Joomla! Component com_tophotelmodule 1.0 - Blind SQL Injection

Joomla Component comtophotelmoduleid Blind SQL-injection Author : boom3rang Kosova Hackers Group www.khg-crew.ws Greetz : H!tm@N, KHG, chs, redc00de, pr0xy-ki11er, LiTTle-Hack3r, L1RIDON1. ---------------------------------------- ! Top Hotel Module ! 06/07/2008 ! Joomla HBS ! [email protected] !...

CVE-2008-4622

The isLoggedIn function in fastnews-code.php in phpFastNews 1.0.0 allows remote attackers to bypass authentication and gain administrative access by setting the fn-loggedin cookie to 1...

Joomla Flash 1.0.0 SQL Injection

Joomla Component comflash SQL Injection Vulnerability Vulnerability found by: Valon Kerolli Contact: valonatitshqip.com Site: www.itshqip.com ScriptName: "Joomla" Component: "Flash comflash" Version: "1.0.0" Author: "Newgekko " Author E-mail: "[email protected]" Author URL: "www.newgekko.com"...

Joomla Photos 1.0.0 SQL Injection

Joomla Component comphotos SQL Injection Vulnerability Vulnerability found by: Valon Kerolli Contact: valonatitshqip.com Site: www.itshqip.com ScriptName: "Joomla" Component: "Photos comphotos" Version: "1.0.0" Author: "Newgekko" Author E-mail: "[email protected]" Author URL: "www.newgekko.com"...

silentum-xss.txt

+===============================================================+ + Silentum LoginSys v1.0.0 XSS Cross-Site Scripting + +===============================================================+ Authors: Maximiliano Soler. Web: www.maximilianosoler.com.ar Product: Silentum LoginSys v1.0.0 Description:...

DEBIAN-CVE-2008-3141

Unspecified vulnerability in the RMI dissector in Wireshark formerly Ethereal 0.9.5 through 1.0.0 allows remote attackers to read system memory via unspecified vectors...

Webdevindo-CMS 0.1 - 'hal' SQL Injection

========================================================================= Webdevindo-CMS 0.1 index.php hal Remote SQL Injection Vulnerability ========================================================================= ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH...

Experts (answer.php) Remote SQL Injection Vulnerability

No description provided by source. ========================================================= Experts answer.php Remote SQL Injection Vulnerability ========================================================= ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacki...

Experts 1.0.0 - answer.php SQL Injection

Experts 1.0.0 - answer.php SQL Injection ========================================================= Experts answer.php Remote SQL Injection Vulnerability ========================================================= ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground...

Experts 1.0.0 - 'answer.php' SQL Injection

========================================================= Experts answer.php Remote SQL Injection Vulnerability ========================================================= ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team...

Experts (answer.php) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ======================================================= Experts answer.php Remote SQL Injection Vulnerability ======================================================= ========================================================= Experts...

Joomla! Component rekry 1.0.0 - op_id SQL Injection

Joomla! Component rekry 1.0.0 - opid SQL Injection @ Joomla component rekry!Joom opid rekry 18.07.2006 Matti Kiviharju Copyright 2006 by Matti Kiviharju. All rights reserved! [email protected] www.teknologiaplaneetta.com 1.0.0 This component allows careers to send their career info to...

PT-2007-3917 · Unknown · Simplenews

Name of the Vulnerable Software and Affected Versions: SimpleNews version 1.0.0 FINAL Description: The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the news id parameter in the "print.php" endpoint. Recommendations: For SimpleNews version 1.0.0 FINAL, avoi...

Fedora Core 5 : dbus-0.62-0.2.fc5 (2006-1464)

Along with the security patch there is also a patch which protects D-Bus from exiting when updating to versions greater than or equal to 1.0.0 i.e. upgrading to fc6 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable...

[SA22925] EC-CUBE Unspecified Cross-Site Scripting Vulnerability

TITLE: EC-CUBE Unspecified Cross-Site Scripting Vulnerability SECUNIA ADVISORY ID: SA22925 VERIFY ADVISORY: http://secunia.com/advisories/22925/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: EC-CUBE 1.x http://secunia.com/product/12657/ DESCRIPTION: A...

Odysseus Blog 1.0 - blog.php Cross-Site Scripting

Odysseus Blog 1.0 - blog.php Cross-Site Scripting source: https://www.securityfocus.com/bid/21128/info Odysseus Blog is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code...

SQL-Ledger 2.6.x/LedgerSMB 1.0 - 'Terminal' Directory Traversal

source: https://www.securityfocus.com/bid/19960/info SQL-Ledger and LedgerSMB are prone to a remote directory-traversal vulnerability. An attacker can exploit this issue to include arbitrary files located on the vulnerable computer in the context of the webserver process. The attacker may be able...

[SA19155] HitHost Cross-Site Scripting and Directory Deletion

TITLE: HitHost Cross-Site Scripting and Directory Deletion SECUNIA ADVISORY ID: SA19155 VERIFY ADVISORY: http://secunia.com/advisories/19155/ CRITICAL: Less critical IMPACT: Cross Site Scripting, Manipulation of data WHERE: From remote SOFTWARE: HitHost 1.x http://secunia.com/product/8604/...

[SECURITY] [DSA 963-1] New mydns packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 963-1 [email protected] http://www.debian.org/security/ Martin Schulze February 2nd, 2006 http://www.debian.org/security/faq -...

KBase Express 1.0 - Multiple SQL Injections

KBase Express 1.0 - Multiple SQL Injections source: https://www.securityfocus.com/bid/15635/info KBase Express is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query...