Alstrasoft Forum Pay Per Post Exchange 2.0 - SQL Injection

--==+================================================================================+==-- --==+ Forum Pay Per Post SQL Injection Vulnerbilitys +==-- --==+================================================================================+==-- AUTHOR: t0pP8uZz & xprog SITE:...

Ace Image Hosting Script (id) Remote SQL Injection Vulnerability

No description provided by source. --==+================================================================================+==-- --==+ Ace Image Hosting Script SQL Injection Vulnerbility +==-- --==+================================================================================+==-- AUTHOR: t0pP8uZz...

Ace Image Hosting Script - id SQL Injection

Ace Image Hosting Script - id SQL Injection --==+================================================================================+==-- --==+ Ace Image Hosting Script SQL Injection Vulnerbility +==-- --==+================================================================================+==-- AUTHOR:...

Ace Image Hosting Script (id) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================ Ace Image Hosting Script id Remote SQL Injection Vulnerability ================================================================...

CVE-2007-5833

Multiple cross-site scripting XSS vulnerabilities in BosDev BosMarket Business Directory System allow remote authenticated users to inject arbitrary web script or HTML via 1 user info account details or 2 a post...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in BosDev BosMarket Business Directory System allow remote authenticated users to inject arbitrary web script or HTML via 1 user info account details or 2 a post...

CVE-2007-5833

Multiple cross-site scripting XSS vulnerabilities in BosDev BosMarket Business Directory System allow remote authenticated users to inject arbitrary web script or HTML via 1 user info account details or 2 a post...

Improper access control

eFileMan 7.1.0.87-88 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain unspecified user information via a direct request for cgi-bin/efileman/efilemanconfig.pm...

mlf17-sql.txt

!/usr/bin/perl -w My Little Forum = 1.7 SQL Injection Exploit Discovered by: Silentz Payload: Admin Username & Hash Retrieval Website: http://www.w4ck1ng.com Vulnerable Code user.php: if isset$GET'id' $id = $GET'id'; switch $action case "get userdata": if empty$id $id = $userid; else $result =...

Authentication flaw

siteadmin/useredit.php in AlstraSoft Video Share Enterprise does not check authentication, which allows remote attackers to obtain or modify user information via a direct request...

CVE-2005-3552

Multiple cross-site scripting XSS vulnerabilities in PHPKIT 1.6.1 R2 and earlier allow remote attackers to inject arbitrary web script or HTML via multiple vectors in 1 login/profile.php, 2 login/userinfo.php, 3 admin/admin.php, 4 imcenter.php, and the 5 referer statistics, the 6 HTML title eleme...

PhpMyFAQ 1.5.1 multiple vulnerabilities

2.31 23/09/2005 PhpMyFaq 1.5.1 SQL injection / board takeover / user info disclosure / path disclosure remote code / commands execution software: site: http://www.phpmyfaq.de/ description: "phpMyFAQ is a multilingual, completely database-driven FAQ-system. It supports various databases to store a...

CVE-2002-1664

Yahoo! Messenger before February 2002 allows remote attackers to add arbitrary users to another user's buddy list and possibly obtain sensitive information...

[SCAN Associates Security Advisory] xoops 2.0.9.2 and below weak file extension validation

Summary: xoops 2.0.9.2 and below weak file extension validation Description =========== XOOPS is an extensible, OO Object Oriented, easy to use dynamic web content management system written in PHP. XOOPS is the ideal tool for developing small to large dynamic community websites, intra company...

CVE-1999-1280

In CVE-1999-1280, Hummingbird Exceed 6.0.1.0 includes a development/testing DLL that logs user names and passwords in cleartext in the test.log file. The issue affects the DLL usage within Exceed; the precise vulnerable surface is the development/testing DLL component. Documented impact indicates...