Persia BME E-Catalogue - SQL Injection

Persia BME E-Catalogue - SQL Injection www.BugReport.ir AmnPardaz Security Research Team Title: Persia BME E-Catalogue SQL Injection Vulnerability Vendor: http://www.persiabme.com/products/ Impact: High Fix: N/A Original Advisory: http://www.bugreport.ir/index55.htm 1. Description: Persia BME...

persiabme-sql.txt

www.BugReport.ir AmnPardaz Security Research Team Title: Persia BME E-Catalogue SQL Injection Vulnerability Vendor: http://www.persiabme.com/products/ Impact: High Fix: N/A Original Advisory: http://www.bugreport.ir/index55.htm 1. Description: Persia BME E-Catalogue is a powerful engine which...

Persia BME E-Catalogue Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ========================================================= Persia BME E-Catalogue Remote SQL Injection Vulnerability =========================================================...

Advanced Electron Forum 1.0.6 - Remote Code Execution

GulfTech Security Research September 20, 2008 Vendor : Electron Inc. URL : http://www.anelectron.com/ Version : AEF Forum = 1.0.6 Risk : Remote Code Execution Description: Advanced Electron Forum also known as AEF Forum is a full featured online forum system written in php that allows webmasters...

E-topbiz Dating 3 PHP Script (mail_id) Remote SQL Injection Vulnerability

No description provided by source. ================================================================================ || Dating 3 PHP Script SQL-INJECTION ================================================================================ Application: E-topbiz Dating 3 PHP Script ------------ Version:...

etopbiz-sql.txt

================================================================================ || Dating 3 PHP Script SQL-INJECTION ================================================================================ Application: E-topbiz Dating 3 PHP Script ------------ Version: 1.0 -------- Website:...

LightBlog Remote File Upload Vulnerability

LightBlog 9.5 - REMOTE FILE UPLOAD VULNERABILITY by Omni 1 Infos --------- Date : 2008-01-30 Product : LightBlog Version : v 9.5 Vendor : http://www.publicwarehouse.co.uk/ Vendor Status : 2008-01-31 Informed! 2008-01-31 Patch received from vendor! 2008-02-01 Published! Description : Lightblog...

Analysis of ANI intelligent network horse hung it-vulnerability warning-the black bar safety net

A thorough analysis of MS06014+MS06073+MS07017 intelligent network horse hanging Horse,the article is in breach of that can see,even a little problem,want to is unclear,and so learn again to analyze the next,article is nice,to see the figure you know! Today visit to http://www. fzlyl. cn/, found ...

omnistar-xss.txt

HSC Omnistar Live Software Cross-Site Scripting Vulrnability Omnistar Live is web based PHP help desk software used by webmasters that combines live chat and helpdesk software in one easy to use solution. Our customer service software combines ticketed support web and email based, live chat and a...

Omnistar Live Software Cross-Site Scripting Vulrnability

HSC Omnistar Live Software Cross-Site Scripting Vulrnability Omnistar Live is web based PHP help desk software used by webmasters that combines live chat and helpdesk software in one easy to use solution. Our customer service software combines ticketed support web and email based, live chat and a...

Pics Navigator Directory Traversal Vulnerability

Pics Navigator Directory Traversal Vulnerability By : sn0oPy Risk : medium site : http://www.jeunes-webmasters.com/ Dork : "Powered by J-Web Pics Navigator v2.0" | inurl:"jwpn-photos.php" | exploit : for the v1.0 http://www.target/gallery directory/pn-menu.php?ret=Pics20Navigator&dir=../../../ fo...

Yourfreeworld Styleish Text Ads Script

Homepage of script http://www.yourfreeworld.com/script/textads.asp Stylish Text Ads Script can be one of the most useful tools for any webmaster. If you own 1 or more websites and want to sell text ads then this tool can be one of the best tool for you. Effected files: tr1.php advertise.php...

eWebEditor: the website of the invisible bomb-vulnerability warning-the black bar safety net

Article author: koshan Information source: http://www.hacker.com.cn/ Dear webmasters in using the eWebEditor is found, eWebEditor improperly configured so that it will become the site of the Unabomber? The first discovery of this vulnerability stems from last year's invasion, in the dead end of t...

DreamPoll SQL inj.

DreamPoll SQL inj. Vuln. dicovered by : r0t Date: 14 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/dreampoll-sql-inj.html vendor:http://dreamlevels.com/dreampoll.php affected version: 3.0 final and prior Product Description: DreamPoll is an enhanced version of Advanced Poll Build...

[Full-disclosure] Miva Merchant 4.x Tax Calculation Bypass Vulnerability w/ PoC

Miva Merchant is one of the largest non-free online shopping carts used by bulk web-hosting sites. Miva allows small to medium shops to get online and sell their products without the hassle of learning to code custom scripts that would probably do much more for much less money. All this simplicit...

CVE-2005-0915

Webmasters-Debutants WD Guestbook 2.8 allows remote attackers to bypass authentication and perform certain administrator actions via a direct HTTP POST request to 1 ajoutadmin2.php or 2 suppr.php...

phpBB Notes Mod SQL Injection Vulnerability

GulfTech Security Research April 27th, 2005 Vendor : Oxpus URL : http://www.oxpus.de/ Version : All Versions Risk : SQL Injection Vulnerability Description: oxpus.de author many popular modules and hacks for the amazingly popular phpBB software. One of these modules allows users to keep their own...

CVE-2005-0915

Webmasters-Debutants WD Guestbook 2.8 is affected by an authentication bypass vulnerability. A remote attacker can bypass authentication and perform administrator actions via a direct HTTP POST to (1) ajout_admin2.php or (2) suppr.php. The NVD entry lists a CVSSv2 base score of 7.5 (HIGH) with ne...

pafileDB31.txt

-= SecurityReason-2005-SRA03 =- -= SQL injection and XSS in paFileDB =- Author: sp3x Date: 12 March 2005 Affected software : =================== paFileDB version : =3.1 Description : ============= paFileDB is designed to allow webmasters have a database of files for download on their site. To add...

Textor Webmasters Ltd listrec.pl does not adequately validate user input thereby allowing arbitrary commands to be executed

Overview Textor Webmasters Ltd listrec.pl CGI script does not properly validate input to the "TEMPLATE" CGI variable, allowing arbitrary command execution. Description The CGI script listrec.pl by Textor Webmasters Ltd does not properly validate input to the "TEMPLATE" CGI variable. This value is...