5643 matches found
CVE-2012-0982
CVE-2012-0982 describes an SQL injection vulnerability in Vastal I-Tech Agent Zone (aka The Real Estate Script). The issue exists in search.php and allows remote attackers to execute arbitrary SQL commands through the price_from parameter. The description explicitly notes remote exploitation with...
CVE-2012-0982: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in search.php in Vastal I-Tech Agent Zone aka The Real Estate Script allows remote attackers to execute arbitrary SQL commands via the pricefrom parameter...
PT-2012-2988
Name of the Vulnerable Software and Affected Versions Vastal I-Tech Agent Zone aka The Real Estate Script affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the price from parameter in the "search.php" endpoint...
Agent Zone Vastal I-Tech Real Estate SQL Injection
Agent Zone Vastal I-Tech Blind SQL Injection Vulnerability Date: 31.01.2012 Author: Cagri Tepebasili Software : http://www.vastal.com/agent-zone-real-estate-script.html Tested on: Linux Mint 12 The First Step http://www.vastal.com/real/search.php?pricefrom=1000000.00+and+1=1&priceto=10000000.00 T...
Vastal I-Tech Agent Zone (search.php) Blind SQL Injection Vulnerability
Exploit for php platform in category web applications Agent Zone Vastal I-Tech Blind SQL Injection Vulnerability Date: 31.01.2012 Author: Cagri Tepebasili Software : http://www.vastal.com/agent-zone-real-estate-script.html Tested on: Linux Mint 12 The First Step...
Vastal I-Tech Agent Zone - search.php Blind SQL Injection
Vastal I-Tech Agent Zone - search.php Blind SQL Injection Agent Zone Vastal I-Tech Blind SQL Injection Vulnerability Date: 31.01.2012 Author: Cagri Tepebasili Software : http://www.vastal.com/agent-zone-real-estate-script.html Tested on: Linux Mint 12 The First Step...
Vastal I-Tech Agent Zone - 'search.php' Blind SQL Injection
Agent Zone Vastal I-Tech Blind SQL Injection Vulnerability Date: 31.01.2012 Author: Cagri Tepebasili Software : http://www.vastal.com/agent-zone-real-estate-script.html Tested on: Linux Mint 12 The First Step http://server/real/search.php?pricefrom=1000000.00+and+1=1&priceto=10000000.00 The Secon...
Zone Rouge CMS 2012 - SQL Injection Vulnerability
Document Title: =============== Zone Rouge CMS 2012 - SQL Injection Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=391 Release Date: ============= 2012-01-21 Vulnerability Laboratory ID VL-ID: ==================================== 391 Produ...
Zone Rouge CMS 2012 - SQL Injection Vulnerability
Document Title: =============== Zone Rouge CMS 2012 - SQL Injection Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=391 Release Date: ============= 2012-01-21 Vulnerability Laboratory ID VL-ID: ==================================== 391 Produ...
Zone Rouge CMS 2012 SQL Injection Vulnerability
Exploit for php platform in category web applications Exploit Title: Zone Rouge CMS 2012 - SQL Injection Vulnerability Google Dork: inurl:"driver.php?langue=" Date: 2012-01-21 Author: David Frankenstein Software Link: http://zonerouge.fr Version: Tested on: Exploit: Vulnerable Files: + driver.php...
MMORPG Zone - view_news.php SQL Injection
MMORPG Zone - viewnews.php SQL Injection source: https://www.securityfocus.com/bid/51532/info MMORPG Zone is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...
Freelance Zone - 'show_code.php' SQL Injection
source: https://www.securityfocus.com/bid/51533/info Freelance Zone is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modif...
MMORPG Zone - 'view_news.php' SQL Injection
source: https://www.securityfocus.com/bid/51532/info MMORPG Zone is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify...
Freelance Zone - show_code.php SQL Injection
Freelance Zone - showcode.php SQL Injection source: https://www.securityfocus.com/bid/51533/info Freelance Zone is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...
CVE-2011-5056
The authoritative server in MaraDNS through 2.0.04 computes hash values for DNS data without restricting the ability to trigger hash collisions predictably, which might allow local users to cause a denial of service CPU consumption via crafted records in zone files, a different vulnerability than...
CVE-2011-5056
Removed by vendor...
CVE-2011-5056: Uncontrolled Resource Consumption
The authoritative server in MaraDNS through 2.0.04 computes hash values for DNS data without restricting the ability to trigger hash collisions predictably, which might allow local users to cause a denial of service CPU consumption via crafted records in zone files, a different vulnerability than...
PT-2012-2035
Name of the Vulnerable Software and Affected Versions MaraDNS versions through 2.0.04 Description The issue allows local users to cause a denial of service, specifically CPU consumption, by crafting records in zone files that trigger hash collisions predictably. This is due to the lack of...
