7393 matches found
CreateLive CMS 3.1 injection vulnerability-vulnerability warning-the black bar safety net
Inadvertently see the Black hands 1 2 The month of the books, saw the CreateLive CMS 4.2 injection vulnerability, the author is Chaoyang it. Just have a CreateLive CMS system, but version is 3. 1, I think it should be also the presence of this hole! The website is open for registration. Start now...
Joomla! Component com_virtuemart 1.0 - 'Product_ID' SQL Injection
Title: Joomla Component comvirtuemart SQL injection vulnerability productid Author: SOA Crew a.k.a Neo-GabrieL [email protected] visit us: http://indonesianhacker.com/ / Software Information Vendor : http://virtuemart.net/ Download : - Version : 1.0 Vulnerability : SQL injection Dork :...
Illogator Shop - SQL Injection Bypass
Illogator Shop - SQL Injection Bypass Title: Illogator Shop SQL Injection Bypass Date: 11/12/2009 Author: bi0 CVE : /\ == \ /\ \ /\ \ \ \ \ \ \ \ \ /\ \ \ \ \ \ \ \ // // // ---------------------------------------------------------------- x Illogator Shop SQL Injection Bypass x Author : bi0...
DPI 1.1-final Powered by Clixint XSS
No description provided by source. andresg888 Vendor : http://www.image-host-script.com/ Contact : andresg8884tgmaildotcom Web: : www.ilegalintrusion.nethttp://www.ilegalintrusion.net & www.bl4ck-p0rtal.orghttp://www.bl4ck-p0rtal.org Dork : No DoRk f0R ScRipT KiDDieS Example1:...
DEBIAN-CVE-2009-4076
Cross-site request forgery CSRF vulnerability in Roundcube Webmail 0.2.2 and earlier allows remote attackers to hijack the authentication of unspecified users for requests that modify user information via unspecified vectors, a different vulnerability than CVE-2009-4077...
New vulnerabilities in Invision Power Board
Здравствуйте 3APA3A! Сообщаю вам о найденных мною Information Leakage и Insufficient Anti-automation уязвимостях в форумном движке Invision Power Board. Information Leakage: http://site/index.php?act=Login В IPB существует ещё одна возможность, в дополнение к предыдущим...
Joomla! Component com_mygallery - 'cid' SQL Injection
Bugtraq ID: 37121 Class: Input Validation Error Published: Feb 21 2008 12:00AM Updated: Nov 24 2009 10:15PM Credit: S@BUN Vulnerable: Joomla commygallery 0 The 'commygallery' component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied...
Joomla! Component com_mygallery - cid SQL Injection
Joomla! Component commygallery - cid SQL Injection Bugtraq ID: 37121 Class: Input Validation Error Published: Feb 21 2008 12:00AM Updated: Nov 24 2009 10:15PM Credit: S@BUN Vulnerable: Joomla commygallery 0 The 'commygallery' component for Joomla! is prone to an SQL-injection vulnerability becaus...
Joomla! 'com_mygallery' Component 'cid' Parameter SQL Injection Vulnerability
No description provided by source. Bugtraq ID: 37121 Class: Input Validation Error Published: Feb 21 2008 12:00AM Updated: Nov 24 2009 10:15PM Credit: S@BUN Vulnerable: Joomla commygallery 0 The 'commygallery' component for Joomla! is prone to an SQL-injection vulnerability because it fails to...
Roundcube Webmail vulnerable to cross-site request forgery
Overview Roundcube Webmail provided by Roundcube Webmail Project contains a cross-site requesst forgery vulnerability. Roundcube Webmail is an open source webmail client from the Roundcube Webmail Project. Roundcube Webmail contains a cross-site request forgery vulnerability. This issue is...
RunCMS - forum SQL Injection
RunCMS - forum SQL Injection source: https://www.securityfocus.com/bid/36816/info RunCMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...
OpenDocMan 1.2.5 - user.php Cross-Site Scripting
OpenDocMan 1.2.5 - user.php Cross-Site Scripting source: https://www.securityfocus.com/bid/36777/info OpenDocMan is prone to an SQL-injection vulnerability and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could...
OpenDocMan 1.2.5 - department.php Cross-Site Scripting
OpenDocMan 1.2.5 - department.php Cross-Site Scripting source: https://www.securityfocus.com/bid/36777/info OpenDocMan is prone to an SQL-injection vulnerability and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues...
Meeting Room Booking System SQL Injection Vulnerability
This host is installed with Meeting Room Booking System and is prone to SQL Injection vulnerability. OpenVAS Vulnerability Test $Id: gbmrbssqlinjvuln.nasl 4869 2016-12-29 11:01:45Z teissa $ Meeting Room Booking System SQL Injection Vulnerability Authors: Nikita MR Copyright: Copyright c 2009...
Joomla! Component CB Resume Builder - group_id SQL Injection
Joomla! Component CB Resume Builder - groupid SQL Injection source: https://www.securityfocus.com/bid/36598/info The CB Resume Builder 'comcbresumebuilder' component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it...
Joomla! Component CB Resume Builder - 'group_id' SQL Injection
source: https://www.securityfocus.com/bid/36598/info The CB Resume Builder 'comcbresumebuilder' component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an...
[ONSEC-09-010] Undersky CMS SQL injection
ONSEC-09-010 Undersky CMS SQL injection Цель: Undersky CMS http://www.undersky.ru Тип: SQL инъекция Угроза: Высокая Дата обнаружения: 03.07.2009 Дата оповещения разработчика: 03.07.2009 Дата выхода исправления: 05.07.2009 Автор: Vladimir Vorontsov OnSec Russian Security Group onsec dot ru Описани...
Phishing Tool
Added: 09/23/2009 Background This tool serves an HTML form which collects information from users. It allows you to either replicate a real web page, or specify a custom header graphic, a custom footer graphic, and an introductory text message. For best results, design the HTML form to look like a...
Joomla! Component JoomlaFacebook - SQL Injection
Joomla! Component JoomlaFacebook - SQL Injection source: https://www.securityfocus.com/bid/36484/info The JoomlaFacebook component 'comfacebook' for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query...
Joomla! Component com_pressrelease - 'id' SQL Injection
source: https://www.securityfocus.com/bid/36351/info The 'compressrelease' component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...