CVE-2011-3130

wp-includes/taxonomy.php in WordPress 3.1 before 3.1.3 and 3.2 before Beta 2 has unknown impact and attack vectors related to "Taxonomy query hardening," possibly involving SQL injection...

ICJobSite 1.1 - pid SQL Injection

ICJobSite 1.1 - pid SQL Injection source: https://www.securityfocus.com/bid/47100/info ICJobSite is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

Discovery TorrentTrader 2.6 - Multiple Vulnerabilities

Exploit Title: TorrentTrader 2.6 Multiple vulnerabilities Google Dork: "Powered by TorrentTrader v2.06" Date: 29 Décembre 2010 Author: EsS4ndre Software Link: http://sourceforge.net/projects/torrenttrader/files/TorrentTrader%20v2/TorrentTrader-v2.06/ Version: 2.6 Tested on: Linux...

Eclime 1.1.2b Multiple Vulnerabilities

Exploit for php platform in category web applications ====================================== Eclime 1.1.2b Multiple Vulnerabilities ====================================== Vendor: www.eclime.com http://www.eclime.com/ Vulnerable Version: 1.1.2b Vendor Notification: 16 November 2010 Vulnerability...

PHPKit 1.6.1 R2 - 'overview.php' SQL Injection

----------------------------Information------------------------------------------------ +Name : PHPKit = 1.6.1 R2 overview.php SQL injection Vulnerability Exploit +Autor : Easy Laster +Date : 22.10.2010 +Script : PHPKit 1.6.1 R2 +Price : free +Language : PHP +Discovered by Easy Laster +Security...

xWeblog 2.2 - 'oku.asp?makale_id' SQL Injection

=================================================== xWeblog v2.2 - Remote SQL Injection Vulnerability tr =================================================== My + Author : KnocKout Contact : [email protected] Software info Web App. : xWeblog v2.2 Software: http://www.aspdunyasi.com/goster.asp?id=1...

RedShop 1.0.23.1 Joomla Component Blind SQL Injection Vulnerability

RedShop 1.0.23.1 Joomla Component Blind SQL Injection Vulnerability Name RedShop Vendor http://redweb.dk Versions Affected 1.0.23.1 Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact salvatorefresta at gmail dot com Date 2010-07-13 X. INDEX I. ABOUT THE...

WebDM CMS - SQL Injection

WebDM CMS - SQL Injection WebDM CMS SQL Injection Vulnerability EDB-ID: CVE: OSVDB-ID: Author: Dr.0rYX and Cr3w-DZ Published: Verified: Exploit Code: Vulnerable App: . . \ \ /| | \ /|| / / /\ \ | | | | \ \ \ | \ \ |/ \ \ | | \ / \ | /| | | Y \ // / | \ | | / \ \ / \ || /\ /| || || / /\ / ||...

Lois Software WebDB 2.0A Script - Multiple SQL Injections

source: https://www.securityfocus.com/bid/41124/info Lois Software WebDB is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the application,...

Eros Erotik Webkatalog start.php (rubrik&id) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ======================================================================== Eros Erotik Webkatalog start.php rubrik&id SQL Injection Vulnerability ========================================================================...

Populum 2.3 SQL injection vulnerability

Exploit for unknown platform in category web applications ======================================= Populum 2.3 SQL injection vulnerability ======================================= Exploit Title: Populum SQL injection vulnerability Author: -SiLeNtp0is0n- Version: 2.3 ::::::::::::::ProUd to Be...

Geeklog 1.5.2 - SEC_authenticate() SQL Injection

Geeklog 1.5.2 - SECauthenticate SQL Injection = 5.0 google dorks: "By Geeklog" "Created this page in" +seconds +powered "By Geeklog" "Created this page in" +seconds +powered inurl:publichtml vulnerability, see /publichtml/webservices/atom/index.php near lines 34-53: ... requireonce...

Novaboard 1.0.0 - Multiple Vulnerabilities

Novaboard 1.0.0 - Multiple Vulnerabilities =============================================================================================== Found : brainpillow Dork : "Powered by NovaBoard v1.0.0" Visit : brainpillow.cc, forum.antichat.ru, raz0r.name Mail : [email protected]...

Mynews 0_10 (Auth Bypass) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ===================================================== Mynews 010 Auth Bypass SQL Injection Vulnerability ===================================================== 0x01 Informations: Name : Mynews 010 Download :...

Web-Calendar Lite 1.0 (Auth Bypass) SQL Injection Vulnerability

No description provided by source. ----C4TEAM.ORG---ByALBAYX----C4TEAM.ORG---- Author : ByALBAYX Website : WWW.C4TEAM.ORG Script :Web-Calendar Lite 1.0 Site :http://www.ewebb.it Demo :http://www.ewebb.it/scripts/calendarV1/index.asp http://www.c4team.org/ PATH /calendarV1/index.asp Username : ' o...

PowerNews 2.5.4 SQL Injection

...:::::powernews 2.5.4 SQL Injection Vulnerability::::.... Virangar Security Team www.virangar.net -------- Discoverd By :virangar security teamhadihadi special tnx to:MR.nosrati,black.shadowes,MR.hesy,Ali007,Zahra & all virangar members & all hackerz greetz:to my best friend in the world...

PHPCMS2008 BETA2 tasteless 0day a-vulnerability warning-the black bar safety net

data\cachemodel\membersearch.class.php username directly get into SQL. Tasteless is because of this hole to the administrator to set the 'registered members' to have a 'search' function. if$this-modelid if$where $where = "AND $where"; if$this-modelid == 1 0 && $GET'username' $username =...

CVE-2008-4348

SQL injection vulnerability in photo.php in PHPortfolio, possibly 1.3, allows remote attackers to execute arbitrary SQL commands via the id parameter...

Youtuber Clone (ugroups.php UID) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications =================================================================== Youtuber Clone ugroups.php UID Remote SQL Injection Vulnerability =================================================================== || | | Youtuber Clone UID Remote SQL...

phpTest 0.6.3 (picture.php image_id) Remote SQL Injection Vulnerability

No description provided by source. Name : phpTest 0.6.3 picture.php imageid Remote SQL Injection Vulnerability Author : cOndemned Dark-Coders Dork : sorry, today no dork ; Greetz : ZaBeaTy, str0ke, GregStar, Voo|doo, ixos, 0in, suN8Hclf, TBH, Avantura : Source code of "picture.php" : 24...