V-SpacePal SQL Injection Vulnerability

Exploit for unknown platform in category web applications ====================================== V-SpacePal SQL Injection Vulnerability ====================================== Tybe:Auth Bypass Remote SQL Injection Vulnerability ? Vendor: www.datachecknh.com ? ? Software: V-SpacePal ? Price $29.95...

LinkPal v1.0 SQL Injection Vulnerability

Exploit for unknown platform in category web applications ======================================== LinkPal v1.0 SQL Injection Vulnerability ======================================== Tybe: Auth Bypass Remote SQL Injection Vulnerability Vendor:www.datachecknh.com ? ? Software:LinkPal v1.0 ? Price...

Microsoft Internet Explorer PDF Information Disclosure Vulnerability (Nov 2009)

Internet Explorer is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Amiro.CMS <= 5.4.0.0 folder disclosure

No description provided by source. ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ ONSEC-09-005 Amiro.CMS root folder disclosure Objective: Amiro CMS = 5.4.0.0 Type: Disclosure of ways Threat: Medium Date Discovered: 01.07.2009 Date of...

Amiro.CMS 5.4.0.0 - Path Disclosure

Amiro.CMS 5.4.0.0 - Path Disclosure ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ ONSEC-09-005 Amiro.CMS root folder disclosure Objective: Amiro CMS = 5.4.0.0 Type: Disclosure of ways Threat: Medium Date Discovered: 01.07.2009 Date of...

Amiro.CMS 5.4.0.0 - Path Disclosure

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ ONSEC-09-005 Amiro.CMS root folder disclosure Objective: Amiro CMS = 5.4.0.0 Type: Disclosure of ways Threat: Medium Date Discovered: 01.07.2009 Date of notification Developer: 01.07.2009...

Amiro.CMS <= 5.4.0.0 xss

Exploit for unknown platform in category web applications ======================== Amiro.CMS = 5.4.0.0 xss ======================== ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ ONSEC-09-004 Amiro.CMS Multiple XSS Objective: Amiro = 5.4.0...

Amiro.CMS <= 5.4.0.0 folder disclosure

Exploit for unknown platform in category web applications ====================================== Amiro.CMS = 5.4.0.0 folder disclosure ====================================== ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ ONSEC-09-005...

Accommodation Hotel Booking Portal - hotel_id SQL Injection

Accommodation Hotel Booking Portal - hotelid SQL Injection Viva IslaM Viva IslaM Remote SQL Injection Vulnerability hotel.php hotelid Accommodation Hotel Booking Portal http://www.tourismscripts.com AuTh0r : Mr.SQL H0ME : WwW.55a.NeT Email : [email protected] -: ExploiteS :-...

Mandriva Linux Security Advisory : java-1.6.0-openjdk (MDVSA-2009:209)

Multiple Java OpenJDK security vulnerabilities has been identified and fixed : The design of the W3C XML Signature Syntax and Processing XMLDsig recommendation specifies an HMAC truncation length HMACOutputLength but does not require a minimum for its length, which allows attackers to spoof...

SMF Mod Member Awards 1.0.2 Blind SQL Injection Exploit

No description provided by source. ------------------------------------------------------------------------- SMF Component Member Awards Blind SQL-injection Vulnerability ------------------------------------------------------------------------- author: eLwaux thanks: mailbrush, antichat.ru,...

VOIP Dashboard SQL Injection

--------------------------------------------------------------------------------------------- + VOIP Dashboard Auth BypassSQL Injection vulnerability + Found By: Rohit Bansal SCHAP Security http://schap.org + Date: 02-06-2009...

CVE-2009-1228

Cross-site scripting XSS vulnerability in register.php in Arcadwy Arcade Script CMS allows remote attackers to inject arbitrary web script or HTML via the username field username parameter...

CVE-2008-6096

Cross-site scripting XSS vulnerability in Juniper NetScreen ScreenOS before 5.4r10, 6.0r6, and 6.1r2 allows remote attackers to inject arbitrary web script or HTML via the user name parameter to the 1 web interface login page or the 2 telnet login page...

Java Web Start exposes username and the pathname of the JWS cache

Unspecified vulnerability in Java Web Start JWS and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier, and JDK and JRE 5.0 Update 16 and earlier, allows untrusted JWS applications to obtain the pathname of the JWS cache and the application username via unknown vectors, aka CR 6727071...

Vlog System 1.1 - SQL Injection

Viva IslaM Viva IslaM Remote SQL injection Vulnerability Vlog System V1.1 blog.php user AuTh0r : Mr.SQL H0ME : WwW.PaL-HaCkEr.CoM && WwW.AtsDp.CoM/f Email : [email protected] SYRIAN Arab HACkErS -: Exploite :-...

cmd to view the current logged in user-bug warning-the black bar safety net

cmd to view the current login user The terminal,naturally you can use quser this command. But in others, such as Professional Edition 2k under how to view the online user? C:\Documents and Settings\Administratornet config workstation Computer name \\RICH The full computer name rich User name...

AJ Auction Pro Platinum Skin - &#039;item_id&#039; SQL Injection

AJ Auction Pro Platinum Skin 2 detail.php itemid Remote SQL Injection Vulnerability POC : /detail.php?itemid=-1+UNION+SELECT+1,2,3,4,concatusername,0x3a,password, 6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35...

CVE-2008-4168

Cross-site scripting XSS vulnerability in verifylogin.jsp in Pro2col Stingray FTS allows remote attackers to inject arbitrary web script or HTML via the formusername parameter aka user name field...

CVE-2008-4168

Cross-site scripting XSS vulnerability in verifylogin.jsp in Pro2col Stingray FTS allows remote attackers to inject arbitrary web script or HTML via the formusername parameter aka user name field...