EUVD-2009-4527

Malware in sbrugna...

EUVD-2009-4526

Malware in sbrugna...

CVE-2009-4560

SQL injection vulnerability in profile.php in WebLeague 2.2.0 allows remote attackers to execute arbitrary SQL commands via the name parameter...

Sql injection

SQL injection vulnerability in profile.php in WebLeague 2.2.0 allows remote attackers to execute arbitrary SQL commands via the name parameter...

Sql injection

Multiple SQL injection vulnerabilities in Admin/index.php in WebLeague 2.2.0, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 username and 2 password parameters...

CVE-2009-4561

Multiple SQL injection vulnerabilities in Admin/index.php in WebLeague 2.2.0, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 username and 2 password parameters...

CVE-2009-4560

SQL injection vulnerability in profile.php in WebLeague 2.2.0 allows remote attackers to execute arbitrary SQL commands via the name parameter...

CVE-2009-4561

Multiple SQL injection vulnerabilities in Admin/index.php in WebLeague 2.2.0, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 username and 2 password parameters...

CVE-2009-4561

CVE-2009-4561 affects WebLeague 2.2.0 (Admin/index.php). The vulnerability consists of multiple SQL injection flaws that allow remote attackers to execute arbitrary SQL commands via the (1) username and (2) password parameters when magic_quotes_gpc is disabled. The NVD entry documents a CVSS v2 b...

WebLeague 2.2.0 Password Changer

TiGeR-Dz WebLeague 2.2.0 install.phpRemote Change Password By: TiGeR-Dz POC :http://www.victim.com/path/install.php Put Name and password : Dork:"powered by: WebLeague" TiGeR-Dz...

WebLeague 2.2.0 SQL Injection / Authentication Bypass

!/usr/bin/perl -W WebLeague 2.2.0 Remote Admin Bypass p0c written by ka0x need magicquotesgpc = Off Vuln code Admin/index.php : 10: $sql="SELECT FROM $admintable WHERE name = '$POSTusername' AND password = '$POSTpassword'"; // --- NOT CLEAN $POST VARS 11: $result=mysqlquery$sql,$db; 12: $number =...

WebLeague 2.2.0 SQL Injection

DESCRIPTION: WebLeague 2.2.0 profile.php Remote SQL Injection DISCOVERED BY: Arka69 BUG: SQL Injection DOWNLOAD: http://www.worms-league.com/WebLeague/WebLeague2.2.0.zip EXPLOIT: profile.php?name='+UNION+SELECT+1,password,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22+FROM+webladmin%23...

webLeague 2.2.0 (install.php) Remote Change Password Exploit

Exploit for unknown platform in category web applications ============================================================ webLeague 2.2.0 install.php Remote Change Password Exploit ============================================================ WebLeague 2.2.0 install.phpRemote Change Password By:...

webLeague 2.2.0 - install.php Remote Change Password

webLeague 2.2.0 - install.php Remote Change Password TiGeR-Dz WebLeague 2.2.0 install.phpRemote Change Password By: TiGeR-Dz POC :http://www.victim.com/path/install.php Put Name and password : Dork:"powered by: WebLeague" TiGeR-Dz milw0rm.com 2009-07-16...

webLeague 2.2.0 (Auth Bypass) Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl -W WebLeague 2.2.0 Remote Admin Bypass p0c written by ka0x ka0x01atgmail.com need magicquotesgpc = Off Vuln code Admin/index.php : 10: $sql="SELECT FROM $admintable WHERE name = '$POSTusername' AND password = '$POSTpassword'"; // --- NOT CLEAN $PO...

webLeague 2.2.0 (install.php) Remote Change Password Exploit

No description provided by source. TiGeR-Dz WebLeague 2.2.0 install.phpRemote Change Password By: TiGeR-Dz POC :http://www.victim.com/path/install.php Put Name and password : Dork:"powered by: WebLeague" TiGeR-Dz sebug.net...

webLeague 2.2.0 - 'install.php' Remote Change Password

TiGeR-Dz WebLeague 2.2.0 install.phpRemote Change Password By: TiGeR-Dz POC :http://www.victim.com/path/install.php Put Name and password : Dork:"powered by: WebLeague" TiGeR-Dz milw0rm.com 2009-07-16...

webLeague 2.2.0 - Authentication Bypass

!/usr/bin/perl -W WebLeague 2.2.0 Remote Admin Bypass p0c written by ka0x need magicquotesgpc = Off Vuln code Admin/index.php : 10: $sql="SELECT FROM $admintable WHERE name = '$POSTusername' AND password = '$POSTpassword'"; // --- NOT CLEAN $POST VARS 11: $result=mysqlquery$sql,$db; 12: $number =...

WebLeague 2.2.0 (profile.php) SQL Injection Vulnerability

No description provided by source. DESCRIPTION: WebLeague 2.2.0 profile.php Remote SQL Injection DISCOVERED BY: Arka69 BUG: SQL Injection DOWNLOAD: http://www.worms-league.com/WebLeague/WebLeague2.2.0.zip EXPLOIT:...

WebLeague 2.2.0 (profile.php) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ========================================================= WebLeague 2.2.0 profile.php SQL Injection Vulnerability ========================================================= DESCRIPTION: WebLeague 2.2.0 profile.php Remote SQL Injection...