mgbs-sql.txt

MGBS 1.0 Remote SQL injection Script url http://sourceforge.net/project/showfiles.php?groupid=193233 Vulnerable code in blog.php ?php $month = $GET'month'; $result = mysqlquery"SELECT FROM blog WHERE posted='$month' ORDER BY id DESC" or die"HELP QUERY BROKEN"; ... Admin hash exploit...

Mooseguy Blog System 1.0 - month SQL Injection

Mooseguy Blog System 1.0 - month SQL Injection MGBS 1.0 Remote SQL injection Script url http://sourceforge.net/project/showfiles.php?groupid=193233 Vulnerable code in blog.php ?php $month = $GET'month'; $result = mysqlquery"SELECT FROM blog WHERE posted='$month' ORDER BY id DESC" or die"HELP QUER...

Mooseguy Blog System 1.0 - 'month' SQL Injection

MGBS 1.0 Remote SQL injection Script url http://sourceforge.net/project/showfiles.php?groupid=193233 Vulnerable code in blog.php ?php $month = $GET'month'; $result = mysqlquery"SELECT FROM blog WHERE posted='$month' ORDER BY id DESC" or die"HELP QUERY BROKEN"; ... Admin hash exploit...

OZJournals 2.1.1 - 'id' File Disclosure

Name: OZJournals 2.1.1 Webiste: http://www.aqonlinenetworks.com/ Vulnerability type: Local File Exposure Author: shinmai, 2008-01-21 Description: OZJournals uses .php-files as it's storage, and posts are read from them with the getcontents-function. This protects from traditional LFI-exploits, bu...

DomPHP 0.81 - cat SQL Injection

DomPHP 0.81 - cat SQL Injection --==+================================================================================+==-- --==+ DomPHP v0.81 Remote Sql Injection +==-- --==+================================================================================+==-- Author: MhZ91 Title: DomPHP v0.81...

domphp-rfi.txt

DomPHP v0.81 Remote File Inclusion Vulnerability AUTHOR : H-T Team HouSSamix ToXiC350 HOME : http://no-hack.net Script : DomPHP Version : 0.81 Site : http://www.domphp.com Download : http://www.domphp.com/download/cat.php?idcat=1 Vulnerable CODE : /aides/index.php if isset$GET'page'...

Zenphoto 1.1.3 (rss.php albumnr) Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl -w Zenphoto 1.1.3 SQL Injection Exploit Discovered by:...

Zenphoto 1.1.3 (rss.php albumnr) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ============================================================= Zenphoto 1.1.3 rss.php albumnr Remote SQL Injection Exploit ============================================================= !/usr/bin/perl -w Zenphoto 1.1.3 SQL Injection Exploit...

CMS Made Simple <= 1.2.2 (TinyMCE module) SQL Injection Vuln

No description provided by source. ------------------------------------------------------------------------- CMS Made Simple = 1.2.2 TinyMCE module - Remote SQL Injection Advisory ------------------------------------------------------------------------- author...: EgiX...

CMS Made Simple 1.2.2 Module TinyMCE - SQL Injection

------------------------------------------------------------------------- CMS Made Simple = 1.2.2 TinyMCE module - Remote SQL Injection Advisory ------------------------------------------------------------------------- author...: EgiX mail.....: n0b0d13satgmaildotcom link.....:...

CMS Made Simple <= 1.2.2 (TinyMCE module) SQL Injection Vuln

Exploit for unknown platform in category web applications ============================================================ CMS Made Simple = 1.2.2 TinyMCE module SQL Injection Vuln ============================================================...

CMS Made Simple 1.2.2 Module TinyMCE - SQL Injection

CMS Made Simple 1.2.2 Module TinyMCE - SQL Injection ------------------------------------------------------------------------- CMS Made Simple = 1.2.2 TinyMCE module - Remote SQL Injection Advisory ------------------------------------------------------------------------- author...: EgiX mail........

esyndicatles-sql.txt

-------------------------------------------------------------- eSyndiCat Link Exchange Script - Remote SQL Injection Advisory -------------------------------------------------------------- author...: EgiX mail.....: n0b0d13satgmaildotcom link.....: http://www.esyndicat.com/ dork.....: "© 2005-200...

eSyndiCat Link Exchange Script 2005-2006 - SQL Injection

eSyndiCat Link Exchange Script 2005-2006 - SQL Injection -------------------------------------------------------------- eSyndiCat Link Exchange Script - Remote SQL Injection Advisory -------------------------------------------------------------- author...: EgiX mail.....: n0b0d13satgmaildotcom...

eSyndiCat Link Exchange Script 2005-2006 - SQL Injection

-------------------------------------------------------------- eSyndiCat Link Exchange Script - Remote SQL Injection Advisory -------------------------------------------------------------- author...: EgiX mail.....: n0b0d13satgmaildotcom link.....: http://www.esyndicat.com/ dork.....: "© 2005-20...

Adult Script 1.6 - Unauthorized Administrative Access

Adult Script Unauthorized Administrative Access Exploit bodymargin:0px;font-style:normal;font-size:10px;color:FFFFFF;font-family:Verdana,Arial;background-color:3a3a3a;scrollbar-face-color: 303030;scrollbar-highlight-color: 5d5d5d;scrollbar-shadow-color: 121212;scrollbar-3dlight-color:...

Adult Script <= 1.6 Unauthorized Administrative Access Exploit

Exploit for unknown platform in category web applications ============================================================== Adult Script Adult Script Unauthorized Administrative Access Exploit...

Unsanitized scripting in RoundCube webmail

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Site address: http://roundcube.net/ Roundcube webmail does not sanitize Microsoft Internet Explorer scripting issues reported by Yosuke Hasegawa. Author was contacted on 2007-05-11. I haven't received any response and current 2007-12-09 code is still...

mcmseasy-lfi.txt

--------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg --------------------------------------------------------------- Local File...

project alumni 1.0.9 - Cross-Site Scripting SQL Injection

project alumni 1.0.9 - Cross-Site Scripting SQL Injection project-alumni sql injection & xss author : tomplixsee [email protected] ------------------------------------------------------------------------------------------------------------- affected software version : project alumni v1.0.9,...