saphpSQL.txt

=========================================== Discovered By: C.B.B.L CrAzY CrAcKeR ,Breeeeh ,BoNy-m ,LiNuXrOOt =========================================== Search:- powered by: saphp Example:- story/add.php?forumid=SQL Injection ===========================================...

VBZooM-show.txt

============================================= Discovered By: CrAzY CrAcKeR Site:www.alshmokh.com I want to thank my friend:- nono225-mHOn-rageh-Lover Hacker-Sw33t h4ck3r Breeeeh-BoNym-Rootshill-LiNuXrOOt-SauDiVirUs ============================================= Example:-...

mafiamoblog.txt

Produce : Mafia Moblog WebSite :http://mafia.pearlabs.org Version : 6 Full and Prior Discovred By :Moroccan Security Research Team Simo64 IMPACT : Manipulation of data, System access + Full Path Disclosure : The problem is that it is possible to disclose the full path to 'big.php','upgrade.php' b...

bug on showwich.asp

Azhteam Digital Security Team showwish.asp Find by Soltandefacer Greetings; s.defacer - azhteam - lvl3hr Contact: soltandefacer@xxxxxxxxx or http://www.azhteam.com Dork: inurl:/showwish.asp USER default: admin PASS default: admin Example: www.site.com/showwish.asp Urls xpl:...

poll.pl<--remote commands execution exploit

Subject:poll.pl--remote commands execution ----------------- foud by:CrAzY CrAcKeR ::::...alshmokh team...:::: Site: http://www.alshmokh.com ----------------- Bug is found in this script: open HAND,"/web/htdocs/ronpoll/question" || die "Error opening file polldata $!|n"; while HAND print;...

Matt Wright Guestbook 2.3.1 - Guestbook.pl Multiple HTML Injection Vulnerabilities

Matt Wright Guestbook 2.3.1 - Guestbook.pl Multiple HTML Injection Vulnerabilities source: https://www.securityfocus.com/bid/17438/info Guestbook is prone to multiple HTML-injection vulnerabilities; the application fails to properly sanitize user-supplied input before using it in dynamically...

SQL Injection in DCI-Taskeen

Hello Vulnerable: DCI-Taskeen v1.03 http://www.dci-designs.com Exploit : http://example.com/basket.php?action=addex&id=SQL http://example.com/basket.php?action=SQL http://example.com/basket.php?action=addr&id=SQL http://example.com/cat.php?do=cat&page=1&id=SQL http://example/cat.php?do=cat&page=S...

XSS bugs and SQL injection in sNews

Official page : http://www.solucija.com/home/snews/ XSS in comments : just post some comment with scriptalert'XSS TEST by securitydot.net';/script FIX : put this on 423 line $r = strreplace "","&lt",$r; $r = strreplace "","&lg",$r; Injection through categories : index.php?category=120or201=2 FIX ...

CheesyBlog 1.0 - Multiple HTML Injection Vulnerabilities

CheesyBlog 1.0 - Multiple HTML Injection Vulnerabilities source: https://www.securityfocus.com/bid/16376/info CheesyBlog is prone to multiple HTML injection vulnerabilities. These issues are due to a lack of proper sanitization of user-supplied input before using it in dynamically generated...

WHITEAlbum Sql Injection

WHITEAlbum Sql Injection Website:http://whiteangle.com/ ------------------------------------------------------------------- exploit : http://victim/folder/pictures.php?dir=SQL ------------------------------------------------------------------- Credit:Liz0ziM mail:[email protected]...

Randshop all versiyon Sql Эnjection

Randshop all versiyon Sql Injection Website:http://www.randshop.com Demo:http://www.randshop.com/demoshop/ ------------------------------------------------------------------- Credit:Liz0ziM & wannacut Mail:[email protected] www.biyo.tk...

PluggedOut CMS 0.4.8 - 'contenttypeid' SQL Injection

source: https://www.securityfocus.com/bid/14426/info PluggedOut CMS is prone to multiple cross-site scripting and SQL injection vulnerabilities. Exploitation could allow for theft of cookie-based authentication credentials or unauthorized access to database data. Other attacks are also possible...

jagoff.txt

Vendor: http://www.isemarket.com Bug: JaguarControl can crash Internet Explorer Found: Tacettin Karadeniz E-Mail: tacettinkaradeniz at yahoo.com Vendor Status: Reported The exploit can cause Internet Explorer to crash andor the execution of arbitrary code on the user's computer. !-- msgbox"XXXXXX...

alexPHP.txt

Informations : °°°°°°°°°°°°°° Website : http://www.alexphpteam.com Version : all Problem : Include file PHP Code/Location : °°°°°°°°°°°°°°°°°°° ./include/livreinclude.php ------------------------------------------------------------------ if !$noconnect.... some include functions...

VisNetic WebSite XSS vulnerability through HTTP referer header

Visnetic WebSite XSS vulnerability through HTTP Referer header --------------------------------------------------------------------------------------------- = Author: Ory Segal - Sanctum inc. http://www.sanctuminc.com/ = Release date: 09/12/2002 = Vendor: Deerfield http://www.deerfield.com The...

Philip Chinery's Guestbook 1.1 fails to filter out js/html

Target: Philip Chinery's Guestbook 1.1 maybee older versions? Vendor: http://www.sector7g.de.vu Notified Vendor: Sure Affected Systems: Webservers that run "Philip Chinery's Guestbook 1.1" Found by: Markus [email protected] Short Description: Philip Chinery's Guestbook 1.1 fails to filter...