AShop Deluxe 4.x - catalogue.php SQL Injection

AShop Deluxe 4.x - catalogue.php SQL Injection usr/bin/perl use LWP::UserAgent; use HTTP::Cookies; use Getopt::Long; use URI::Escape; -------------------------------------------------------------------------------------------------------------------------------------------------------- x AShop...

RCM Revision Web Development - 'products.php' SQL Injection

RCM Revision Web Development products.php SQL Injection Vulnerability by D3m0n a.k.a Niiub Home: www.bl4ck-b0x.info niiubatbl4ck-b0x.info Exploit: products.php?cat=-1%20union%20select%201,2,3,4,concatws0x3a,username, userpassword,6%20from%20users/ OR...

drinkswebsite-sql.txt

|| || | || o,7 || . o7 || 4||| ow, : / / . |-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=| | | | /' \ /'\ /\ \ /'\ /\ \ | | /, \ /\/\L\ \ \ \ ,/\ /\ \ \ \ / | | //\ \ /' \ /\ //\ Kings of injection | | // | | |...

Drinks Complete Website 2.1.0 - drinkid SQL Injection

Drinks Complete Website 2.1.0 - drinkid SQL Injection || || | || o,7 || . o7 || 4||| ow, : / / . |-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=| | | | /' \ /'\ /\ \ /'\ /\ \ | | /, \ /\/\L\ \ \ \ ,/\ /\ \ \ \ / | | //\ \ /' \ /\ //\ Kings of injection | | // | | |...

PHP-Fusion Mod Kroax 4.42 - category SQL Injection

PHP-Fusion Mod Kroax 4.42 - category SQL Injection ========================================================== The kroax phpfusion Remote SQL-injection. ========================================================== Author : boom3rang Contact : [email protected] webpage : www.khg-crew.ws ---...

E-topbiz Link ADS 1 - 'out.php' SQL Injection Vulnerability

E-topbiz Link ADS 1 'out.php' SQL Injection Vulnerability. Webapps exploit for php platform source: http://www.securityfocus.com/bid/29923/info Link ADS 1 is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query...

sharecms-sql.txt

============================================================== ShareCMS 0.1 Multiple Remote SQL Injection Vulnerabilities ============================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team...

Joomla! Component EXP Shop 1.0 - SQL Injection

Joomla! Component EXP Shop 1.0 - SQL Injection source: https://www.securityfocus.com/bid/29869/info The EXP Shop component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue cou...

@CMS 2.1.1 - SQL Injection

@CMS 2.1.1 - SQL Injection Viva IslaM Viva IslaM Remote SQL Injection Vulnerability @CMS 2.1.1 readarticle.php articleid AuTh0r : Mr.SQL H0ME : WwW.PaL-HaCkEr.CoM & WwW.ATsDp.CoM Email : [email protected] !! SYRIAN HaCkErS !! Script : @CMS 2.1.1 site : www.atcode.net -:: SQL ::-...

GlassFish Application Server - '/resourceNode/externalResourceNew.jsf' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/29751/info Sun Glassfish is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user ...

TorrentTrader Classic 1.x - 'scrape.php' SQL Injection

source: https://www.securityfocus.com/bid/29451/info TorrentTrader Classic is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access o...

CMS Easyway - 'mid' SQL Injection

source: https://www.securityfocus.com/bid/29461/info CMS Easyway is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify...

dvbbs 8.2 - 'login.asp' Multiple SQL Injections

source: https://www.securityfocus.com/bid/29429/info The 'dvbbs' program is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the application,...

roomphplanning15-sqlmulti.txt

...::::RoomPHPlanning 1.5 SQL Injection Vulnerabilities ::::... Virangar Security Team www.virangar.net www.virangar.ir -------- Discoverd By :virangar security teamhadihadi special tnx to:MR.nosrati,black.shadowes,MR.hesy,Zahra & all virangar members & all hackerz greetz:to my best friend in the...

Campus Bulletin Board 3.4 - post3book.asp?review SQL Injection

Campus Bulletin Board 3.4 - post3book.asp?review SQL Injection source: https://www.securityfocus.com/bid/29375/info Campus Bulletin Board is prone to multiple input-validation vulnerabilities, including multiple SQL-injection issues and a cross-site scripting issue, because it fails to sufficient...

nss_ldap randomly replying with wrong user's data

Race condition in nssldap, when used in applications that are linked against the pthread library and fork after a call to nssldap, might send user data to the wrong process because of improper handling of the LDAP connection. NOTE: this issue was originally reported for Dovecot with the wrong...

entertainment-sql.txt

rEm0te SQL Injection Vulnerability EntertainmentScript V1.4.0 play.php id Script : EntertainmentScript.com V1.4.0 name script on demo site is fastfreemedia DeMo : http://demo.fastfreemedia.com/index.php AuTh0r : Mr.SQL H0ME : WwW.PaL-HaCkEr.CoM Email : [email protected] D0rK :: : not found -:: SQL :...

Web Slider 0.6 - 'slide' SQL Injection

source: https://www.securityfocus.com/bid/29296/info Web Slider is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify...

EntertainmentScript 1.4.0 - 'play.php' SQL Injection

rEm0te SQL Injection Vulnerability EntertainmentScript V1.4.0 play.php id Script : EntertainmentScript.com V1.4.0 name script on demo site is fastfreemedia DeMo : http://demo.fastfreemedia.com/index.php AuTh0r : Mr.SQL H0ME : WwW.PaL-HaCkEr.CoM Email : [email protected] D0rK :: : not found -:: SQL :...

Linkspile (link.php cat_id) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================== Linkspile link.php catid Remote SQL Injection Vulnerability ============================================================== Remote SQL Injection Vulnerabilities Linkspile link.p...