Absolute Form Processor XE 1.5 - 'login.asp' SQL Injection

source: https://www.securityfocus.com/bid/34463/info Absolute Form Processor XE is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application,...

krb5: buffer over-read in SPNEGO GSS-API mechanism (MITKRB5-SA-2009-001)

The getinputtoken function in the SPNEGO implementation in MIT Kerberos 5 aka krb5 1.5 through 1.6.3 allows remote attackers to cause a denial of service daemon crash and possibly obtain sensitive information via a crafted length value that triggers a buffer over-read...

Gigaset SE461 WiMAX Router - Remote Denial of Service

Gigaset SE461 WiMAX Router - Remote Denial of Service / / / / / / / / / / / / / // / / / / / / / / / // / / / // // / / / / / // ///// // // // Helith - 0815 -------------------------------------------------------------------------------- Author : Benkei Date : 2008-02-08 Vendor : Siemens Affecte...

nForum 1.5 Multiple Remote SQL Injection Vulnerabilities

Exploit for unknown platform in category web applications ======================================================== nForum 1.5 Multiple Remote SQL Injection Vulnerabilities ======================================================== Salvatore "drosophila" Fresta + Application: nForum + Version: 1.5 +...

SkaLinks 1.5 (Auth Bypass) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ====================================================== SkaLinks 1.5 Auth Bypass SQL Injection Vulnerability ====================================================== Product : SkaLinks Version : 1.5 Dork : Powered by SkaLinks Site:...

CVE-2008-5296

Gallery 1.5.x before 1.5.10 and 1.6 before 1.6-RC3, when registerglobals is enabled, allows remote attackers to bypass authentication and gain administrative via unspecified cookies. NOTE: some of these details are obtained from third party information...

bandwebsite-sqlxss.txt

Bandwebsite Version 1.5 Sql & XSS Multiple Remote Vuln. download: http://membres.lycos.fr/fluxx/bandwebsite.php ---------------------------------------------------------- Discovered By: ZoRLu msn: [email protected] Date: 24.11.2008 Home: www.z0rlu.blogspot.com Kucuk Bir Rica: Lutfen DemolarI...

Clean CMS 1.5 - Blind SQL Injection / Cross-Site Scripting

Clean CMS 1.5 Blind Sql & XSS Multiple Remote Vuln. script: http://www.4yoursite.nl/scriptcleancms.php ---------------------------------------------------------- Discovered By: ZoRLu msn: [email protected] Home: www.z0rlu.blogspot.com N0T: YALNIZLIK, YiTiRDi ANLAMINI YALNIZLIGIMDA : N0T: RedHa...

Bandwebsite 1.5 - SQL Injection Cross-Site Scripting

Bandwebsite 1.5 - SQL Injection Cross-Site Scripting Bandwebsite Version 1.5 Sql & XSS Multiple Remote Vuln. download: http://membres.lycos.fr/fluxx/bandwebsite.php ---------------------------------------------------------- Discovered By: ZoRLu msn: [email protected] Date: 24.11.2008 Home:...

Domain Seller Pro 1.5 - id SQL Injection

Domain Seller Pro 1.5 - id SQL Injection WwW.StarHack.Us Author : TR-ShaRk Web : StarHack.Us OldKral.Com Email : [email protected] Msn : [email protected] Script : Domain Seller Pro� v1.5 SQL Injection Vuln. : index.php?a=d&id=-4+union+select+1,2,@@version,4,5,6,7,8,9,10,11,12,13,14-- Demo...

articlepublisherpro-insecure.txt

Article Publisher PRO Insecure Cookie Handling Vulnerability version: 1.5 ---------------------------------------------------------- Discovered By: ZoRLu Date: 01.11.2008 Home: www.z0rlu.blogspot.com contact: [email protected] N0T: YALNIZLIK, YiTiRDi ANLAMINI YALNIZLIGIMDA : N0T: a.q kpss :...

phpkb-1.5-question.php.txt

PHPKB Knowledge Base Software v1.5 Professional question.php - SQL Injection Vulnerability http://www.knowledgebase-script.com ---------------------------------------------------------- Bug founded by d3v1l Date: 20.09.2007 [email protected]...

DEV Web Management System 1.5 - Multiple Input Validation Vulnerabilities

DEV Web Management System 1.5 - Multiple Input Validation Vulnerabilities source: https://www.securityfocus.com/bid/30447/info DEV Web Management System is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied data. The issues include local...

DEV Web Management System 1.5 - Multiple Input Validation Vulnerabilities

source: https://www.securityfocus.com/bid/30447/info DEV Web Management System is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied data. The issues include local file-include, SQL-injection, and cross-site scripting vulnerabilities...

phshoutbox-cookie.txt

--==+================================================================================+==-- --==+ PhShoutBox = 1.5 final Insecure Cookie Handling Arbitrary Authentication +==-- --==+================================================================================+==-- Discovered By: t0pP8uZz...

Lasernet CMS 1.5 (new) Remote SQL Injection Vulnerability

No description provided by source. Lasernet CMS v1.5 Remote Sql nj. Vuln. Founder: cO2 Algeria Security Crew HomePage: http://www.DZ-Secure.com Greatz : To all Hackerz from Algeria & All My Friends . . . Contact: [email protected] Exploit :...

LaserNet CMS 1.5 - SQL Injection

LaserNet CMS 1.5 - SQL Injection Lasernet CMS v1.5 Remote Sql Ä°nj. Vuln. Founder: cO2 Algeria Security Crew HomePage: http://www.DZ-Secure.com Greatz : To all Hackerz from Algeria & All My Friends . . . Contact: [email protected] Exploit :...

Joomla! Component ProductShowcase 1.5 - SQL Injection

Joomla Component comproductshowcase SQL Injection AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 HOME : http://securityreason.com/search/101/c0BidW4=/1/0 MAÄ°L : [email protected] DORKS 1 : allinurl :"comproductshowcase" EXPLOIT :...

Debian Security Advisory DSA 644-1 (chbg)

The remote host is missing an update to chbg announced via advisory DSA 644-1. OpenVAS Vulnerability Test $Id: deb6441.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 644-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Joomla! CMS com_search Component 'searchword' Parameter RCE

The version of Joomla! running on the remote host is affected by a remote code execution vulnerability within the comsearch/views/search/tmpl/defaultresults.php script due to improper sanitization of user-supplied input to the 'searchword' parameter before passing it to the eval function. An...