Quick Classifieds 1.0 - 'controlcenter/index.php3?DOCUMENT_ROOT' Remote File Inclusion

source: https://www.securityfocus.com/bid/28417/info Quick Classifieds is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the underlying system; othe...

Quick Classifieds 1.0 - 'controlcenter/update.php3?DOCUMENT_ROOT' Remote File Inclusion

source: https://www.securityfocus.com/bid/28417/info Quick Classifieds is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the underlying system; othe...

Quick Classifieds 1.0 - 'style/default.scheme.inc?DOCUMENT_ROOT' Remote File Inclusion

source: https://www.securityfocus.com/bid/28417/info Quick Classifieds is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the underlying system; othe...

Joomla! / Mambo Component Datsogallery 1.3.1 - 'id' SQL Injection

source: https://www.securityfocus.com/bid/28361/info The Datsogallery component for Joomla! and Mambo is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromis...

Joomla! Mambo Component Datsogallery 1.3.1 - id SQL Injection

Joomla! Mambo Component Datsogallery 1.3.1 - id SQL Injection source: https://www.securityfocus.com/bid/28361/info The Datsogallery component for Joomla! and Mambo is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL...

fmphpbb-sql.txt

Powered by phpBB © 2001, 2006 phpBB Group Modified by Fully Modded phpBB © 2002, 2006 AUTHOR : TurkishWarriorr HOME : http://www.1923turk.org DORKS 1 : allinurl :kb.php?mode=article&k DORKS 2 : article&k= DORKS 3 : "Powered by phpBB © 2001, 2006 phpBB Group" "Modified by Fully Modded phpBB © 2002...

XOOPS MyTutorials Module 2.1 - printpage.php SQL Injection

XOOPS MyTutorials Module 2.1 - printpage.php SQL Injection source: https://www.securityfocus.com/bid/28230/info MyTutorials is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an...

Chris LaPointe Download Center 1.2 - login Action Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/28219/info Download Center is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting use...

Joomla! Component ProductShowcase 1.5 - SQL Injection

Joomla Component comproductshowcase SQL Injection AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 HOME : http://securityreason.com/search/101/c0BidW4=/1/0 MAÄ°L : [email protected] DORKS 1 : allinurl :"comproductshowcase" EXPLOIT :...

PHP-Nuke zClassifieds Module - 'cat' SQL Injection

source: https://www.securityfocus.com/bid/28211/info The zClassifieds module for PHP-Nuke is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

PHP-Nuke NukeC30 3.0 Module - 'id_catg' SQL Injection

source: https://www.securityfocus.com/bid/28197/info The NukeC30 module for PHP-Nuke is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application...

Microsoft Excel Rich Text Value Heap Buffer Overflow Vulnerability

Description Microsoft Excel is prone to a heap-based buffer-overflow vulnerability. This issue occurs because the application fails to perform adequate boundary-checks on user-supplied data. Attackers may exploit this issue by enticing victims into opening a maliciously crafted Excel file '.xls'...

PHP-Nuke 4nChat Module 0.91 - roomid SQL Injection

PHP-Nuke 4nChat Module 0.91 - roomid SQL Injection source: https://www.securityfocus.com/bid/28128/info The 4nChat module for PHP-Nuke is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue cou...

PHP-Nuke 4nChat Module 0.91 - 'roomid' SQL Injection

source: https://www.securityfocus.com/bid/28128/info The 4nChat module for PHP-Nuke is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application,...

PHP-Nuke eGallery 3.0 Module - 'pid' SQL Injection

source: https://www.securityfocus.com/bid/28088/info The eGallery module for PHP-Nuke is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the applicatio...

phpcomasy-sql.txt

By Cr@zyKing / [email protected] phpComasy 0.8 modprojectid Remote Sql İnj. Vuln Script Down : http://www.phpcomasy.com/index.php?id=7&modaction=projectdetail&modprojectid=9 Page : index.php?id=7&modaction=projectdetail&modprojectid=Sql. Exp :...

eazyPortal 1.0 - cookie SQL Injection

eazyPortal 1.0 - cookie SQL Injection !/usr/bin/perl Vendor url: http://www.eazyportal.com/ by Iron - http://www.randombase.com exploit goes through $COOKIE use LWP::UserAgent; use MIME::Base64; print " EazyPortal ; if$target ! /^http:/// $target = "http://".$target; if$target ! //$/ $target .=...

mambosimple-sql.txt

Mambo Simpleboard Forum Component 1.0.3 Stable comsimpleboard Author: it's my, Scipio, xcedz Home page: http://www.antichat.ru Dork: inurl:"index.php?option=comsimpleboard" Exploit:...

Garys Cookbook 3.0 - id SQL Injection

Garys Cookbook 3.0 - id SQL Injection source: https://www.securityfocus.com/bid/27972/info Gary's Cookbook module for Joomla! and Mambo is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue...

Joomla! Mambo Component com_wines 1.0 - id SQL Injection

Joomla! Mambo Component comwines 1.0 - id SQL Injection source: https://www.securityfocus.com/bid/27975/info The 'comwines' component for Joomla! and Mambo is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query...