Prozilla Pub Site Directory - 'Directory.php?cat' SQL Injection

--==+================================================================================+==-- --==+ Prozilla Pub Site Directory SQL Injection Vulnerbility +==-- --==+================================================================================+==-- AUTHOR: t0pP8uZz & xprog SITE: prozilla.com DORK...

WSN Links Basic Edition - catid SQL Injection

WSN Links Basic Edition - catid SQL Injection --==+================================================================================+==-- --==+ WSN Links Basic Edition SQL Injection Vulnerbility +==-- --==+================================================================================+==-- AUTHOR...

Unfixed XSS vulnerability at www.freedomain.co.nr

Security researcher Stuarty, has submitted on 20/07/2007 a cross-site-scripting XSS vulnerability affecting www.freedomain.co.nr, which at the time of submission ranked 40452 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 04/08/2007. It is...

expert-sql.txt

--==+================================================================================+==-- --==+ Expert Advisior SQL Injection Vulnerbility +==-- --==+================================================================================+==-- AUTHOR: t0pP8uZz & xprog SITE: N/A DORK: intitle:"Answer...

Expert Advisior - index.php?id SQL Injection

Expert Advisior - index.php?id SQL Injection --==+================================================================================+==-- --==+ Expert Advisior SQL Injection Vulnerbility +==-- --==+================================================================================+==-- AUTHOR: t0pP8uZ...

trafficstats-sql.txt

--==+================================================================================+==-- --==+ Traffic Stats SQL Injection Vulnerbility +==-- --==+================================================================================+==-- AUTHOR: t0pP8uZz & xprog SITE: N/A DORK: allintext:" If you...

Expert Advisior - 'index.php?id' SQL Injection

--==+================================================================================+==-- --==+ Expert Advisior SQL Injection Vulnerbility +==-- --==+================================================================================+==-- AUTHOR: t0pP8uZz & xprog SITE: N/A DORK: intitle:"Answer...

Traffic Stats - 'referralUrl.php?offset' SQL Injection

--==+================================================================================+==-- --==+ Traffic Stats SQL Injection Vulnerbility +==-- --==+================================================================================+==-- AUTHOR: t0pP8uZz & xprog SITE: N/A DORK: allintext:" If you...

paFileDB 3.6 - 'search.php' SQL Injection

Site: http://www.phparena.net/pafiledb Description: SQL injection categories in includes/search.php Code: $results = $db-GetArray"SELECT FROM ".$dbPrefix."files WHERE ".$searchin." AND filecatid IN ".implode',',$POST'categories'.""; Comment:"ouuch" SQL: UNION SELECT ALL...

Girlserv Ads Details_News.PHP SQL注入漏洞

BUGTRAQ ID: 24755 CNCAN ID:CNCAN-2007070402 Girlserv Ads是一款基于PHP的WEB应用程序。 Girlserv Ads不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞进行SQL注入攻击获得敏感信息。 问题是由于'DetailsNews.PHP'脚本对用户提交的'idnew'参数缺少过滤，提交恶意SQL查询作为参数数据，可导致应用程序处理时更改原来的SQL逻辑，攻击者可以获得敏感信息或者操作数据库。 Girlserv ads 1.5 目前没有解决方案提供： http://www.girlserv-demo.com/...

PHP Director Videos.PHP SQL注入漏洞

PHP Director是一款基于PHP的WEB应用程序。 PHP Director不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞进行SQL注入攻击获得敏感信息。 问题是由于'Videos.PHP'脚本对用户提交的'id'参数缺少过滤，提交恶意SQL查询作为参数数据，可导致应用程序处理时更改原来的SQL逻辑，攻击者可以获得敏感信息或者操作数据库。 PHPDirector 0.21 目前没有解决方案提供： http://www.phpdirector.co.uk/site/...

Buddy Zone 1.5 - Multiple SQL Injections

Buddy Zone 1.5 - Multiple SQL Injections --==+================================================================================+==-- --==+ Buddy Zone Version 1.5 And Prior SQL Injection Vulnerability +==-- --==+================================================================================+==--...

Elkagroup Image Gallery 1.0 - SQL Injection

Elkagroup Image Gallery 1.0 - SQL Injection --==+================================================================================+==-- --==+ Image Gallery 1.0 SQL Injection Vulnerbilitys +==-- --==+================================================================================+==-- AUTHOR:...

shop-xss.txt

Overview http://wwww.shopathometv.com, A popular website whos television program runs late night on local syndicated television is vulnerable to multiple xxs flaws. While shopping their site last night, they did not have a product I was looking for when I entered an item number so I decided to te...

quickcart-exec.txt

?php / Exploit Name: Quick.Cart = v2.2 Remote Local Include Exploit & Remote Code Execution Exploit Autor: Kacper Contact: [email protected] Homepage: http://www.rahim.webd.pl/ Kacper Hacking & Security Blog: http://kacper.bblog.pl/ Irc: irc.milw0rm.com:6667 devilteam Pozdro dla wszystkich z...

waraxe-2007-SA051.txt

waraxe-2007-SA051 - Sql Injection in 2z Project 0.9.5 ==================================================================== Author: Janek Vind "waraxe" Date: 23. May 2007 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-51.html Target software description: Vulnerable: 2z Project 0.9.5...

BlogMe 3.0 - 'archshow.asp?var' SQL Injection

Discoveredby:gsy&kerem125 Website:www.kerem125.com ScriptDownload:http://www.drumster.net/gamma/products.asp must buy exploit:/blogme/archshow.asp?var=-99%20Union+all+select+0,1,2,3,4,username,password,7,8,9,10,0+from+admin contact:[email protected]&[email protected]...

Unfixed XSS vulnerability at www.micahempowers.org

Security researcher frosTMaturidi, has submitted on 05/07/2007 a cross-site-scripting XSS vulnerability affecting www.micahempowers.org, which at the time of submission ranked 6480303 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/07/2007. ...

dxbbs注入漏洞

在UserFriend.aspx过滤了=Add&Name=admin加上'' 典型的过滤不严,导致注入漏洞. dxbbs 7.3 http://www.dxbbs.cn/ http://www.winshell.cn/read.php?508 SQL版测试方法: serFriend.aspx过滤了=Add&Name=大蝉;Update Dxbbsuser set userpass=''7a57a5a743894a0e'' where username=''admin'';--...

Unfixed XSS vulnerability at www.norred.de

Security researcher BackDoor, has submitted on 04/11/2007 a cross-site-scripting XSS vulnerability affecting www.norred.de, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/11/2007. It is currently...