Schaf-CMS 1.0 - SQL Injection Vulnerability

No description provided by source. Schaf-CMS 1.0 SQL Injection Vulnerability Author : Manas58 Homepage : http://www.1923turk.com Script : Schaf-CMS 1.0 Download : http://www.brothersoft.com/site-builder-software---cms-53489.html Vulnerable File cms.php?id= SQL XpL...

Simple:Press Wordpress Plugin 4.3.0 - SQL Injection Vulnerability

No description provided by source...

DUware DUclassmate 1.x edit.asp iPro Parameter SQL Injection

No description provided by source. source: http://www.securityfocus.com/bid/14036/info DUclassmate is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in SQL queries. A successful exploit could allow an attacker...

Advanced Poll 2.02 SQL Injection Vulnerability

No description provided by source...

ModernBill 4.3 User.PHP SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/17596/info ModernBill is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allo...

newsPHP 2006 PRO index.php Multiple Parameter SQL Injection

No description provided by source. source: http://www.securityfocus.com/bid/18726/info NewsPHP 2006 PRO is prone to multiple input-validation vulnerabilities. The issues include cross-site scripting and SQL-injection vulnerabilities. These issues are due to a failure in the application to properl...

Yii Framework 1.1.8 Search SQL Injection Vulnerability

No description provided by source. Exploit Title: Yii Framework - Search SQL Injection Vulnerability Google Dork: No Dork Date: 20/11/2012 Exploit Author: Junookyo Vendor Homepage: http://www.yiiframework.com/ Software Link: http://www.yiiframework.com/download/ Version: 1.1.8 maybe another versi...

MGASA-2013-0311 Updated quassel packages fix CVE-2013-4422

Updated quassel packages fix security vulnerability: Quassel IRC before 0.9.1 is vulnerable to SQL injection if used with Qt 4.8.5, due to a change in Qt's postgres driver, allowing other IRC users to trick the Quassel core into executing SQL queries CVE-2013-4422. This update provides Quassel...

Hewlett-Packard Intelligent Management Center APM monitorId SQL Injection Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP Intelligent Management Center. Authentication is not required to exploit this vulnerability. The specific flaw exists within the APM module's AppDataDaoImpl class. The monitorId parameter does n...

SQL Injection in Cotonti

High-Tech Bridge Security Research Lab discovered vulnerability in Cotonti, which can be exploited to perform SQL injection attacks against vulnerable application. A remote attacker can read, modify or delete data in application’s database and even gain complete control over the application under...

phpcms 2008 /yp/job.php SQL注入漏洞

No description provided by source...

WEBalbum 2.0 SQL Injection Vulnerability

Attacker can inject some malicious code http://127.0.0.1/webalbum/photo.php?id=SQL ======================== Demos : http://www.shutterpoint.co.uk/webalbum/photo.php?id=2869' www.escuelacardiel.com/galeria/photo.php?id=64' http://inco.nu/webalbum/photo.php?id=646'...

Google Alert And Twitter WP Plugin v. 3.1.5 XSS Exploit & SQL Injection

Wordpress plugin vulnerable to XSS and SQL Injection. These pages can be called directly and do not require any rights to access. Google Alert And Twitter Plugin v. 3.1.5 XSS Exploit & SQL Injection vendor url: www.galertplugin.com Researcher: Dan Fosco Home: www.dfcode.org XSS: ... $message = ''...

Scripts Genie Top Sites SQL Injection

/ / / \ / / / / / / / / / / / // / / / / / / // / // / / / / | // / / / / / // / / / // / /,// /////,// ///// , / // Top Sites Script, SQL Injection Vulnerabilities Software Page: http://scriptsgenie.com/index.php?do=catalog&c=scripts&i=topsitescript Product Page:...

Booklight Inc. <= SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Booklight Inc. = sql injection Author: RaMeZ Software Link: http://www.booklightinc.com// Google Dork: Booklight Inc. inurl:.php?id= demos:: http://www.miamacdonald.com/a.php?id=42' http://www.steinerbooks.org/p.php?id=10'...

php4flicks 0.4.1g SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: php4flicks 0.4.1g SQL Injection Date: 04/09/2012 Author: DaOne @LibyanCA Software Link: http://php4flicks.sourceforge.net/ Google Dork: N/A Vulnerability file : view.php Exploit http://localhost/path/view.php?fid=SQL Injection...

YourArcadeScript 2.4 SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: YourArcadeScript 2.4 SQLi Vulnerability Version: 2.4 Date: 17/08/2012 Author: DaOne LCA Software Link: http://www.yourarcadescript.com Google Dork: intext:"Powered by YourArcadeScript 2.4" Exploit...

CVE-2012-3435

SQL injection vulnerability in frontends/php/popupbitem.php in Zabbix 1.8.15rc1 and earlier, and 2.x before 2.0.2rc1, allows remote attackers to execute arbitrary SQL commands via the itemid parameter...

Sharebar <= 1.2.1 - SQL Injection & Cross-Site Scripting (XSS)

wp-admin/options-general.php status parameter XSS...

SenseSites CommonSense CMS - special.php?id SQL Injection

SenseSites CommonSense CMS - special.php?id SQL Injection source: https://www.securityfocus.com/bid/55893/info CommonSense CMS is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue cou...