Matterdaddy Market 1.1 - 'index.php' Multiple SQL Injections

Author: !DoktOR! Contact: coder5attopmail.kz Home Page: www.antichat.ru Date found: 25.08.08 Product: Market Version: 1.1 Download script: http://www.matterdaddy.com/4/scripts/marketv11.zip Vulnerability Class: SQL Injection magicquotesgpc = Off http://localhost/installdir/ Exploit:...

Photocart 3.9 - Multiple SQL Injections

Photocart 3.9 - Multiple SQL Injections Author: !DoktOR! Date found: 18.08.08 Product: PhotoCart Version: 3.9 возможно и более ранние версии Type: Photography Shopping Cart URL: www.picturespro.com Vulnerability Class: SQL Injection /installdir/search.php Vuln code: PHP:...

Design/Logic Flaw

JWIG might allow context-dependent attackers to cause a denial of service service degradation via loops of references to external templates. NOTE: this issue has been disputed by multiple third parties who state that only the application developer can trigger the issue, so no privilege boundaries...

chipmunk.forum.txt

/==========================================/ // GHC - Chipmunk forum - ADVISORY // Product: Chipmunk Forums // URL: http://www.chipmunk-scripts.com/board // VULNERABILITY CLASS: SQL injection // RISK: hight /==========================================/ exploit at login.php enter user name as...

MyPHP Forum 1.0 - SQL Injection

MyPHP Forum 1.0 - SQL Injection /==========================================/ // GHC - MyPHP Forum - ADVISORY // Product: MyPHP Forum // Version: 1.0 // URL: http://www.myphp.ws // VULNERABILITY CLASS: SQL injection /==========================================/ example of exploit...