Portal hotelid SQL Injection Vuln ================================================================ Remote SQL Injection Vulnerability hotel.php...

Joomla! Component com_pressrelease - 'id' SQL Injection

source: https://www.securityfocus.com/bid/36351/info The 'compressrelease' component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

MKPortal 1.x (Multiple Modules) - Cross-Site Scripting

MKPortal 1.x Multiple Modules - Cross-Site Scripting source: https://www.securityfocus.com/bid/36216/info Multiple modules of MKPortal are prone to cross-site scripting vulnerabilities because the software fails to sufficiently sanitize user-supplied data. Attacker-supplied HTML or JavaScript cod...

allomani 2007 (cat) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ====================================================== allomani 2007 cat Remote SQL Injection Vulnerability ====================================================== ================== NaMe: allomani 2007 = SQL Injection Vulnerability Author ...

Radvision Scopia 5.7 Cross Site Scripting

Radvision's Scopia Cross Site Scripting Vulnerabilities Author: Francesco Bianchino contact: f.bianchino at gmail dot com Product: Radvision's Scopia Version: 5.7 Vendor Site: http://www.radvision.com Product Support Page: http://www.radvision.com/Support/SCOPIA-57-Support/ Summary Radvision's...

Paypal Shopping Cart Script - 'index.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/43471/info Paypal Shopping Cart Script is prone to an SQL-injection vulnerability and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to steal...

Oracle Secure Backup Administration Server Multiple Command Injection Vulnerabilities

This vulnerability allows remote attackers to inject arbitrary commands on vulnerable installations of Oracle Secure Backup. User interaction is not required to exploit this vulnerability but an attacker must be authenticated. The specific flaw exists in the handling of various variables to the...

MDPro Surveys Module SQL Injection Vulnerability

MDPro is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Tenrok 1.1.0 Disclosure / Code Execution

Tenrok 1.1.0 UDD/RCE Multiple Remote Vulnerabilities + Discovered By SirGod + http://insecurity-ro.org + http://h4cky0u.org + Homepage : http://tenrok.com/ + Users Data Disclosure - PoC http://127.0.0.1/userpwd.txt + Remote Command Execution - Must be logged in. - Go to http://127.0.0.1/post.php...

Tenrok 1.1.0 (UDD/RCE) Multiple Remote Vulnerabilities

No description provided by source. + Tenrok 1.1.0 UDD/RCE Multiple Remote Vulnerabilities + Discovered By SirGod + http://insecurity-ro.org + http://h4cky0u.org + Homepage : http://tenrok.com/ + Users Data Disclosure - PoC http://127.0.0.1/userpwd.txt + Remote Command Execution - Must be logged i...

Tenrok 1.1.0 (UDD/RCE) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ====================================================== Tenrok 1.1.0 UDD/RCE Multiple Remote Vulnerabilities ====================================================== + Tenrok 1.1.0 UDD/RCE Multiple Remote Vulnerabilities + Discovered By SirGo...

CS-Cart 2.0.5 - reward_points.post.php SQL Injection

CS-Cart 2.0.5 - rewardpoints.post.php SQL Injection source: https://www.securityfocus.com/bid/35936/info CS-Cart is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker t...