REMOTE SQL INJECTION (SQLi) VULNERABILITY--Photo-Rigma.BiZ v30-->

------------------------------------------------------------------ REMOTE SQL INJECTION SQLi VULNERABILITY--Photo-Rigma.BiZ v30-- ------------------------------------------------------------------ CMS INFORMATION: --WEB: http://foto.rigma.biz affected --DOWNLOAD:...

BolinTech DreamFTP Server 1.02 - 'users.dat' Arbitrary File Disclosure

!/usr/bin/perl -w This Bug Similar to others found By My Friend : Stack = so special Thanx So You Can Exploit Arbitrary File Disclosure From The Server == You can use Stack's Exploit To do That But This Exploit i will get Users & Passwords Of The applicatin From : users.dat : C:\Program...

VS PANEL 7.3.6 SQL Injection

+-------------------------------------+ + Homepage: http://www.vspanel.gr/ + Product: VS PANEL v.7.3.6 + File: showcat.php + Parameter: CatID + Dork: "Powered by VS PANEL" +-------------------------------------+ + SQL Injection: +...

Online Contact Manager 3.0 - email.php?id Cross-Site Scripting

Online Contact Manager 3.0 - email.php?id Cross-Site Scripting source: https://www.securityfocus.com/bid/34626/info Online Contact Manager is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues ...

Mandriva Update for nss_ldap MDVSA-2008:049 (nss_ldap)

Check for the Version of nssldap OpenVAS Vulnerability Test Mandriva Update for nssldap MDVSA-2008:049 nssldap Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

Pixie CMS Multiple Vulnerabilities (Mar 2009) - Active Check

Pixie CMS is prone to an SQL injection SQLi vulnerability and a cross-site scripting XSS vulnerability because it fails to sufficiently sanitize user-supplied data. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C b...

Bloginator 1a - Cookie Bypass / SQL Injection

Author = FireShot , Jacopo Vuga. Mail = fireshotautisticiorg Software = Bloginator V1A Download = http://kamads.com/kamadsads/download.php?email=bloginator&ID=0 Greets to = Osirys, Myral, str0ke Vulnerability = Insicure Cookie Handling CODE URL www.site.com/bloginator/articleCall.php global...

DeluxeBB 1.3 - qorder SQL Injection

DeluxeBB 1.3 - qorder SQL Injection Author: girex Homepage: girex.altervista.org Date: 18/03/2009 CMS: DeluxeBB 1.3 and prior site: deluxebb.com NOTE: - Works regardless of php.ini settings - This SQL injection will shows you username and md5 of ALL registered users of the site. - This PoC was...

Wordpress fMoblog 2.1 SQL Injection

Wordpress Plugin fMoblog Remote SQL Injection Vulnerability Plugin Home: http://www.fahlstad.se/wp-plugins/fmoblog/ Plugin Version: 2.1 Author: strange kevin Email: [email protected] Google Dork: "Gallery powered by fMoblog" Exploit:...

phpComasy 0.9.1 - entry_id SQL Injection

phpComasy 0.9.1 - entryid SQL Injection phpComasyentryid SQL-injection Vulnerability Author : boom3rang Greetz : H!tm@N, KHG, chs, redc00de Vulnerability : SQL injection Google Dork : N/W -------------------------------------------------- ! Name : phpComasy ! Site : www.phpcomasy.com ! Download :...

WEBJump! Multiple SQL Injection Vulnerabilities

WEBJump! is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the...

Bugs Online 'help.asp' SQL Injection Vulnerability

Bugs Online is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the...

PHP-Fusion Mod Book Panel - 'course_id' SQL Injection

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ PHP-Fusion Mod - Book Panel Remote SQL Injection Vulnerability ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ exploit : http://www.milw0rm.com/exploits/8182 home : http://www.security-dz.com / soon mirror attack fo...

Ubuntu: Security Advisory (USN-728-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

TinXCMS 3.5 - rss.php SQL Injection

TinXCMS 3.5 - rss.php SQL Injection source: https://www.securityfocus.com/bid/34021/info TinX CMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise th...

EZ-Blog 'public/view.php' SQL Injection Vulnerability

EZ-Blog is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying...

Amoot Web Directory - Password Field SQL Injection

source: https://www.securityfocus.com/bid/34016/info Amoot Web Directory is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or...

Parsi PHP CMS 2.0 - index.php SQL Injection

Parsi PHP CMS 2.0 - index.php SQL Injection source: https://www.securityfocus.com/bid/33914/info Parsi PHP CMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...

Joomla! and Mambo gigCalendar Component SQLi Vulnerability - Active Check

The gigCalendar component for Joomla! and Mambo is prone to an SQL injection SQLi vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced...

taifajobs 1.0 SQL Injection

ECHOADV103$2009 ----------------------------------------------------------------------------------------- ECHOADV103$2009 taifajobs = 1.0 jobid Remote SQL Injection Vulnerability ----------------------------------------------------------------------------------------- Author : K-159 Date :...