AvailScript Job Portal Script - 'applynow.php' SQL Injection

source: https://www.securityfocus.com/bid/31101/info AvailScript Job Portal Script is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application,...

eXtrovert software Thyme 1.3 - pick_users.php SQL Injection

eXtrovert software Thyme 1.3 - pickusers.php SQL Injection source: https://www.securityfocus.com/bid/31063/info eXtrovert software Thyme is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue...

iranmc-sql.txt

. . | / | | \ \ | / / |\ \ \ |/ // / /\ \ / |/ \ / // | / | | / \ /|\ / / / / \ / \ / / / \ | | /\ /\ / \ | \ // est.2007 / / forum.darkc0de.com --- d3hydr8 - rsauron - P47r1ck - r45c4l - C1c4Tr1Z - beenu --- --- QKrun1x - skillfaker - FeDeReR - Optyx - Nuclear --- Author:...

CVE-2008-3948

SQL injection vulnerability in admin/users/self-2.php in XRMS allows remote attackers to execute arbitrary SQL commands and modify name and email fields via unspecified vectors...

Vastal I-Tech MMORPG Zone - game_id SQL Injection

Vastal I-Tech MMORPG Zone - gameid SQL Injection Vastal I-Tech MMORPG Zone SQL Injection Vulnerability Author : Stack Script Home Page : http://www.vastal.com/mmorpg-zone-sell-mmorpg-online.html Demo : http://www.vastal.com/games/ the exploit fate the password use ur mind for have the column...

Vastal I-Tech Shaadi Zone 1.0.9 (tage) SQL Injection Vulnerability

No description provided by source. Vastal I Tech Shaadi Zone 1.0.9 SQL Injection Vulnerability By: e.wiZz! Site: infected.blogger.ba Info: Bosnian Idiot FTW! Greetz: str0ke,aluigi,suN8Hclf,0in,Rishi Narang,f34r In the wild... Info: Shaadi Zone is the best solution if you are looking to run a...

EasyClassifields 3.0 - 'go' SQL Injection

EasyClassifields v3.0 SQL Injection By: e.wiZz! Info: Bosnian Idiot FTW! Site: infected.blogger.ba Greetz: Luigi,suN8Hclf,str0ke In the wild... Script Site: http://myiosoft.com/?1.6.0.0 Vulnerability: http://www.inthewild.xxx/path/index.php?PageSection=x&page=browse&go= PoC on demo site:...

goranicms-blindsql.txt

. . | / | | \ \ | / / |\ \ \ |/ // / /\ \ / |/ \ / // | / | | / \ /|\ / / / / \ / \ / / / \ | | /\ /\ / \ | \ // est.2007 / / forum.darkc0de.com --- d3hydr8 - rsauron - P47r1ck - r45c4l - C1c4Tr1Z - bennu --- QKrun1x - skillfaker - Croathack - Optyx - Nuclear --- Eliminator and to...

cyberBB SQL注入漏洞

BUGTRAQ ID: 30734 CNCAN ID：CNCAN-2008081901 cyberBB是一款基于PHP的WEB应用程序。 cyberBB不正确处理用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，可能获得敏感信息或操作数据库。 问题由于脚本对用户提交给WEB参数缺少过滤，构建恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息或操作数据库。 Sascha Riemer cyberBB 0.6 目前没有解决方案提供： http://cyberbb.sourceforge.net/...

Vim 7.1.314 - Insufficient Shell Escaping Multiple Command Execution Vulnerabilities

source: https://www.securityfocus.com/bid/30795/info Vim is prone to multiple command-execution vulnerabilities because the application fails to sufficiently sanitize user-supplied data. Successfully exploiting these issues can allow an attacker to execute arbitrary commands with the privileges o...

itMedia - Multiple SQL Injections

source: https://www.securityfocus.com/bid/30740/info itMedia is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the application, access or...

Links Pile - 'link.php' SQL Injection

source: https://www.securityfocus.com/bid/29223/info Links Pile is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify...

Meet#Web 0.8 - modules.php?root_path Remote File Inclusion

MeetWeb 0.8 - modules.php?rootpath Remote File Inclusion source: https://www.securityfocus.com/bid/30673/info MeetWeb is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise...

PHP-Fusion 4.01 - 'readmore.php' SQL Injection

source: https://www.securityfocus.com/bid/30680/info PHP-Fusion is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify...

Magnet Blog Sql Injection Vulnerability

Title:Magnet Blog Sql Injection Vulnerability Discovered by : AleminKrali Dork: "intitle:Magnet Blog" Download:www.aspindir.com/Goster/4217 Exploit:Http://www.site.com/scriptpath/yazidetay.asp?id=-999 union select 0,user,2,pass,4,5 from user Example:...

WebmasterSite (Multiple Products) - Remote Command Execution

WebmasterSite Multiple Products - Remote Command Execution source: https://www.securityfocus.com/bid/30572/info Multiple WebmasterSite products are prone to a remote shell command-execution vulnerability because the applications fail to sufficiently sanitize user-supplied data. Successfully...

Softbiz Image Gallery - index.php Multiple Cross-Site Scripting Vulnerabilities

Softbiz Image Gallery - index.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/30546/info Softbiz Photo Gallery is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may levera...

plogger-sql.txt

GulfTech Security Research August 05, 2008 Vendor : Mike Johnson URL : http://www.plogger.org/ Version : Plogger addfile$filecontents, $row"path";...

Softbiz Image Gallery - 'images.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/30546/info Softbiz Photo Gallery is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecti...

Pcshey Portal - 'kategori.asp' SQL Injection

source: https://www.securityfocus.com/bid/30534/info Pcshey Portal is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify...