smartplugs 1.3 - 'showplugs.php' SQL Injection

----------------------------Information------------------------------------------------ +Name : smartplugs 1.3 SQL Injection showplugs.php +Autor : Easy Laster +Date : 03.03.2010 +Script : smartplugs 1.3 http://www.smart-plugs.com/spv1/ +Download : ------------- +Price : 170$ +Language : PHP...

rbot 0.9.14 - !react Unauthorized Access

rbot 0.9.14 - !react Unauthorized Access source: https://www.securityfocus.com/bid/39915/info Rbot is prone to an unauthorized-access vulnerability because it fails to adequately sanitize user supplied data. An attacker can exploit this vulnerability to gain administrative rights to the rbot...

Joomla! Component HD FLV Player - id SQL Injection

Joomla! Component HD FLV Player - id SQL Injection source: https://www.securityfocus.com/bid/38401/info The HD FLV Player component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this...

PHP Auktion Pro SQL Injection

----------------------------Information------------------------------------------------ +Name : Php Auktion Pro SQL Injection news.php +Autor : Easy Laster +Date : 22.02.2010 +Script : Php Auktion Pro +Download : ----- +Demo :http://wp1072278.vwp3485.webpack.hosteurope.de/demoserver/auktionblau/...

PHP Auktion Pro SQL - news.php SQL Injection

PHP Auktion Pro SQL - news.php SQL Injection ----------------------------Information------------------------------------------------ +Name : Php Auktion Pro SQL Injection news.php +Autor : Easy Laster +Date : 22.02.2010 +Script : Php Auktion Pro +Download : ----- +Price : 34,90€ +Language :PHP...

Ero Auktion 2.0 - 'news.php' SQL Injection

----------------------------Information---------------------------------------- +Autor : Easy Laster +Date : 21.10.2010 +Script : Ero Auktion V.2.0 SQL Injection news.php +Download : ----- +Price : 34,90€ +Language :PHP +Discovered by Easy Laster +Security Group 4004-Security-Project +Greetz to...

vBulletin Multiple Cross Site Scripting Vulnerabilities

vBulletin is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the...

Microsoft Works File Converter WPS File Section Header Index Table Stack Overflow (MS08-011; CVE-2008-0105)

Microsoft Works is a home/office productivity software suite. Its core functionality includes a word processor, a spreadsheet, and a database. A Microsoft Works Document, normally denoted by the extension .wps, has numerous properties which define the appearance of the document, as well as some...

CommodityRentals CD Rental Software - index.php SQL Injection

CommodityRentals CD Rental Software - index.php SQL Injection source: https://www.securityfocus.com/bid/38184/info CommodityRentals CD Rental Software is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploitin...

PHPMySpace Gold 'gid' Parameter SQL Injection Vulnerability

PHPMySpace Gold is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the...

FlatPress Multiple Cross site Scripting Vulnerabilities

This host is running FlatPress and is prone to multiple Cross Site Scripting vulnerabilities. OpenVAS Vulnerability Test $Id: gbflatpressmultxssvuln.nasl 5306 2017-02-16 09:00:16Z teissa $ FlatPress Multiple Cross site Scripting Vulnerabilities Authors: Madhuri D Copyright: Copyright c 2010...

DataLife Engine 8.3 - engineinchelp.php?config[langs] Remote File Inclusion

DataLife Engine 8.3 - engineinchelp.php?configlangs Remote File Inclusion source: https://www.securityfocus.com/bid/37851/info Datalife Engine is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow a...

Easysitenetwork Jokes Complete Website - id Cross-Site Scripting

Easysitenetwork Jokes Complete Website - id Cross-Site Scripting source: https://www.securityfocus.com/bid/37852/info EasySiteNetwork Jokes Complete Website is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may...

vBulletin 4.0.1 - misc.php SQL Injection

vBulletin 4.0.1 - misc.php SQL Injection source: https://www.securityfocus.com/bid/37854/info vBulletin is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...

Dittberner.com SQL Injection

Title pressrelease.php SQL Injection Vulnerability AUTHOR : KroNicKq HOME : www 1923turk.com Greetz : Zombie & DigitALL & 1923Turk ALL Users http://www.dittberner.com/news/pressrelease.php?id= SQL DORK : inurl:"pressrelease.php?id=" EXPLOIT :...

Joomla! Component DM Orders - 'id' SQL Injection

source: https://www.securityfocus.com/bid/37655/info The DM Orders component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

ITaco Group ITaco.biz SQL Injection

Exploit Title: ITaco Group ITaco.biz viewnews SQL Injection Vulnerability Date: 5/1/2010 Author: Err0R Software Link: ITaco.biz Version: N/A Tested on: CVE : Code : 11009 =============================================================================...

Freewebscriptz Online Games Login - Multiple SQL Injections

Freewebscriptz Online Games Login - Multiple SQL Injections source: https://www.securityfocus.com/bid/41267/info Free Web Scriptâ??z Online Games is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query...

webCocoon's simpleCMS SQL Injection Vulnerability

No description provided by source. webCocoon's simpleCMS Vulnerability Plugin Home: http://webcocoon.wordpress.com Author:ÝNFAZCI Site: www.1923turk.biz Exploit: Vuln file: /content/post/show.php Exploit: POST http://host/path/index.php HTTP/1.0 Content-type: application/x-www-form-urlencoded...

WHMCompleteSolution CMS - SQL Injection

WHMCompleteSolution CMS - SQL Injection ALGERIAN HACKER - NORTH-AFRICA SECURITY TEAM - ! WHMCompleteSolution CMS sql Injection Vulnerability ! Author : Dr.0rYX and Cr3w-DZ ! MAIL : [email protected] & [email protected] / Software Information + Vendor : http://www.siamhostserver.com/whmcs/ + script :...