CVE-2012-1026

Multiple SQL injection vulnerabilities in login2.php in XRay CMS 1.1.1 allow remote attackers to execute arbitrary SQL commands via the 1 username or 2 password parameters...

Sql injection

Multiple SQL injection vulnerabilities in login2.php in XRay CMS 1.1.1 allow remote attackers to execute arbitrary SQL commands via the 1 username or 2 password parameters...

CVE-2012-1026

Multiple SQL injection vulnerabilities in login2.php in XRay CMS 1.1.1 allow remote attackers to execute arbitrary SQL commands via the 1 username or 2 password parameters...

CVE-2012-1026

CVE-2012-1026 affects XRay CMS 1.1.1. The vulnerability is in login2.php, where SQL injection is possible via the username or password parameters. The documents state that remote attackers can execute arbitrary SQL commands, implying potential data exposure or modification. No remediation or patc...

CVE-2012-1026: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in login2.php in XRay CMS 1.1.1 allow remote attackers to execute arbitrary SQL commands via the 1 username or 2 password parameters...

PT-2012-3025

Name of the Vulnerable Software and Affected Versions XRay CMS version 1.1.1 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the username or password parameters in the login2.php file. Recommendations For XRay CMS version 1.1.1, update to a...

XRayCMS 1.1.1 - SQL Injection

XRayCMS 1.1.1 - SQL Injection Exploit Title: XRayCMS 1.1.1 SQL Injection Vulnerability Date: 2/5/2012 Author: chap0 Software Link: http://sourceforge.net/projects/xraycms/files/latest/download Version: 1.1.1 Tested on: Ubuntu XRay CMS is vulnerable to a SQL Injection attack which allows...

Edimax AR-7084GA Router - Cross-Site Request Forgery / Persistent Cross-Site Scripting

25 die"One or more of the parts can't be longer then 25 characters!"; $url="http://".$SERVER"SERVERNAME".$SERVER"REQUESTURI"; for$i=1; $i'; die; else $time=$GET"time"; $script=$GET"script"; ? /Forms/advnatvirsvr1" name="VIRTUALSVRform"...

TopDownloads MP3 Player 1.0 - '.m3u' Crash

!/usr/bin/env python MP3 player 1.0 Local Crash Author: l3D Software Link: http://files.brothersoft.com/mp3audio/players/td-mp3.exe Site: http://xraysecurity.blogspot.com IRC: irc://irc.nix.co.il Email: [email protected] bad=open'crash.mp3', 'w' bad.write'A'0x1000 bad.close...