434 matches found
CVE-2006-3221: Undefined Security Weakness
SQL injection vulnerability in index.php in DataLife Engine 4.1 and earlier allows remote attackers to execute arbitrary SQL commands via double-encoded values in the user parameter in a userinfo subaction...
DataLife Engine 4.1 - SQL Injection
!/usr/bin/perl DataLife Engine sql injection exploit by RST/GHC coded by 1dt.w0lf RST/GHC http://rst.void.ru http://ghc.ru 18.06.06 use LWP::UserAgent; use Getopt::Std; getopts'u:n:p:'; $url = $optu; $name = $optn; $prefix = $optp || 'dle'; if!$url || !$name $snum = 1; $|++; $n = 0; print "\r\n";...
DataLife Engine <= 4.1 Remote SQL Injection Exploit (perl)
No description provided by source. !/usr/bin/perl DataLife Engine sql injection exploit by RST/GHC coded by 1dt.w0lf RST/GHC http://rst.void.ru http://ghc.ru 18.06.06 use LWP::UserAgent; use Getopt::Std; getopts'u:n:p:'; $url = $optu; $name = $optn; $prefix = $optp || 'dle'; if!$url || !$name $sn...
DataLife Engine <= 4.1 Remote SQL Injection Exploit (php)
No description provided by source. ?php errorreporting EERROR; iniset"maxexecutiontime",0; echo ' +========================================+ | RST/GHC Datalife SQL injection exploit | +========================================+ Lite Version for DLE =4.1 '; if $argc 2 print " Usage: " . $argv0 . "...
CVE-2006-2816: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in index.php in coolphp magazine allow remote attackers to inject arbitrary web script or HTML via the 1 op and 2 nick parameters, and possibly the 3 0000, 4 userinfo, 5 compder, 6 encuestas, and 7 pagina parameters. NOTE: it is not clear whether...
Sql-injection in RalfChat
Advisory: Sql-injection in RalfChat Home Page: http://www.ralfchat.de Уязвимость/Vulnerability: Sql-injection, Cross Site Scripting Уязвимый скрипт/Vulnerable script: chat2.cgi http://chat.shaonline.ru/cgi-bin/chat2.cgi?action=userinfo&infoabout=Fear'...
CVE-2004-2597: Undefined Security Weakness
Quake II server before R1Q2, as used in multiple products, allows remote attackers to bypass IP-based access control rules via a userinfo string that already contains an "ip" key/value pair but is also long enough to cause a new key/value pair to be truncated, which interferes with the server's...
CVE-2004-2456
CVE-2004-2456 is a SQL injection in miniBB (index.php, userinfo action) affecting miniBB 1.7f and earlier. The vulnerability arises from unsanitized input in the user parameter of index.php, enabling remote attackers to execute arbitrary SQL commands. The connected Nessus/NASL entries reference a...
CVE-2004-2456: Undefined Security Weakness
SQL injection vulnerability in index.php in miniBB 1.7f and earlier allows remote attackers to execute arbitrary SQL commands via the user parameter in a userinfo action...
Claroline E-Learning 1.6 - Remote Hash SQL Injection (2)
!/usr/bin/perl Claroline E-Learning Application Remote SQL Exploit K-C0d3r This tools and to consider only himself to educational purpose Bug discovered by Greetz to mZ, 2b TUBE, off, rikky, str0ke, x0n3-h4ck, MWC K-C0d3r use IO::Socket; sub Usage print STDERR "Usage: KCcol-xpl.pl \n"; print STDE...
CVE-2005-1375
Multiple SQL injection vulnerabilities in Claroline 1.5.3 through 1.6 Release Candidate 1, and possibly Dokeos, allow remote attackers to execute arbitrary SQL commands via 1 learningPath.php, 2 learningPathAdmin.php, 3 learnPathdetails.php, 4 modulespool.php, 5 module.php, 6 uInfo parameter in...
CVE-2004-2456
SQL injection vulnerability in index.php in miniBB 1.7f and earlier allows remote attackers to execute arbitrary SQL commands via the user parameter in a userinfo action...
CVE-2004-2597
Quake II server before R1Q2, as used in multiple products, allows remote attackers to bypass IP-based access control rules via a userinfo string that already contains an "ip" key/value pair but is also long enough to cause a new key/value pair to be truncated, which interferes with the server's...
