Lucene search
+L

263 matches found

exploitpack
exploitpack
added 2010/07/22 12:00 a.m.30 views

Joomla! Component com_jomtube - user_id Blind SQL Injection

Joomla! Component comjomtube - userid Blind SQL Injection =============================================================================== Joomla Component comjomtube userid Blind SQL Injection / SQL Injection =============================================================================== Author :...

8.6AI score
SaveExploits0
myhack58
myhack58
added 2010/07/16 12:00 a.m.29 views

ECMall 2.2 app/groupbuy.app.php delay injection vulnerability-vulnerability warning-the black bar safety net

ECMall community e-Commerce systemreferred to as ECMallis Shanghai commercial school network Technology Co., Ltd. following the ECShop after the launch of yet another e-Commerce sister product app\groupbuy. app. php:2 6: function index $id = empty$GET'id' ? 0 : $GET'id'; //id not filtered if !$ i...

0.3AI score
SaveExploits0
Exploit DB
Exploit DB
added 2010/03/23 12:00 a.m.25 views

Uiga Business Portal - 'index.php' SQL Injection

----------------------------Information------------------------------------------------ +Name : Uiga Business Portal = index.php SQL Injection Vulnerability +Autor : Easy Laster +Date : 23.03.2010 +Script : Uiga Business Portal +Download :...

5.8AI score
SaveExploits0
Prion
Prion
added 2010/03/05 6:30 p.m.22 views

Sql injection

SQL injection vulnerability in profile.php in Mole Group Adult Portal Script allows remote attackers to execute arbitrary SQL commands via the userid parameter...

7.5CVSS9.1AI score0.01011EPSS
SaveExploits1References3
Prion
Prion
added 2010/03/05 6:30 p.m.20 views

Code injection

admin/admin.php in Mole Group Sky Hunter Airline Ticket Sale Script and Bus Ticket Script allows remote attackers to change an arbitrary password via a modified userid field...

7.5CVSS7.5AI score0.0242EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2010/03/05 6:00 p.m.35 views

CVE-2009-4674

admin/admin.php in Mole Group Sky Hunter Airline Ticket Sale Script and Bus Ticket Script allows remote attackers to change an arbitrary password via a modified userid field...

6.9AI score0.0242EPSS
SaveExploits1References3
Exploit DB
Exploit DB
added 2010/02/19 12:00 a.m.41 views

PHPKit 1.6.1 - 'mailer.php' SQL Injection

Phpkit 1.6.1 SQL Injection member.php | | ||| | | | | | -| .'| || | | | -| | | -| | || ||,|||| ||||| ||| ||||| Script: Phpkit 1.6.1 SQL Injection member.php Vulnerabilities SQL Injection Language: PHP Download: this script is for free Founder: ea$y laster Peace to -tmh- ,0qwl ,Crypter ,Dr.ChAoS...

5.8AI score
SaveExploits0
zdt
zdt
added 2010/02/19 12:00 a.m.25 views

Phpkit 1.6.1 (member.php) Sql Injection Vulnerability

Exploit for unknown platform in category web applications ===================================================== Phpkit 1.6.1 member.php Sql Injection Vulnerability ===================================================== Phpkit 1.6.1 SQL Injection member.php | | ||| | | | | | -| .'| || | | | -| | | ...

7.1AI score
SaveExploits0
NVD
NVD
added 2010/01/12 5:30 p.m.41 views

CVE-2009-4597

Multiple SQL injection vulnerabilities in index.php in PHP Inventory 1.2 allow 1 remote authenticated users to execute arbitrary SQL commands via the userid parameter in a users details action, and allow remote attackers to execute arbitrary SQL commands via the 2 user username and 3 pass passwor...

7.5CVSS8.1AI score0.00987EPSS
SaveExploits3References4
CVE
CVE
added 2010/01/12 5:00 p.m.60 views

CVE-2009-4597

The CVE-2009-4597 entry covers SQL injection flaws in PHP Inventory (notably versions around 1.2/1.3.x) in index.php. The vulnerabilities allow SQL commands to be injected through user_id in a user details action, and through user/password fields, enabling unauthorized data access via poorly sani...

7.5CVSS8.3AI score0.00987EPSS
SaveExploits3References4Affected Software1
exploitpack
exploitpack
added 2009/12/10 12:00 a.m.35 views

PHP Inventory 1.2 - Authentication Bypass

PHP Inventory 1.2 - Authentication Bypass PHP Inventory v1.2 Remote Auth Bypass SQL Injection Vulnerabiity Found By: mrme Download: http://www.phpwares.com/content/php-inventory Tested On: Windows Vista Note: For educational purposes only First of all lets login to admin with:...

0.4AI score
SaveExploits0
Prion
Prion
added 2009/11/18 11:30 p.m.27 views

Sql injection

Multiple SQL injection vulnerabilities in ITechBids 8.0 allow remote attackers to execute arbitrary SQL commands via the 1 userid parameter to feedback.php, 2 cateid parameter to category.php, 3 id parameter to news.php, and 4 productid parameter to itechd.php. NOTE: the sellersothersitem.php,...

7.5CVSS8.9AI score0.01196EPSS
SaveExploits2References2Affected Software1
Prion
Prion
added 2009/10/16 4:30 p.m.17 views

Sql injection

Multiple SQL injection vulnerabilities in Ebay Clone 2009 allow remote attackers to execute arbitrary SQL commands via the 1 userid parameter to feedback.php; and the itemid parameter to 2 viewfullsize.php, 3 classifidead.php, and 4 crosspromoteitems.php...

7.5CVSS9.3AI score0.00999EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
added 2009/10/16 4:00 p.m.38 views

CVE-2009-3712

Multiple SQL injection vulnerabilities in Ebay Clone 2009 allow remote attackers to execute arbitrary SQL commands via the 1 userid parameter to feedback.php; and the itemid parameter to 2 viewfullsize.php, 3 classifidead.php, and 4 crosspromoteitems.php...

8.5AI score0.00999EPSS
SaveExploits1References3
NVD
NVD
added 2009/09/24 4:30 p.m.19 views

CVE-2009-3358

SQL injection vulnerability in profile.php in Tourism Scripts Adult Portal escort listing allows remote attackers to execute arbitrary SQL commands via the userid parameter...

7.5CVSS8.4AI score0.00936EPSS
SaveExploits2References2
Prion
Prion
added 2009/09/24 4:30 p.m.17 views

Sql injection

SQL injection vulnerability in profile.php in Tourism Scripts Adult Portal escort listing allows remote attackers to execute arbitrary SQL commands via the userid parameter...

7.5CVSS9.1AI score0.00936EPSS
SaveExploits2References2
Cvelist
Cvelist
added 2009/09/24 4:00 p.m.32 views

CVE-2009-3358

SQL injection vulnerability in profile.php in Tourism Scripts Adult Portal escort listing allows remote attackers to execute arbitrary SQL commands via the userid parameter...

8.4AI score0.00936EPSS
SaveExploits2References2
Packet Storm
Packet Storm
added 2009/09/21 12:00 a.m.31 views

Joomla MyTube SQL Injection

!/usr/bin/perl -w --------------------------------------------------------------------------------- joomla component commytube userid Blind SQL Injection Vulnerability --------------------------------------------------------------------------------- Author : Chip D3 Bi0s Group : LatiHackTeam Emai...

0.1AI score
SaveExploits0
zdt
zdt
added 2009/09/21 12:00 a.m.58 views

Joomla com_mytube (user_id) Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ======================================================= Joomla commytube userid Blind SQL Injection Exploit ======================================================= !/usr/bin/perl -w...

7.1AI score
SaveExploits0
Exploit DB
Exploit DB
added 2009/09/21 12:00 a.m.51 views

Joomla! Component com_mytube (user_id) 1.0 Beta - Blind SQL Injection

!/usr/bin/perl -w --------------------------------------------------------------------------------- joomla component commytube userid Blind SQL Injection Vulnerability --------------------------------------------------------------------------------- Author : Chip D3 Bi0s Group : LatiHackTeam Emai...

7.5CVSS5.8AI score0.00987EPSS
SaveExploits2
Rows per page
Query Builder