Sniggabo CMS - article.php?id SQL Injection

Sniggabo CMS - article.php?id SQL Injection milw0rm.com 2009-06-11...

Sniggabo CMS (article.php id) Remote SQL Injection Exploit

No description provided by source. ?php printr' Sniggabo CMS - Remote SQL Injection Exploit Date: 11.06.2009 Vulnerability discovered by: LidlosesAuge Exploit coded by: LidlosesAuge Homepage: http://www.novusec.com Greetz to: -=Player=- , Suicide, enco, Palme, GPM, karamble, Free-Hack Admin Panel...

CVE-2009-1854

Million Dollar Text Links 1.0 allows remote attackers to bypass authentication and gain administrative access by setting the userid cookie to 1...

CVE-2009-1854

Million Dollar Text Links 1.0 allows remote attackers to bypass authentication and gain administrative access by setting the userid cookie to 1...

CVE-2009-1665

myaccount.php in Easy Scripts Answer and Question Script allows remote attackers to remove arbitrary user accounts via a modified userid parameter without specifying any additional fields...

CVE-2009-1665

CVE-2009-1665 affects myaccount.php in Easy Scripts Answer and Question Script. The issue allows remote attackers to remove arbitrary user accounts by modifying the userid parameter without supplying additional fields. This indicates an input manipulation vulnerability in the account-management l...

CVE-2008-6258

SQL injection vulnerability in users.asp in QuadComm Q-Shop 3.0, and possibly earlier, allows remote attackers to execute arbitrary SQL commands via the 1 UserID and 2 Pwd parameters. NOTE: this might be related to CVE-2004-2108...

SalesCart (Auth Bypass) SQL Injection Vulnerability

No description provided by source. ----C4TEAM.ORG---ByALBAYX----C4TEAM.ORG---- Author : ByALBAYX Website : WWW.C4TEAM.ORG Script :SalesCart Product Management Plugin Site :http://www.salescart.com Demo :http://www.salescart.com/scorderdemo/online/default.asp Details...

CVE-2009-0293

SQL injection vulnerability in profileview.php in Wazzum Dating Software, possibly 2.0, allows remote attackers to execute arbitrary SQL commands via the userid parameter...

Sql injection

SQL injection vulnerability in profileview.php in Wazzum Dating Software, possibly 2.0, allows remote attackers to execute arbitrary SQL commands via the userid parameter...

CVE-2009-0293

SQL injection vulnerability in profileview.php in Wazzum Dating Software, possibly 2.0, allows remote attackers to execute arbitrary SQL commands via the userid parameter...

CVE-2009-0293

CVE-2009-0293: SQL injection vulnerability in profile_view.php of Wazzum Dating Software (possibly v2.0) allows remote attackers to execute arbitrary SQL via the userid parameter. The available documents confirm the vulnerability and affected component but do not provide specifics on affected ver...

CVE-2008-5888

Multiple SQL injection vulnerabilities in Click&Rank allow remote attackers to execute arbitrary SQL commands via the id parameter to 1 hitcounter.asp, 2 userdelete.asp, and 3 userupdate.asp; 4 the userid parameter to adminlogin.asp aka the USERNAME field in admin.asp; and 5 the PassWord paramete...

SolarCMS 0.53.8 Remote Cookie Disclosure Exploit

?php errorreporting0; / --------------------------------------------------------- SolarCMS 0.53.8 Forum Remote Cookies Disclosure Exploit --------------------------------------------------------- by athos - stakerathotmaildotit download on http://cms.maury91.org/ works regardless PHP.ini settings...

Sql injection

SQL injection vulnerability in contactauthor.php in Article Publisher Pro 1.5 allows remote attackers to execute arbitrary SQL commands via the userid parameter...

Absolute Form Processor 4.0 - Insecure Cookie Handling

| | / | \ \ / / / | / | | | | \ | | | | \ V / | | | | | | | | | | | | | || | | | | | | | | | | | | | | || | / || | || \ | Author : Hakxer Home : Www.educ-up.com Type Gap : Insecure Cookie Handling script : Absolute Form Processor see script http://www.xigla.com/absolutefpnet/demo.htm Team : EgY...

WBB Plugin rGallery 1.09 (itemID) Blind SQL Injection Exploit

No description provided by source. import sys, urllib2, re print "\n " print " \'/ " print " -.- " print " -------------------oOO------OOo--------------------" print " | rGallery 1.09 +- Exploit by Five-Three-Nine |" print " | Using Blind SQL Injection in 'itemID' of rGallery |" print " | |" prin...

Galerie 3.2 - 'pic' WBB Lite Addon Blind SQL Injection

!/usr/bin/perl Galerie 3.2 galerie.php Remote "Blind" SQL Injection found by: J0hn.X3r exploit written by: J0hn.X3r and electron1x Date: 05.10.2008 Dork: "Galerie 3.2 © 2004 by progressive" Contact: J0hn.X3r + ICQ: 573813 + Mail: J0hn.X3ratgmail.com electron1x + Mail: electron1x at mail dot ru...

SG Real Estate Portal 2.0 - Blind SQL Injection

SG Real Estate Portal 2.0 - Blind SQL Injection 1 $url = $argv1; if $argc $t-1 $count = $i; $i = 30; for $j = 1; $j $count; $j++...

Atomic Photo Album 1.1.0pre4 - Blind SQL Injection

Atomic Photo Album 1.1.0pre4 - Blind SQL Injection php '.$argv0.' http://www.site.com/apa/album.php?apaalbumID=2 2 Live Demo : http://www.brzi.info/foto/album.php?apaalbumID=2 1 '; if $argc 1 $url = $argv1; if $argc 3 $userid = 1; else $userid = $argv2; $r = strlenfilegetcontents$url."+and+1=1--"...