Prediction Football 2.51 - Cross-Site Request Forgery

Prediction Football 2.51 - Cross-Site Request Forgery Exploit Title: title Google Dork: if relevant intext:"Prediction football 2.51" Date: 08/08/2011 Author: Smith Falcon Software Link: http://www.predictionfootball.com/download/download.html Version: 2.51 Tested on: Linux First create a usernam...

PHPaa CMS 4. 0 injection 0day-vulnerability warning-the black bar safety net

One is called Philip the brother of the storm vulnerability. It storms a lot of Holes. Uh, I think PHPaa pretty safe. Uh, the big cattle do not see it could it? I like injection. Just inject this. Other own Baidu Bit. Vulnerability file: admin/page.add.php admin/ message.action.php...

vBulletin 4.0.x 4.1.3 - messagegroupid SQL Injection

vBulletin 4.0.x 4.1.3 - messagegroupid SQL Injection Exploit Title: Vbulletin 4.0.x = 4.1.3 messagegroupid SQL injection Vulnerability 0-day Google Dork: intitle: powered by Vbulletin 4 Date: 20/07/2011 Author: FB1H2S Software Link: urlhttp://www.vbulletin.com//url Version: 4.x.x Tested on:...

Hotmail UserID Detection

Binary data 5963.prm...

TinyBB 1.4 - Blind SQL Injection Full Path Disclosure

TinyBB 1.4 - Blind SQL Injection Full Path Disclosure Exploit Title : TinyBB 1.4 Sql Injection + Path Disclosure Google Dork : "Proudly powered by TinyBB" Date : 7 April 2011 Author : swami Contact : flaviodotbaldassiatgmaildotcom Version : 1.4 Tested on : Centos 5.5 with magicquotesgpc off Thank...

[DSECRG-11-008] Open Edge RDBMS - Multiple architecture vulnerabilities (UNPATCHED)

Digital Security Research Group DSecRG Advisory DSECRG-11-008 Application: Progress OpenEdge Enterprise RDBMS Versions Affected: 10.2A and maybe others Vendor URL: http://web.progress.com Bug: Authentication bypass, UserID enumerate Exploits: YES Reported: 13.10.2009 Vendor response: 13.10.2009...

CVE-2010-3738

The Security component in IBM DB2 UDB 9.5 before FP6a logs AUDIT events by using a USERID and an AUTHID value corresponding to the instance owner, instead of a USERID and an AUTHID value corresponding to the logged-in user account, which makes it easier for remote authenticated users to execute...

JE CMS 1.0.0 universal password to log in with the injection vulnerability-vulnerability warning-the black bar safety net

JE CMS = 1.0.0 program appeared two vulnerabilities, one in the login authentication can be using Universal password bypass. Another isSQL injectionvulnerabilities. 1. Bypass Authentication by SQL Injection Vulnerability //login validation vulnerability in administrator\login.php page, lines...

JE CMS 1.0.0 - Authentication Bypass

''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | userLogin; userLogin function is in administrator\library\functions.php. in lines 129-139: if $userName == '' || $password == '' $errorMessage = JEMISMATCHUSERNAMEPASSWORD; else // check the database and see if the...

JE CMS 1.0.0 - Authentication Bypass

JE CMS 1.0.0 - Authentication Bypass ''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | userLogin; userLogin function is in administrator\library\functions.php. in lines 129-139: if $userName == '' || $password == '' $errorMessage = JEMISMATCHUSERNAMEPASSWORD; else...

2daybiz Freelance Script SQL Injection

Demo for the Exploit-DB Admin : http://www.2daybiz.com/products/freelancer/ ----------------------------Information------------------------------------------------ +Name : 2daybiz Freelance Script = SQL Injection Vulnerability Exploit +Autor : Easy Laster +ICQ : 11-051-551 +Date : 27.06.2010...

2DayBiz Photo Sharing Script - SQL Injection (2)

2DayBiz Photo Sharing Script - SQL Injection 2 ----------------------------Information------------------------------------------------ +Autor : Easy Laster +ICQ : 11-051-551 +Info : http://www.2daybiz.com/photosharingscript.html +Discovered by Easy Laster 4004-security-project.com +Security Group...

2DayBiz Video Community Portal - 'user-profile.php' SQL Injection

$------------------------------------------------------------------------------------------------------------------- $ 2daybiz Video Community portal"user-profile.php" SQL injection $ Author : Sangteamtham $ Home : Hcegroup.net $ Download :http://www.2daybiz.com/videocommunityportalscript.html $...

phpscripte24 Live Shopping Multi Portal System SQL Injection

----------------------------Information--------------------------------------------------- +Name : phpscripte24 Live Shopping Multi Portal System SQL Injection Vulnerability Exploit +Autor : Easy Laster +ICQ : 11-051-551 +Date : 09.05.2010 +Script : phpscript24 Live Shopping Multi Portal System...

CVE-2009-4848

Multiple cross-site scripting XSS vulnerabilities in ToutVirtual VirtualIQ Pro 3.2 build 7882 and 3.5 build 8691 allow remote attackers to inject arbitrary web script or HTML via the 1 userId parameter to tvserver/server/user/setPermissions.jsp, 2 deptName parameter to...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in ToutVirtual VirtualIQ Pro 3.2 build 7882 and 3.5 build 8691 allow remote attackers to inject arbitrary web script or HTML via the 1 userId parameter to tvserver/server/user/setPermissions.jsp, 2 deptName parameter to...

CVE-2010-1338

SQL injection vulnerability in tsother.php in the Teamsite Hack plugin 3.0 and earlier for WoltLab Burning Board allows remote attackers to execute arbitrary SQL commands via the userid parameter in a modboard action...

Easy-Clanpage <= v2.1 SQL Injection Exploit

Exploit for multiple platform in category web applications =========================================== Easy-Clanpage 2.1 http://www.easy-clanpage.de /?section=downloads&action=viewdl&id=16 +Price : for free +Language : PHP +Discovered by Easy Laster...

Easy-Clanpage 2.1 - SQL Injection

Easy-Clanpage 2.1 - SQL Injection /----------------------------Information------------------------------------------------ +Name : Easy-Clanpage 2.1 http://www.easy-clanpage.de /?section=downloads&action=viewdl&id=16 +Price : for free +Language : PHP +Discovered by Easy Laster +Security Group...

Flirt Matching Sms System - SQL Injection

----------------------------Information------------------------------------------------ +Name : Flirt Matching SMS System = SQL Injection Exploit +Autor : Easy Laster +Date : 26.03.2010 +Script : Flirt Matching SMS System +Download : ------------------ +Demo : http://phpspezial.de/singel/ +Price ...