CVE-2007-6580

CVE-2007-6580 affects Wallpaper Site 1.0.09 and involves SQL injection in two parameters: (1) catid in category.php and (2) groupid in editadgroup.php. The vulnerability enables remote attackers to execute arbitrary SQL commands. The CVE's NVD entry lists a base score of 7.5 (HIGH) with network a...

wallpaper-sql.txt

. . NN NNNN JNNN NNNN. NNN NNNNNNNNNNN NN NN NNN.NNNF .NNNNN NN """4NNN""" NN NN NNNNNN NNNNN NNN NNN NN NN 4NNNN NNNNNN.NNF NNN NN NN JNNNNL NN NNNNNN NNN NN NN JNNNNNN JNN NNNNN JNNF NN NN .NNNF NNN. NNN 4NNN NNN NN NN JNNN NNNN NN NNN NNN NN NN NN . http://xaker.name . script name : Wallpaper...

Wallpaper Site 1.0.09 (category.php) Remote SQL Injection Vulnerability

No description provided by source. . . NN NNNN JNNN NNNN. NNN NNNNNNNNNNN NN NN NNN.NNNF .NNNNN NN """4NNN""" NN NN NNNNNN NNNNN NNN NNN NN NN 4NNNN NNNNNN.NNF NNN NN NN JNNNNL NN NNNNNN NNN NN NN JNNNNNN JNN NNNNN JNNF NN &nbs...

Wallpaper Site 1.0.09 (category.php) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ======================================================================= Wallpaper Site 1.0.09 category.php Remote SQL Injection Vulnerability ======================================================================= . . NN NNNN JNNN NNNN. NN...

Wallpaper Site 1.0.09 - 'category.php' SQL Injection

. . NN NNNN JNNN NNNN. NNN NNNNNNNNNNN NN NN NNN.NNNF .NNNNN NN """4NNN""" NN NN NNNNNN NNNNN NNN NNN NN NN 4NNNN NNNNNN.NNF NNN NN NN JNNNNL NN NNNNNN NNN NN NN JNNNNNN JNN NNNNN JNNF NN NN .NNNF NNN. NNN 4NNN NNN NN NN JNNN NNNN NN NNN NNN NN NN NN . http://xaker.name . script name : Wallpaper...

Wallpaper Site 1.0.09 - category.php SQL Injection

Wallpaper Site 1.0.09 - category.php SQL Injection . . NN NNNN JNNN NNNN. NNN NNNNNNNNNNN NN NN NNN.NNNF .NNNNN NN """4NNN""" NN NN NNNNNN NNNNN NNN NNN NN NN 4NNNN NNNNNN.NNF NNN NN NN JNNNNL NN NNNNNN NNN NN NN JNNNNNN JNN NNNNN JNNF NN NN .NNNF NNN. NNN 4NNN NNN NN NN JNNN NNNN NN NNN NNN NN N...

Re: [VulnWatch] Microsoft Windows Vista Slideshow Unspecified Blue Screen Of Death Vulnerability

Dear Micha? Majchrowicz, This image also effectively exploits stack overflow in FastStone Image Viewer 2.8, EIP is 0x41414141. --Monday, March 26, 2007, 12:20:07 AM, you wrote to [email protected]: MM Everytime you try to turn on the slideshow with a JPG file in the MM folder you get BSoD...

CVE-2006-6215

Multiple SQL injection vulnerabilities in Wallpaper Website Wallpaper Complete Website 1.0.09 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 login or 2 password parameter to a process.php, or the 3 wallpaperid parameter to b dlwallpaper.php...

CVE-2006-6214

SQL injection vulnerability in wallpaper.php in Wallpaper Website Wallpaper Complete Website 1.0.09 allows remote attackers to execute arbitrary SQL commands via the wallpaperid parameter...

CVE-2006-6215

CVE-2006-6215 affects Wallpaper Website (Wallpaper Complete Website) versions 1.0.09 and earlier. The vulnerability is Multiple SQL injection flaws in process.php (login or password parameters) and in dlwallpaper.php (wallpaperid parameter) that allow remote attackers to execute arbitrary SQL com...

CVE-2006-6214

SQL injection vulnerability in wallpaper.php in Wallpaper Website Wallpaper Complete Website 1.0.09 allows remote attackers to execute arbitrary SQL commands via the wallpaperid parameter...

CVE-2006-6214

CVE-2006-6214: SQL injection in Wallpaper Website (Wallpaper Complete Website) 1.0.09, via wallpaperid parameter in wallpaper.php. Remote attackers can execute arbitrary SQL commands. Affected software is the Wallpaper Website product as listed; CVSS v2 base score 7.5 (HIGH) with partial impact o...

CVE-2006-6215

Multiple SQL injection vulnerabilities in Wallpaper Website Wallpaper Complete Website 1.0.09 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 login or 2 password parameter to a process.php, or the 3 wallpaperid parameter to b dlwallpaper.php...

Wallpaper Complete Website Wallpaper.PHP SQL注入漏洞

Wallpaper Complete Website是一款基于PHP的WEB应用程序。 Wallpaper Complete Website不充分过滤用户提交的URI输入，远程攻击者可以利用漏洞进行SQL注入攻击，获得敏感信息。 问题是'Wallpaper.PHP'脚本对用户提交的'wallpaperid'参数缺少过滤，提交恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息。 Wallpaper Wallpaper Complete Website 1.0.9...

security flaw

Firefox 1.0.3 and 1.0.4, and Netscape 8.0.2, allows remote attackers to execute arbitrary code by tricking the user into using the "Set As Wallpaper" in Firefox or "Set as Background" in Netscape context menu on an image URL that is really a javascript: URL with an eval statement, aka "Firewallin...

Fedora Core 4 : firefox-1.0.6-1.1.fc4 (2005-605)

Mozilla Firefox is an open source Web browser. A bug was found in the way Firefox handled synthetic events. It is possible that Web content could generate events such as keystrokes or mouse clicks that could be used to steal data or execute malicious JavaScript code. The Common Vulnerabilities an...

CVE-2005-2262

Firefox 1.0.3 and 1.0.4, and Netscape 8.0.2, allows remote attackers to execute arbitrary code by tricking the user into using the "Set As Wallpaper" in Firefox or "Set as Background" in Netscape context menu on an image URL that is really a javascript: URL with an eval statement, aka "Firewallin...

Mozilla Firefox <= 1.0.4 ""Set As Wallpaper"" Code Execution Exploit

No description provided by source. // Exploit by Michael Krax !DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" html head titleFirewalling - Proof-of-Concept/title script function stopload // in some cases the javascript url never stops to load // therefore we force a stop after the...

Mozilla Firefox 1.0.4 - 'Set As Wallpaper' Code Execution

// Exploit by Michael Krax Firewalling - Proof-of-Concept function stopload // in some cases the javascript url never stops to load // therefore we force a stop after the real image got loaded window.setTimeout"window.stop",1000; Firewalling - Proof-of-Concept The "Set As Wallpaper" dialog takes...

Mozilla Firefox 1.0.4 - Set As Wallpaper Code Execution

Mozilla Firefox 1.0.4 - Set As Wallpaper Code Execution // Exploit by Michael Krax Firewalling - Proof-of-Concept function stopload // in some cases the javascript url never stops to load // therefore we force a stop after the real image got loaded window.setTimeout"window.stop",1000; Firewalling...