r.cms v2 Multiple SQL Injection Vulnerabilities

Exploit for unknown platform in category web applications =============================================== r.cms v2 Multiple SQL Injection Vulnerabilities =============================================== r.cms V2 - Multiple SQL Injection Vulnerabilities Vulnerability discovered by: LidlosesAuge...

r.cms 2.0 - Multiple SQL Injections

r.cms V2 - Multiple SQL Injection Vulnerabilities Vulnerability discovered by: LidlosesAuge Greetz to: -=Player=- , Suicide, g4ms3, enco, Palme, GPM, Free-Hack Date: 16.12.2008 Admin Panel: Target/rcms/ Description: Almost every GET parameter is vulnerable to SQL Injection, so i won't list 'em al...

PHPepperShop 1.4 - shopAdminSHOP_KONFIGURATION.php Cross-Site Scripting

PHPepperShop 1.4 - shopAdminSHOPKONFIGURATION.php Cross-Site Scripting source: https://www.securityfocus.com/bid/32690/info PhPepperShop is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to...

PHPSTREET WebBoard 1.0 - show.php SQL Injection

PHPSTREET WebBoard 1.0 - show.php SQL Injection source: https://www.securityfocus.com/bid/32635/info PHPSTREET Webboard is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an...

Orkut Clone - 'profile_social.php?id' SQL Injection

source: https://www.securityfocus.com/bid/32600/info Orkut Clone is prone to an SQL-injection vulnerability and a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to steal cookie-based authentication...

Pre ASP Job Board - emp_login.asp Cross-Site Scripting

Pre ASP Job Board - emplogin.asp Cross-Site Scripting source: https://www.securityfocus.com/bid/32572/info Pre ASP Job Board is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary scri...

Pre Classified Listings 1.0 - signup.asp Cross-Site Scripting

Pre Classified Listings 1.0 - signup.asp Cross-Site Scripting source: https://www.securityfocus.com/bid/32567/info Pre Classified Listings is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute...

Softbiz Classifieds Script - 'lostpassword.php?msg' Cross-Site Scripting

source: https://www.securityfocus.com/bid/32569/info Softbiz Classifieds Script is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser of an...

linksxs-sql.txt

----------------------------------------------------------------------------------------------------------------------------------------------------- Linksxs Script link.php?catid and linking.page.php?catid Remote SQL Injection Vulnerability http://linksxs.com...

Easyedit CMS - 'subcategory.php?intSubCategoryID' SQL Injection

source: https://www.securityfocus.com/bid/32369/info Easyedit is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the application, access or...

ebayindia-sql.txt

Host Information Server = Apache/2.0.52 CentOS Version = 4.0.20 Powered by = PHP/5.2.0 Current User = root@localhost Current Database = pegasusinfo Supports Union = yes Union Columns = 15 Url| http://shopping.ebay.in/files/template1rupeenew.php?lpid=600 Vuln:...

sdms-sql.txt

SDMS Simple Document Management System v1.1.4 SQL Injection Author: Yuri Program: SDMS Simple Document Management System Version: v1.1.4 and probably all older versions as well Website: http://sdms.cafuego.net/ How it works The login system is very insecure, this is the code we are going to abuse...

YourFreeWorld Downline Builder Pro - 'tr.php' SQL Injection

source: https://www.securityfocus.com/bid/32047/info Downline Builder Pro is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or...

phpWebSite 0.9.3 - links.php SQL Injection

phpWebSite 0.9.3 - links.php SQL Injection source: https://www.securityfocus.com/bid/32011/info phpWebSite is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...

Article Publisher PRO - userid SQL Injection

Article Publisher PRO - userid SQL Injection Kira has decide be back after halloween Discovered by : Mountassif Moad Type Gap : Blind Sql Injection Script : Article Publisher Pro : http://www.phparticlescript.com/ Greetz : Allah , All my freind P0c :...

Dorsa CMS - 'Default_.aspx' Cross-Site Scripting

source: https://www.securityfocus.com/bid/31992/info Dorsa CMS is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context ...

Kasra CMS (index.php) Multiple SQL Injection Vulnerabilities

No description provided by source. -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= KasraCMS index.php Multiple Remote SQL Injection Vulnerabilities -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Script: KasraCMS...

hisa_cart information disclosure vulnerability

Overview hisacart from Hisanaga Electric Co.Ltd contains an information disclosure vulnerability. hisacart from Hisanaga Electric Co.Ltd is a shopping cart module for XOOPS. hisacart contains a vulnerability allowing the disclosure of users' information. Impact A remote attacker could obtain...

Bahar Download Script 2.0 - 'aspkat.asp' SQL Injection

source: https://www.securityfocus.com/bid/31852/info Bahar Download Script is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data. A successful exploit may allow an attacker to compromise the application, access or modify data, or exploit latent...

Jetbox CMS 2.1 - admincmsimages.php?orderby SQL Injection

Jetbox CMS 2.1 - admincmsimages.php?orderby SQL Injection source: https://www.securityfocus.com/bid/31824/info Jetbox CMS is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could...