1306 matches found
easyTrade 2.x (detail.php id) Remote SQL Injection Vulnerability
No description provided by source. easyTrade v2.x SQL Injection Vulnerability Bug by: h0yt3r Dork: "powered by easytrade" Script suffers from a not correctly verified detail id variable which is used in SQL Querys. An Attacker can easily get sensitive information from the database by injecting...
IMGallery 2.5 Multiply Remote SQL Injection Vulnerabilities
No description provided by source. Name : IMGallery 2.5 Multiply Remote SQL Injection Vulnerabilities Author : cOndemned Conditions : magicquotesgpc = off ;/ Greetz : irk4z, GregStar, ZaBeaTy, d3d!k, CodersWorld, gathering and Avantura ;...
PHP-Nuke genaral print SQL Injection(id)
PHP-Nuke genaral print SQL Injectionid AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 MAL : [email protected] DORK 1 : allinurl:"modules.php?name"print DORK 2 : allinurl:"modules.php?name=Hikaye" DORK : allinurl:"modules.php?name=Fikralar" DORK :...
Mambo Component Comments <= 0.5.8.5g SQL Injection Vulnerability
Exploit for unknown platform in category web applications ================================================================ Mambo Component Comments = 0.5.8.5g SQL Injection Vulnerability ================================================================ Mambo SQL Injection comcomments Version...
boastMachine <=3.1 SQL Injection Vulnerbility
...:::::boastMachine =3.1 SQL Injection Vulnerbility ::::.... Virangar Security Team www.virangar.org www.virangar.net -------- Discoverd By :virangar security teamhadihadi special tnx to:MR.nosrati,black.shadowes,MR.hesy,Zahra & all virangar members & all hackerz greetz:to my best friend in the...
DTSA-57-1 gforge - sql injection
Bulletin has no description...
CVE-2007-3582
SQL injection vulnerability in index.php in SuperCali PHP Event Calendar 0.4.0 allows remote attackers to execute arbitrary SQL commands via the o parameter...
WebChat 0.78 (login.php rid) Remote SQL Injection Vulnerability
No description provided by source. webchat 0.78 Class: SQL Injection Published 28/06/2007 Remote: Yes Critical Level : Dangerous Site: http://sourceforge.net/projects/webdev-webchat/ Download: http://downloads.sourceforge.net/webdev-webchat/webchat-078.zip?modtime=1046649600&bigmirror=0 Author:...
CVE-2007-0107
WordPress before 2.0.6, when mbstring is enabled for PHP, decodes alternate character sets after escaping the SQL query, which allows remote attackers to bypass SQL injection protection schemes and execute arbitrary SQL commands via multibyte charsets, as demonstrated using UTF-7...
ASPTicker 1.0 (admin.asp) Remote Login ByPass SQL Injection Vulnerability
Title : ASPTicker 1.0 admin.asp Remote Login ByPass SQL Injection Vulnerability Author : ajann Contact : : S.Page : http://www.aspapps.com $$ : $ 17.00 SQL--------------------------------------------------------- http://target/path//admin.aspByPass Example: //Password 'union select 0,0,0 from...
ProNews V1.5 XSS & SQL Injection
ProNews V1.5 -------------------- Vendor site: http://www.scripthp.com/ Product: ProNews V1.5 Vulnerability: XSS & SQL Injection Vulnerability Credits: MrKaLiMaN Reported to Vendor: 01.12.06 Public disclosure: 09.12.06 Description: ------------ XSS permanent:...
uPhotoGallery (v 1.1) SQL Injection
Aria-Security Team Advisory www.Aria-security.Com For English www.Aria-Security.net For Persian ----------------------------------------------------------- Software: uPhotoGallery 1.1 Method: SQL injection PoC: http://target/slideshow.asp?imgid=290&ci=SQL Injection...
Basic Forum 1.1 - edit.asp SQL Injection
Basic Forum 1.1 - edit.asp SQL Injection Title : basicforum v 1.1 edit.asp Remote SQL Injection Vulnerability Author : bolivar Dork : "This script created by www.script.canavari.com" ---------------------------------------------------------------------------...
Wallpaper Complete Website 1.0.09 - SQL Injection
Coding 4 Fun Wallpaper Complete Website 1.0.09 http://www.easysitenetwork.com/modules.php?name=Content&pa=showpage&pid=7 ; Class = SQL Injection ; Download = http://www.easysitenetwork.com/modules.php?name=Downloads&dop=getit&lid=8 ; Found by = GregStar gregstaratc4fdotpl http://c4f.pl ;...
UPublisher 1.0 (viewarticle.asp) Remote SQL Injection Vulnerability
No description provided by source. Title : UPublisher 1.0 viewarticle.asp Remote SQL Injection Vulnerability Author : ajann Dork : UPublisher Vendor: http://www.superfreaker.com/ http://target/path//viewarticle.asp?ID=SQL Example:...
UPublisher 1.0 (viewarticle.asp) Remote SQL Injection Vulnerability
Exploit for unknown platform in category web applications =================================================================== UPublisher 1.0 viewarticle.asp Remote SQL Injection Vulnerability =================================================================== Title : UPublisher 1.0 viewarticle.as...
CubeCart 3.0.x - '/admin/header.inc.php' Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/20215/info CubeCart is prone to multiple input-validation vulnerabilities, including information-disclosure, cross-site scripting, and SQL-injection issues, because the application fails to properly sanitize user-supplied input. A successful exploit of...
Haberx 1.02 <= 1.1 (tr) Remote SQL Injection Vulnerability
No description provided by source. +++++++++++++++++++++++++++++++++++++++++++++++++++ + Haberx v1.1 tr SQL Injection Vulnerability + + Author : Fix TR + + Site : www.hack.gen.tr + + Contact : fixtratbsdmail.com + +++++++++++++++++++++++++++++++++++++++++++++++++++ + Download:...
Sql injection
SQL injection vulnerability in links.php in 4R Linklist 1.0 RC2 and earlier, a module for Woltlab Burning Board, allows remote attackers to execute arbitrary SQL commands via the cat parameter...
CVE-2006-2268
SQL injection vulnerability in FlexCustomer 0.0.4 and earlier allows remote attackers to bypass authentication and execute arbitrary SQL commands via the admin and ordinary user interface, probably involving the 1 checkuser and 2 checkpass parameters to a admin/index.php, and 3 username and 4...