E.Z. Poll 2 - Authentication Bypass

E.Z. Poll 2 - Authentication Bypass Description: E.Z. Poll = v.2 script Remote SQL injection Exploit discovered by t0fx aka xtof69 vendor : E.Z. vulnerable page : http://www.site.com/admin/login.asp exploit : Username : 'or' '=' Password : 'or' '=' Add, modify user : /admin/admin-users.asp...

E.Z. Poll v.2 (Auth Bypass) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================== E.Z. Poll v.2 Auth Bypass Remote SQL Injection Vulnerability ============================================================== Description: E.Z. Poll = v.2 script Remote SQL...

Active Business Directory v 2 Remote blind SQL Injection Vulnerability

No description provided by source. -----------------------------OffensiveTrack------------------------------ found by : OffensiveTrack Author : AlpHaNiX website : www.offensivetrack.org contact on mail & msn : [email protected] script : Active Business Directory v 2 €xploit :...

Active Web Helpdesk v 2 (CategoryID) Blind SQL Injection Vulnerability

No description provided by source. ! ! ! OOOO O OOOOOOOOO ! ! O O O O O ! ! O O O ! ! O OOOO OOOO OOOOOO OOOO OOO OO O OOOO OO OO OOOO ! ! O OOO OOO O O O O OO O O O O OO O O O ! ! O OO OO O O OOOOOO O O O O O O OOOOOO ! ! O O OOOO O O O O O O O O O O O...

activetest21-sql.txt

----------------------------بسم الله الرحمن الرحيم------------------------------ Tybe:questions.asp QuizID Blind SQL Injection Vulnerability Vendor:www.activewebsoftwares.com Software: Active Test v 2.1 author: я3d D3v!L Date: 28.11.2008 Home: www.ahacker.biz contact: N/A...

Active Price Comparison 4 - Authentication Bypass

Active Price Comparison 4 - Authentication Bypass ----------------------------بسم الله الرحمن الرحيم------------------------------ Tybe:Auth Bypass Remote SQL Injection Vulnerability Vendor:www.activewebsoftwares.com Software: Active Price Comparison v 4 author: я3d D3v!L Date...

iscribesmtp-format.txt

//Alfons Luja...

Active Test 2.1 (QuizID) Blind SQL Injection Vulnerability

Exploit for unknown platform in category web applications ========================================================== Active Test 2.1 QuizID Blind SQL Injection Vulnerability ========================================================== Tybe:questions.asp QuizID Blind SQL Injection Vulnerability...

Active Test 2.1 - Authentication Bypass

Active Test 2.1 - Authentication Bypass ----------------------------بسم الله الرحمن الرحيم------------------------------ Tybe:Auth Bypass Remote SQL Injection Vulnerability Vendor: www.activewebsoftwares.com Software: Active Test v 2.1 author: я3d D3v!L Date: 28.11.2008 Home:...

Active Test 2.1 (QuizID) Blind SQL Injection Vulnerability

No description provided by source. ----------------------------بسم الله الرحمن الرحيم------------------------------ Tybe:questions.asp QuizID Blind SQL Injection Vulnerability Vendor:www.activewebsoftwares.com Software: Active Test v 2.1 author: я3d D3v!L Date: 28.11.2008 Home...

ActiveVotes 2.2 - AccountID Blind SQL Injection

ActiveVotes 2.2 - AccountID Blind SQL Injection ----------------------------بسم الله الرحمن الرحيم------------------------------ Tybe:VoteHistory.asp AccountID Blind SQL Injection Vulnerability Vendor:www.activewebsoftwares.com Software: ActiveVotes v 2.2 author: я3d D3v!L Dat...

eWebquiz v 8 (Auth Bypass) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================= eWebquiz v 8 Auth Bypass Remote SQL Injection Vulnerability ============================================================= Tybe:Auth Bypass Remote SQL Injection Vulnerability...

Active Force Matrix 2 - Authentication Bypass

Active Force Matrix 2 - Authentication Bypass ----------------------------بسم الله الرحمن الرحيم------------------------------ Tybe:Auth Bypass Remote SQL Injection Vulnerability Vendor:www.activewebsoftwares.com Software: Active Force Matrix v 2 author: я3d D3v!L Date:...

eWebquiz v 8 (Auth Bypass) Remote SQL Injection Vulnerability

No description provided by source. ----------------------------بسم الله الرحمن الرحيم------------------------------ وما أوتيتم من العلم الا قليلا -------------------------------صدق الله العظيم------------------------------- Tybe:Auth Bypass...

Active Membership v 2 (Auth Bypass) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ====================================================================== Active Membership v 2 Auth Bypass Remote SQL Injection Vulnerability ====================================================================== Tybe:Auth Bypass Remote SQL...

activetest-sql.txt

----------------------------بسم الله الرحمن الرحيم------------------------------ Tybe:Auth Bypass Remote SQL Injection Vulnerability Vendor: www.activewebsoftwares.com Software: Active Test v 2.1 author: я3d D3v!L Date: 28.11.2008 Home: www.ahacker.biz contact: N/A...

Active Trade 2 - Authentication Bypass

----------------------------بسم الله الرحمن الرحيم------------------------------ Tybe:Auth Bypass Remote SQL Injection Vulnerability Vendor: www.activewebsoftwares.com Software: Active Trade v 2 author: я3d D3v!L Date: 28.11.2008 Home: www.ahacker.biz contact: N/A...

Active NewsLetter 4.3 - Authentication Bypass

----------------------------بسم الله الرحمن الرحيم------------------------------ Tybe:Auth Bypass Remote SQL Injection Vulnerability Vendor: www.activewebsoftwares.com Software: Active Newsletter v 4.3 author: я3d D3v!L Date: 28.11.2008 Home: www.ahacker.biz contact: N/A...

TxtBlog (index.php m) Local File Inclusion Vulnerability

No description provided by source. ============================================================ TxtBlog index.php m Local File Inclusion Vulnerability ============================================================ ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Undergroun...

CVE-2008-4829

Multiple buffer overflows in lib/http.c in Streamripper 1.63.5 allow remote attackers to execute arbitrary code via 1 a long "Zwitterion v" HTTP header, related to the httpparsescheader function; 2 a crafted pls playlist with a long entry, related to the httpgetpls function; or 3 a crafted m3u...