eTicket v.1.5.1.1 Multiple Cross-Site Scripting

eTicket v.1.5.1.1 Multiple Cross-Site Scripting Author: Attila Gerendi Darkz Date: June 29, 2007 Package: eTicket http://eticket.sourceforge.net/ Versions Affected: v.1.5.1.1 Other versions may also be affected Severity: XSS Input passed to "$SERVER'REQUESTURI'" in various scrips and includes is...

webchat-sql.txt

webchat 0.78 Class: SQL Injection Published 28/06/2007 Remote: Yes Critical Level : Dangerous Site: http://sourceforge.net/projects/webdev-webchat/ Download: http://downloads.sourceforge.net/webdev-webchat/webchat-078.zip?modtime=1046649600&bigmirror=0 Vulnerable code: login.php...

SiteDepth CMS 3.44 - 'ShowImage.php?name' File Disclosure

Sitedepth CMS 3.44 Local File Include LFI Exploit ! Application homepage : http://www.sitedepth.com/ ! Author : H4 / Team XPK ! Contact : [email protected] ! Bug discovered : 2006-11-07 ! Bug published : 2007-06-25 --------------------------------------------------------------------- Vuln. code:...

NetClassifieds - SQL Injection Cross-Site Scripting Full Path

NetClassifieds - SQL Injection Cross-Site Scripting Full Path Application: NetClassifieds: -Free Edition -Standard Edition -Professional Edition -Premium Edition Web Site: http://www.scriptdevelopers.net/ Versions: all Platform: linux, windows Bug: multiple injection sql , xss , full path Fix...

NetClassifieds - SQL Injection / Cross-Site Scripting / Full Path

Application: NetClassifieds: -Free Edition -Standard Edition -Professional Edition -Premium Edition Web Site: http://www.scriptdevelopers.net/ Versions: all Platform: linux, windows Bug: multiple injection sql , xss , full path Fix Available: Yes...

fuzzy-sql.txt

!/usr/bin/perl -w Fuzzylime Forum 1.0 SQL Injection Exploit Discovered by: Silentz Payload: Admin Username & Hash Retrieval Website: http://www.w4ck1ng.com Vulnerable Code low.php: $gettopicid = mysqlquery"SELECT FROM $tableprefixthreads WHERE threadid='$GETtopic'"; PoC:...

Fuzzylime Forum 1.0 (low.php topic) Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl -w Fuzzylime Forum 1.0 SQL Injection Exploit Discovered by: Silentz Payload: Admin Username & Hash Retrieval Website: http://www.w4ck1ng.com Vulnerable Code low.php: $gettopicid = mysqlquery"SELECT FROM $tableprefixthreads WHERE...

[Full-disclosure] Windows Oday release

dear all SChannel Off-By-One Heap Corruption =================================== Discovery Date: 28th August 2006 Date reported to Microsoft: 19th March 2007 Summary: The Secure Channel SChannel library on WinXP-SP1/SP2 is vulnerable to a off-by-one heap buffer overwrite. The SChannel library...

Fuzzylime Forum 1.0 (low.php topic) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ================================================================ Fuzzylime Forum 1.0 low.php topic Remote SQL Injection Exploit ================================================================ !/usr/bin/perl -w Fuzzylime Forum 1.0 SQL...

Fuzzylime Forum 1.0 - low.php?topic SQL Injection

Fuzzylime Forum 1.0 - low.php?topic SQL Injection !/usr/bin/perl -w Fuzzylime Forum 1.0 SQL Injection Exploit Discovered by: Silentz Payload: Admin Username & Hash Retrieval Website: http://www.w4ck1ng.com Vulnerable Code low.php: $gettopicid = mysqlquery"SELECT FROM $tableprefixthreads WHERE...

MiniWeb Http Server 0.8.x Remote Denial of Service Exploit

No description provided by source. MiniWeb Http Server 0.8.x Remote Denial of Service MiniWeb site http://sourceforge.net/projects/miniweb/ Author: gbr Tested running the server under Windows XP SP2 Description: The server doesn't do a sanity-check on 'Content-Length' value from POST Header,...

comicsense02-sql.txt

!/usr/bin/perl -w ComicSense 0.2 SQL Injection Exploit Discovered by: s0cratex Payload: Admin Username & Hash Retrieval Website: http://www.w4ck1ng.com Original Advisory: http://seclists.org/bugtraq/2007/Jun/0063.html http://milw0rm.com/exploits/4035 Vulnerable Code index.php: $sqlQuery = "SELECT...

Comicsense 0.2 (index.php epi) Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl -w ComicSense 0.2 SQL Injection Exploit Discovered by: s0cratex Payload: Admin Username & Hash Retrieval Website: http://www.w4ck1ng.com Original Advisory: http://seclists.org/bugtraq/2007/Jun/0063.html http://milw0rm.com/exploits/4035 Vulnerable...

Comicsense 0.2 (index.php epi) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications =========================================================== Comicsense 0.2 index.php epi Remote SQL Injection Exploit =========================================================== !/usr/bin/perl -w ComicSense 0.2 SQL Injection Exploit...

Comicsense 0.2 - index.php?epi SQL Injection (2)

Comicsense 0.2 - index.php?epi SQL Injection 2 !/usr/bin/perl -w ComicSense 0.2 SQL Injection Exploit Discovered by: s0cratex Payload: Admin Username & Hash Retrieval Website: http://www.w4ck1ng.com Original Advisory: http://seclists.org/bugtraq/2007/Jun/0063.html http://milw0rm.com/exploits/4035...

RevokeBB Blind SQL Injection / Hash Extractor

!/usr/bin/php -q -d shortopentag=on ? echo " ------------------------------------------------------------- RevokeBB = 1.0 RC4 Blind SQL Injection / Hash Retrieve Exploit Site: http://www.revokesoft.net by BlackHawk [email protected] http://itablackhawk.altervista.org Thanks to rgod for the php...

RevokeBB 1.0 RC4 - Blind SQL Injection Hash Retrieve

RevokeBB 1.0 RC4 - Blind SQL Injection Hash Retrieve !/usr/bin/php -q -d shortopentag=on Thanks to rgod for the php code and Marty for the Love ------------------------------------------------------------- "; if $argc 126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2...

dokeos180-sql.txt

!/usr/bin/perl -w Dokeos alertdocument.cookie Also, the amount of XSS vulnerabilites in this application is truely unbelievable...

mlf17-sql.txt

!/usr/bin/perl -w My Little Forum = 1.7 SQL Injection Exploit Discovered by: Silentz Payload: Admin Username & Hash Retrieval Website: http://www.w4ck1ng.com Vulnerable Code user.php: if isset$GET'id' $id = $GET'id'; switch $action case "get userdata": if empty$id $id = $userid; else $result =...

My Little Forum 1.7 - user.php?id SQL Injection

My Little Forum 1.7 - user.php?id SQL Injection !/usr/bin/perl -w My Little Forum = 1.7 SQL Injection Exploit Discovered by: Silentz Payload: Admin Username & Hash Retrieval Website: http://www.w4ck1ng.com Vulnerable Code user.php: if isset$GET'id' $id = $GET'id'; switch $action case "get...