Brand039 MMSLamp 'default.php' SQL注入漏洞

Brand039 MMSLamp是一款基于PHP的WEB应用程序。 Brand039 MMSLamp不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞进行SQL注入攻击，可获得敏感信息或操作数据库。 问题是由于'default.php'脚本对用户提交的WEB参数处理缺少充分过滤，提交恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息或操作数据库。 Brand039 MMSLamp 1.0 目前没有解决方案提供： http://www.brand039.com/?service=prodottidettaglio&idpro=4&idm=13...

ZeusCMS 0.3 - Blind SQL Injection

ZeusCMS 0.3 - Blind SQL Injection query"SELECT FROM $table WHERE url like '%$ref%' AND status='BLOCKED'"; numRows0 137. return true; 138. 139. else 140. return false; 141. 142. else 143. return false; 144. an attacker can inject sql code through http referer header, that isn't properly checked...

adult-sql.txt

--------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg --------------------------------------------------------------- Multiple...

MMSLamp - idpro SQL Injection

MMSLamp - idpro SQL Injection Name : mmsLamp SQL Injection Vulnerability. Author : x0kster Email : [email protected] Script Page : http://www.brand039.com/?service=prodottidettaglio&idpro=4 Date : 22/12/2007 Bug in : default.php PoC : http://site.com/default.php?service=prodottidettaglio&idpro=SQ...

DWdirectory <= 2.1 Remote SQL Injection Vulnerability

No description provided by source. --==+================================================================================+==-- --==+ DWdirectory 2.1 AND PRIOR SQL Injection Vulnerbility +==-- --==+================================================================================+==-- AUTHOR: t0pP8uZ...

DWdirectory 2.1 - SQL Injection

DWdirectory 2.1 - SQL Injection --==+================================================================================+==-- --==+ DWdirectory 2.1 AND PRIOR SQL Injection Vulnerbility +==-- --==+================================================================================+==-- AUTHOR: t0pP8uZz &...

Unfixed XSS vulnerability at www.lumberjackdays.com

Security researcher Narcoticxs, has submitted on 12/09/2007 a cross-site-scripting XSS vulnerability affecting www.lumberjackdays.com, which at the time of submission ranked 1473331 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/09/2007. It...

Project Alumni View/News SQL注入漏洞

Project Alumni View/News是一款基于PHP的WEB应用程序。 Project Alumni View/News不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞进行SQL注入攻击，可获得敏感信息或操作数据库。 问题是由于脚本对用户提交的'year'参数缺少过滤，提交恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息或可能操作数据库。 Project Alumni Project Alumni 1.0.9 Project Alumni Project Alumni 1.0.8 目前没有解决方案提供：...

Unfixed XSS vulnerability at class.hit-parade.com

Security researcher meloulisi, has submitted on 20/11/2007 a cross-site-scripting XSS vulnerability affecting class.hit-parade.com, which at the time of submission ranked 47036 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 23/11/2007. It is...

Website vulnerability 2 5 $ 8 $ 8 the genuine card bar-vulnerability warning-the black bar safety net

Two days ago on the Internet to see someone using Kaspersky official sales site of vulnerability, spending 2 to 5 Yuan to buy a value of 8 is 8 yuan a year genuine Kaspersky. Try holding the mood, according to the above steps to try it out. 1, Click on the Enter Kaspersky old users to upgrade pag...

Unfixed XSS vulnerability at www.global-translation-services.com

Security researcher MaXWeL, has submitted on 11/03/2007 a cross-site-scripting XSS vulnerability affecting www.global-translation-services.com, which at the time of submission ranked 317430 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on...

minibb-sql.txt

vuln.: miniBB 2.1 table Remote SQL Injection Exploit download: http://www.minibb.net/download.php?file=minibb21 dork: "These forums are running on" "miniBB" author: [email protected] greets to: str0ke, polish under : '-----------------------------------------------------------------------------' cod...

jobsite-sql.txt

JobSite Professional v2.0 Remote SQL Injection Vulnerability AUTHOR : ZynbER HOME : NoWhere Script WebSite: http://www.jobsiteprofessional.com Dork english version : inurl:index.php?page=enjobseekers Dork french version : inurl:index.php?page=frCandidats EXPLOITS : Vulnerability in File.php?id=...

Unfixed XSS vulnerability at www.vb-ataturkilkogretim.k12.tr

Security researcher turktegin, has submitted on 10/12/2007 a cross-site-scripting XSS vulnerability affecting www.vb-ataturkilkogretim.k12.tr, which at the time of submission ranked 3195450 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on...

Unfixed XSS vulnerability at www.madebyfamily.com

Security researcher BackDoor, has submitted on 23/09/2007 a cross-site-scripting XSS vulnerability affecting www.madebyfamily.com, which at the time of submission ranked 8866423 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 24/09/2007. It is...

Unfixed XSS vulnerability at www.acs.org.au

Security researcher Narcoticxs, has submitted on 21/09/2007 a cross-site-scripting XSS vulnerability affecting www.acs.org.au, which at the time of submission ranked 112140 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 23/09/2007. It is...

KwsPHP 1.0 sondages Module - SQL Injection

KwsPHP 1.0 sondages Module - SQL Injection KwsPHP 1.0 sondages Module Remote SQL Injection Exploit AUTHOR : H-T Team HouSSamix ToXiC350 HOME : http://no-hack.fr & http://no-hack.net Site: http://kws.koogar.org/ Dork : inurl:index.php?mod=sondages EXPLOITS :...

Unfixed XSS vulnerability at search.portaransasrealty.cor.mlxchange.com

Security researcher Norehem, has submitted on 09/08/2007 a cross-site-scripting XSS vulnerability affecting search.portaransasrealty.cor.mlxchange.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on...

Unfixed XSS vulnerability at www.dizellerotomotiv.net

Security researcher CiCoSz, has submitted on 27/08/2007 a cross-site-scripting XSS vulnerability affecting www.dizellerotomotiv.net, which at the time of submission ranked 7394935 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 28/08/2007. It i...

Unfixed XSS vulnerability at tools.the-search.jp

Security researcher kusomiso.com, has submitted on 08/09/2007 a cross-site-scripting XSS vulnerability affecting tools.the-search.jp, which at the time of submission ranked 159402 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/09/2007. It i...