VBZoom 1.0/1.1 - Multiple SQL Injection Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/18403/info VBZooM is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. A successful exploit coul...

VBZoom 1.0/1.11 login.php UserID Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/14423/info VBZooM Forum is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage any of these issue...

VBZoom 1.11 Forum.php SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/18472/info VBZooM is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. A successful exploit could allow an...

Harvest Manager Cross Site Scripting

Title : Harvest Manager XSS vulnerability Software : VBZooM Date : 06/26/2009 Author : S3T4N Contact : rootatsux0r.net Blog : http://sux0r.net oVulnerable file hm.asp o Exploit http://target/mx/hm.asp?id=xss o POC http://www.cocaction.com/mx/hm.asp?id=alert'XSS'...

VBZooM <=V1.11 "reply.php" SQL Injection Vulnerability

================================================= Discovered By: CrAzY CrAcKeR Email: Cr4zY.CrAcKeRathotmaildotcom Script : VBZooM V1.11 ================================================ Search: POWERED BY: VBZooM V1.11 http://www.example.com/vb1/reply.php?UserID=SQL...

CVE-2007-3588

SQL injection vulnerability in reply.php in VBZooM 1.12 allows remote attackers to execute arbitrary SQL commands via the UserID parameter to sub-join.php. NOTE: this may be the same as CVE-2006-3691.4...

Sql injection

SQL injection vulnerability in reply.php in VBZooM 1.12 allows remote attackers to execute arbitrary SQL commands via the UserID parameter to sub-join.php. NOTE: this may be the same as CVE-2006-3691.4...

CVE-2007-3588

CVE-2007-3588 affects VBZooM 1.12 with an SQL injection in reply.php via the UserID parameter to sub-join.php, enabling remote arbitrary SQL execution. This exact entry corresponds to CVE-2007-3588 with note that it may be the same as CVE-2006-3691. The connected records corroborate the vulnerabi...

CVE-2007-3588

SQL injection vulnerability in reply.php in VBZooM 1.12 allows remote attackers to execute arbitrary SQL commands via the UserID parameter to sub-join.php. NOTE: this may be the same as CVE-2006-3691.4...

vbzoom 1.x (forum.php MainID) Remote SQL Injection Vulnerability

No description provided by source. --/ Long Life Palestine -- HHHHHH HHHHHH HH HHHHHH HHHHHH HHHHHHHH HHHH HH HH HHHHHH HH HH HH HH HH HHHHH HH HH HH HHH HH HHHHH HH HH HH HH HH HH HH HH HH HHHH HH HH HHHHHH HHHHHH HH HHHHH HHHHHH HH HH HH HH HH HHHHHH HH HH HH HH HH HH HH HH HH HHHH HH HH &n...

vbzoom 1.x (forum.php MainID) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================ vbzoom 1.x forum.php MainID Remote SQL Injection Vulnerability ================================================================ --/ Long Life Palestine -- HHHHHH HHHHHH HH...

vbzoom1x-sql.txt

--/ Long Life Palestine -- HHHHHH HHHHHH HH HHHHHH HHHHHH HHHHHHHH HHHH HH HH HHHHHH HH HH HH HH HH HHHHH HH HH HH HHH HH HHHHH HH HH HH HH HH HH HH HH HH HHHH HH HH HHHHHH HHHHHH HH HHHHH HHHHHH HH HH HH HH HH HHHHHH HH HH HH HH HH HH HH HH HH HHHH HH HH HH HH HH HHHHH HH HH HH HH HHH HHHHH HH H...

vbzoom 1.x - forum.php?MainID SQL Injection

vbzoom 1.x - forum.php?MainID SQL Injection --/ Long Life Palestine -- HHHHHH HHHHHH HH HHHHHH HHHHHH HHHHHHHH HHHH HH HH HHHHHH HH HH HH HH HH HHHHH HH HH HH HHH HH HHHHH HH HH HH HH HH HH HH HH HH HHHH HH HH HHHHHH HHHHHH HH HHHHH HHHHHH HH HH HH HH HH HHHHHH HH HH HH HH HH HH HH HH HH HHHH HH ...

vbzoom 1.x - 'forum.php?MainID' SQL Injection

--/ Long Life Palestine -- HHHHHH HHHHHH HH HHHHHH HHHHHH HHHHHHHH HHHH HH HH HHHHHH HH HH HH HH HH HHHHH HH HH HH HHH HH HHHHH HH HH HH HH HH HH HH HH HH HHHH HH HH HHHHHH HHHHHH HH HHHHH HHHHHH HH HH HH HH HH HHHHHH HH HH HH HH HH HH HH HH HH HHHH HH HH HH HH HH HHHHH HH HH HH HH HHH HHHHH HH H...

vbzoom-sql.txt

Discovered By: Hasadya Raed Contact : [email protected] Israel --------------------------- Script : VBZooM V1.12 VBZooM V1.12 "reply.php" SQL Injection Dork : POWERED BY VBZooM V1.12 --------------------------- B.File : reply.php --------------------------- Exploit :...

SQL Injection In Script VBZooM V1.12

Discovered By: Hasadya Raed Contact : [email protected] Israel --------------------------- Script : VBZooM V1.12 VBZooM V1.12 "reply.php" SQL Injection Dork : POWERED BY VBZooM V1.12 --------------------------- B.File : reply.php --------------------------- Exploit :...

CVE-2006-4634

CVE-2006-4634: XSS in VBZooM’s index.php via the UserID parameter. Affected: VBZooM (Web app); vulnerable component: index.php. Root cause: improper handling of user-supplied UserID enabling injection of script/HTML. Documentation confirms vulnerability description; no concrete remediation or pat...

vbzoom.txt

vbzoom ==== index.php info: file:index.php thank to www.lezr.com/vb google ====== powered by vbzoom inurl:index.php?UserID= Exp: http://traget/path/index.php?UserID="alert1; =================================== by Crackman...

XXS in Powered by vbzoom

vbzoom ==== index.php info: file:index.php thank to www.lezr.com/vb google ====== powered by vbzoom inurl:index.php?UserID= Exp: http://traget/path/index.php?UserID="scriptalert1;/script =================================== by Crackman...

VBZoom 1.11 - 'profile.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/19803/info VBZooM is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context o...