670 matches found
Sql injection
SQL injection vulnerability in reply.php in VBZooM 1.12 allows remote attackers to execute arbitrary SQL commands via the UserID parameter to sub-join.php. NOTE: this may be the same as CVE-2006-3691.4...
vbzoom-sql.txt
Discovered By: Hasadya Raed Contact : [email protected] Israel --------------------------- Script : VBZooM V1.12 VBZooM V1.12 "reply.php" SQL Injection Dork : POWERED BY VBZooM V1.12 --------------------------- B.File : reply.php --------------------------- Exploit :...
IBM DB2 < 9 Fix Pack 2 Multiple Vulnerabilities
According to its version, the installation of IBM DB2 running on the remote host allows unsafe access to several setuid-root binaries. A local attacker can exploit this to crash the affected database server or possibly even gain root-level access. In addition, the fenced userid may be able to...
Woltlab Burning Board <= 1.0.2, 2.3.6 search.php SQL Injection Exploit 3
No description provided by source. !/usr/bin/perl use LWP::UserAgent; use HTTP::Response; $| = 1; print " Woltlab Burning Board 2.3.6 = / Lite Exploit Coded by 666 http://blueshisha.mutebox.net Bug by trew \n"; if$ARGV 0 print "x Usage: wbbsploit.pl Target Userid Searchstring\n"; exit; print "...
IBM DB2 < 8.1 Fix Pack 14 Multiple Vulnerabilities
According to its version, the installation of IBM DB2 running on the remote host may crash when processing specially crafted SQLJRA packets because it attempts to dereference a NULL pointer in the sqledb2raasrecvrequest function. A remote attacker can send such packets without authentication to...
Online Event Registration 2.0 - save_profile.asp Pass Change
Online Event Registration 2.0 - saveprofile.asp Pass Change User Name Email Phone Fax Password = ID Next Click "Profile" ajann,Turkey ... Im Not Hacker! -- milw0rm.com 2006-11-13...
CVE-2006-4634
Cross-site scripting XSS vulnerability in index.php in VBZooM allows remote attackers to inject arbitrary web script or HTML via the UserID parameter, a different vector than CVE-2006-1133 and CVE-2005-2441...
XXS in Powered by vbzoom
vbzoom ==== index.php info: file:index.php thank to www.lezr.com/vb google ====== powered by vbzoom inurl:index.php?UserID= Exp: http://traget/path/index.php?UserID="scriptalert1;/script =================================== by Crackman...
publically available usernames are a security risk
The login username of users is revealed all over the place in URLs that link to user profile, or user's list of assigned open bugs etc. This seems to be a big security risk, because you have given away half of the user identification to strangers. Anybody can look up a user in the issue tracker a...
publically available usernames are a security risk
The login username of users is revealed all over the place in URLs that link to user profile, or user's list of assigned open bugs etc. This seems to be a big security risk, because you have given away half of the user identification to strangers. Anybody can look up a user in the issue tracker a...
publically available usernames are a security risk
The login username of users is revealed all over the place in URLs that link to user profile, or user's list of assigned open bugs etc. This seems to be a big security risk, because you have given away half of the user identification to strangers. Anybody can look up a user in the issue tracker a...
CVE-2006-3971
Cross-site scripting XSS vulnerability in visitor/livesupport/chat.php in Scott Weedon Ajax Chat, possibly 0.1, allows remote attackers to inject arbitrary web script or HTML via the userid parameter...
CVE-2006-3239
SQL injection vulnerability in message.php in VBZooM 1.11 and earlier allows remote attackers to execute arbitrary SQL commands via the UserID parameter...
CVE-2006-3239
SQL injection vulnerability in message.php in VBZooM 1.11 and earlier allows remote attackers to execute arbitrary SQL commands via the UserID parameter...
Scout Portal Toolkit 1.4.0 - forumid SQL Injection
Scout Portal Toolkit 1.4.0 - forumid SQL Injection !/usr/bin/perl =============================================================== Scout Portal Toolkit 1.4.0 Remote SQL injection Exploit Coded By Simo64 Moroccan Security Research Team Specials thx to :Greetz : CiM-Team - CrAsHoVeRrIdE - dabdoub -...
CVE-2006-3218
SQL injection vulnerability in profile.php in Woltlab Burning Board WBB 2.1.6 allows remote attackers to execute arbitrary SQL commands via the userid parameter...
Sql injection
SQL injection vulnerability in find.php in YapBB 1.2 Beta2 and earlier allows remote attackers to execute arbitrary SQL commands via the userID parameter...
CVE-2006-2486
SQL injection vulnerability in find.php in YapBB 1.2 Beta2 and earlier allows remote attackers to execute arbitrary SQL commands via the userID parameter...