Simple Document Management System 1.1.5 - Multiple SQL Injections

Simple Document Management System 1.1.5 - Multiple SQL Injections source: https://www.securityfocus.com/bid/54043/info Simple Document Management System is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an...

Simple Document Management System 1.1.5 - Multiple SQL Injections

source: https://www.securityfocus.com/bid/54043/info Simple Document Management System is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to...

KubeLance 1.8.0 Cross Site Request Forgery / Cross Site Scripting

=========================================================== Vulnerable Software: KubeLance: 1.8.0 Official Site: kubelabs.com =========================================================== Vuln Desc: KubeLance: 1.8.0 suffers from multiple CSRF and XSS+HTML injection vulns. Below i'll show to you ONL...

MyStore Tienda Virtual 2.0 SQL Injection

.-=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=-. SQL Injection MyStore Tienda Virtual .-=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=-. + Autor: easy laster + Vulnerabilities SQL Injection + Page: http://www.mystore.com.mx/ + Language: PHP + Version: 2.0 +...

SMF 2.0 / 1.1.14 XSRF Filter Bypass

Summary The img BBCode tag anti-CSRF filter can be bypassed due to incorrect parsing of the 'action' variable; because of this it is possible to successfully execute CSRF. Description Software: Simple Machines Forum SMF Versions: SMF 2.0 / SMF 1.1.14 Publication date: 2011-08-23 Impact: Cross Sit...

System Werkform 2.0 SQL Injection

|Title : System werkform index.php SQL Injection Vulnerability | Software : werkform | Version : 2.0 | Date : 3 / 08 / 2011 | Author : Net.Edit0r | Contact : [email protected] & [email protected] | Google Dork : "powered by werkform" | Vendor : http://www.werkform.at/ | My Home :...

Traidnt UP 2.0 - 'view.php' SQL Injection

|Title : Traidnt UP view.php SQL Injection Vulnerability | Software : Traidnt UP | Version : 2.0 | Date : 09 / 05 / 2011 | Author : ScOrPiOn | Contact : [email protected] | Google Dork : "Powered by Traidnt UP Version 2.0" | Vendor :...

CVE-2011-1671

Cross-site scripting XSS vulnerability in app/controllers/todoscontroller.rb in Tracks 1.7.2, 2.0RC2, and 2.0devel allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to todos/tag/. NOTE: some of these details are obtained from third party information...

Baar3 Content Managment System BSQLI Vulnerability

Exploit for php platform in category web applications Exploit Title: + Baar3 Content Managment System BSQLI Vulnerable + Google Dork: + No Dork's + Author: + h1kt0s4 437Cr3w + Home : + 437Cr3w.org | AfghanExploiter.af + Soon Software Link: +http://baar3.orbit.net.sa/+ + Script Price 1000$ :D Shit...

Joomla Book Library SQL Injection

Exploit Title: SQL Injection in component combooklibrary for Joomla Date: 17.03.2011 Author: Marc Doudiet Software Link: http://ordasoft.com/Shop/OrdaSoft/BookLibrary/BookLibrary-search-Books-module-version-2.0/flypage.tpl.html Version: Version 2.0 for Joomla 1.5 Tested on: PHP Mysql There is a S...

Joomla! Component com_booklibrary - SQL Injection

Joomla! Component combooklibrary - SQL Injection Exploit Title: SQL Injection in component combooklibrary for Joomla Date: 17.03.2011 Author: Marc Doudiet Software Link: http://ordasoft.com/Shop/OrdaSoft/BookLibrary/BookLibrary-search-Books-module-version-2.0/flypage.tpl.html Version: Version 2.0...

Joomla! Component com_booklibrary - SQL Injection

Exploit Title: SQL Injection in component combooklibrary for Joomla Date: 17.03.2011 Author: Marc Doudiet Software Link: http://ordasoft.com/Shop/OrdaSoft/BookLibrary/BookLibrary-search-Books-module-version-2.0/flypage.tpl.html Version: Version 2.0 for Joomla 1.5 Tested on: PHP Mysql There is a S...

Design/Logic Flaw

Balabit syslog-ng 2.0, 3.0, 3.1, 3.2 OSE and PE, when running on FreeBSD or HP-UX, does not properly perform cast operations, which causes syslog-ng to use a default value of -1 to create log files with insecure permissions 07777, which allows local users to read and write to these log files...

eXtremeMP3 Player - Local Buffer Overflow (SEH)

eXtremeMP3 Player - Local Buffer Overflow SEH +Exploit Title: Exploit Bufer Overflow eXtremeMP3 PlayerSEH +Date: 01\15\2010 +Author: C4SS!0 G0M3S +Software Link: http://ukms.tucows.com/files2/xtremv20RC1.exe +Version: 2.0 +Tested on: WIN-XP SP3 BRAZILIAN +CVE: N/A Create by C4SS!0 G0M3S...

eXtremeMP3 Player Buffer Overflow

+Exploit Title: Exploit Bufer Overflow eXtremeMP3 PlayerSEH +Date: 01\15\2010 +Author: C4SS!0 G0M3S +Software Link: http://ukms.tucows.com/files2/xtremv20RC1.exe +Version: 2.0 +Tested on: WIN-XP SP3 BRAZILIAN +CVE: N/A Create by C4SS!0 G0M3S WWW.INVASAO.COM.BR [email protected] / Note: To...

eXtremeMP3 Player - Local Buffer Overflow (SEH)

+Exploit Title: Exploit Bufer Overflow eXtremeMP3 PlayerSEH +Date: 01\15\2010 +Author: C4SS!0 G0M3S +Software Link: http://ukms.tucows.com/files2/xtremv20RC1.exe +Version: 2.0 +Tested on: WIN-XP SP3 BRAZILIAN +CVE: N/A Create by C4SS!0 G0M3S WWW.INVASAO.COM.BR [email protected] / Note: To...

RTShop 2.0 SQL Injection

================================================= RTShop v2.0 Exploit database separated by exploit 3 3 type local, remote, DoS, etc. 3 7 7 1 + Site : 1337db.com 1 3 + Support e-mail : submitat1337db.com 3 3 3 7 7 1 I'm KnocKout 1337 Member from 1337 DataBase 1 3 3 3 3...

SeaMonkey 2.0.x < 2.0.11 Multiple Vulnerabilities

Binary data 5731.prm...

Techno Dreams Articles & Papers Package 2.0 - 'ArticlesTablelist.asp' SQL Injection

source: https://www.securityfocus.com/bid/45201/info Techno Dreams Articles & Papers Package is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

[eVuln.com] email XSS in SimpLISTic

New eVuln Advisory: email XSS in SimpLISTic Summary: http://evuln.com/vulns/145/summary.html Details: http://evuln.com/vulns/145/description.html -----------Summary----------- eVuln ID: EV0145 Software: SimpLISTic Vendor: Mrcgiguy Version: 2.0 Critical Level: low Type: Cross Site Scripting Status...