DeluxeBB 1.3 - qorder SQL Injection

DeluxeBB 1.3 - qorder SQL Injection Author: girex Homepage: girex.altervista.org Date: 18/03/2009 CMS: DeluxeBB 1.3 and prior site: deluxebb.com NOTE: - Works regardless of php.ini settings - This SQL injection will shows you username and md5 of ALL registered users of the site. - This PoC was...

phpComasy 0.9.1 - entry_id SQL Injection

phpComasy 0.9.1 - entryid SQL Injection phpComasyentryid SQL-injection Vulnerability Author : boom3rang Greetz : H!tm@N, KHG, chs, redc00de Vulnerability : SQL injection Google Dork : N/W -------------------------------------------------- ! Name : phpComasy ! Site : www.phpcomasy.com ! Download :...

WEBJump! Multiple SQL Injection Vulnerabilities

WEBJump! is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the...

Bugs Online 'help.asp' SQL Injection Vulnerability

Bugs Online is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the...

PHP-Fusion Mod Book Panel - 'course_id' SQL Injection

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ PHP-Fusion Mod - Book Panel Remote SQL Injection Vulnerability ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ exploit : http://www.milw0rm.com/exploits/8182 home : http://www.security-dz.com / soon mirror attack fo...

Ubuntu: Security Advisory (USN-728-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EZ-Blog 'public/view.php' SQL Injection Vulnerability

EZ-Blog is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying...

TinXCMS 3.5 - rss.php SQL Injection

TinXCMS 3.5 - rss.php SQL Injection source: https://www.securityfocus.com/bid/34021/info TinX CMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise th...

Amoot Web Directory - Password Field SQL Injection

source: https://www.securityfocus.com/bid/34016/info Amoot Web Directory is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or...

Joomla! and Mambo gigCalendar Component SQLi Vulnerability - Active Check

The gigCalendar component for Joomla! and Mambo is prone to an SQL injection SQLi vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced...

Parsi PHP CMS 2.0 - index.php SQL Injection

Parsi PHP CMS 2.0 - index.php SQL Injection source: https://www.securityfocus.com/bid/33914/info Parsi PHP CMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...

taifajobs 1.0 SQL Injection

ECHOADV103$2009 ----------------------------------------------------------------------------------------- ECHOADV103$2009 taifajobs = 1.0 jobid Remote SQL Injection Vulnerability ----------------------------------------------------------------------------------------- Author : K-159 Date :...

Microsoft Visio Object Copy Memory Corruption Remote Code Execution Vulnerability

Description Microsoft Visio is prone to a remote code-execution vulnerability because it fails to adequately handle user-supplied data. Attackers can exploit this issue to execute arbitrary code in the context of the user running the application. Failed exploit attempts will result in a...

ProFTPd 1.3 - mod_sql Username SQL Injection

ProFTPd 1.3 - modsql Username SQL Injection source: https://www.securityfocus.com/bid/33722/info ProFTPD is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...

BusinessSpace <= 1.2 (id) Remote SQL Injection Vulnerability

No description provided by source. \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV102$2009 ----------------------------------------------------------------------------------------- ECHOADV102$2009 BusinessSpace = 1.2 id Remote SQL Injection Vulnerability...

BusinessSpace <= 1.2 (id) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================ BusinessSpace = 1.2 id Remote SQL Injection Vulnerability ============================================================...

glFusion 1.1 - Anonymous Comment 'Username' HTML Injection

source: https://www.securityfocus.com/bid/33683/info glFusion is prone to an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied data. Attacker-supplied HTML or JavaScript code could run in the context of the affected site, potentially allowing the attacker to ste...

Microsoft Internet Explorer HTML Form Value DoS Vulnerability

This host is installed Internet Explorer and is prone to Denial of Service vulnerability. OpenVAS Vulnerability Test $Id: secpodmsiehtmlformdosvuln.nasl 6527 2017-07-05 05:56:34Z cfischer $ Microsoft Internet Explorer HTML Form Value DoS Vulnerability Authors: Sharath S Copyright c 2009 SecPod,...

Max.Blog 1.0.6 - 'submit_post.php' SQL Injection

Salvatore "drosophila" Fresta Application: Max.Blog http://www.mzbservices.com Version: Max.Blog = 1.0.6 Bug: SQL Injection Exploitation: Remote Dork: intext:"Powered by Max.Blog" Date: 27 Jan 2009 Discovered by: Salvatore "drosophila" Fresta Author: Salvatore "drosophila" Fresta e-mail:...

Max.Blog 1.0.6 - 'show_post.php' SQL Injection

Salvatore "drosophila" Fresta Application: Max.Blog http://www.mzbservices.com Version: Max.Blog = 1.0.6 Bug: SQL Injection Exploitation: Remote Dork: intext:"Powered by Max.Blog" Date: 20 Jan 2009 Discovered by: Salvatore "drosophila" Fresta Author: Salvatore "drosophila" Fresta e-mail:...