PT-2012-5597

Name of the Vulnerable Software and Affected Versions IBM Lotus Notes Traveler versions prior to 8.5.3.2 Description The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via the userId or address...

CVE-2012-4825: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in servlet/traveler/ILNT.mobileconfig in IBM Lotus Notes Traveler before 8.5.3.2 allow remote attackers to inject arbitrary web script or HTML via the 1 userId or 2 address parameter in a getClientConfigFile action...

PT-2012-5286

Name of the Vulnerable Software and Affected Versions MYRE Real Estate Software version 2012 Q2 Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via the link idd parameter to "1 mobile/listings.php" or the userid parameter to "1...

CVE-2012-4258: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in MYRE Real Estate Software 2012 Q2 allow remote attackers to execute arbitrary SQL commands via the 1 linkidd parameter to 1mobile/listings.php or 2 userid parameter to 1mobile/agentprofile.php...

PT-2012-3897

Name of the Vulnerable Software and Affected Versions PHP Gift Registry version 1.5.5 Description The issue allows remote authenticated users to execute arbitrary SQL commands. This is achieved via the userid parameter in an edit action in the users.php file. Recommendations For PHP Gift Registry...

CVE-2012-2236: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in users.php in PHP Gift Registry 1.5.5 allows remote authenticated users to execute arbitrary SQL commands via the userid parameter in an edit action...

HP Data Protector LogClientInstallation Method Userid Field SQL Execution

The HP Data Protector DPNECentral web service listening on this port contains a SQL injection vulnerability because it fails to properly sanitize user-supplied input to the userid field of its LogClientInstallation method before using it in a database query. This may allow an attacker to read and...

HP Data Protector Notebook Extension Policy Server LogClientInstallation Remote SQL Injection Vulnerabilty

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP Data Protector Notebook Extension. Authentication is not required to exploit this vulnerability. The flaw exists within the dpnepolicyservice component which exposes a DPNECentral Web Service on...

ECShop 2.7.2 API 盲注漏洞

简要描述： 该漏洞已经过本人测试存在。在服务器关闭魔法引号的情况下可以盲注，不受ECShop内核过滤影响。这次不坑爹了 问题文件在/api/client/api.php 利用方法为POST 详细说明： /api/client/api.php 第7行 dispatch$POST; /api/client/includes/libapi.php 6 -10 行 $funcarr = array'GetDomain', 'UserLogin', 'AddCategory', 'AddBrand', 'AddGoods', 'GetCategory', 'GetBrand', 'GetGoods...

CA Total Defense Suite reGenerateReports Stored Procedure SQL Injection

Exploit for cgi platform in category web applications $Id: catotaldefenseregeneratereports.rb 13810 2011-10-02 17:03:23Z swtornio $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more...

Prediction Football 2.51 - Cross-Site Request Forgery

Prediction Football 2.51 - Cross-Site Request Forgery Exploit Title: title Google Dork: if relevant intext:"Prediction football 2.51" Date: 08/08/2011 Author: Smith Falcon Software Link: http://www.predictionfootball.com/download/download.html Version: 2.51 Tested on: Linux First create a usernam...

PHPaa CMS 4. 0 injection 0day-vulnerability warning-the black bar safety net

One is called Philip the brother of the storm vulnerability. It storms a lot of Holes. Uh, I think PHPaa pretty safe. Uh, the big cattle do not see it could it? I like injection. Just inject this. Other own Baidu Bit. Vulnerability file: admin/page.add.php admin/ message.action.php...

vBulletin 4.0.x 4.1.3 - messagegroupid SQL Injection

vBulletin 4.0.x 4.1.3 - messagegroupid SQL Injection Exploit Title: Vbulletin 4.0.x = 4.1.3 messagegroupid SQL injection Vulnerability 0-day Google Dork: intitle: powered by Vbulletin 4 Date: 20/07/2011 Author: FB1H2S Software Link: urlhttp://www.vbulletin.com//url Version: 4.x.x Tested on:...

Hotmail UserID Detection

Binary data 5963.prm...

PT-2011-1361

Name of the Vulnerable Software and Affected Versions MediaCAST versions 8 and earlier Description The issue allows remote attackers to discover usernames and cleartext passwords by reading the error messages returned for requests that use the UserID parameter to the "authenticate ad setup...

CVE-2010-0216: Undefined Security Weakness

authenticateadsetupfinished.cfm in MediaCAST 8 and earlier allows remote attackers to discover usernames and cleartext passwords by reading the error messages returned for requests that use the UserID parameter...

TinyBB 1.4 - Blind SQL Injection Full Path Disclosure

TinyBB 1.4 - Blind SQL Injection Full Path Disclosure Exploit Title : TinyBB 1.4 Sql Injection + Path Disclosure Google Dork : "Proudly powered by TinyBB" Date : 7 April 2011 Author : swami Contact : flaviodotbaldassiatgmaildotcom Version : 1.4 Tested on : Centos 5.5 with magicquotesgpc off Thank...

CVE-2011-0887: Undefined Security Weakness

The web management portal on the SMC SMCD3G-CCR aka Comcast Business Gateway with firmware before 1.4.0.49.2 uses predictable session IDs based on time values, which makes it easier for remote attackers to hijack sessions via a brute-force attack on the userid cookie...

[DSECRG-11-008] Open Edge RDBMS - Multiple architecture vulnerabilities (UNPATCHED)

Digital Security Research Group DSecRG Advisory DSECRG-11-008 Application: Progress OpenEdge Enterprise RDBMS Versions Affected: 10.2A and maybe others Vendor URL: http://web.progress.com Bug: Authentication bypass, UserID enumerate Exploits: YES Reported: 13.10.2009 Vendor response: 13.10.2009...

PT-2010-5476

Name of the Vulnerable Software and Affected Versions DynPG CMS version 4.2.0 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the giveRights UserId parameter in the rights.php file. Recommendations For DynPG CMS version 4.2.0, consider...