and repair

Title: SQL Injection MyStore Tienda Virtual |Author: Arturo Zamora Arturo_zamora_c@hotmail.com |Developer: MyStore Tienda Virtual http://www.mystore.com.mx/|Test

Title: Typo3 v4.5-4.7-Remote Code Execution (RFI/LFI)Author: MaXe: Https://typo3.org/download/Affected Versions: 4.5.0 up to 4.5.8, 4.6.0 and 4.6.1 (+ development releases4.7 branch) Introduction:TYPO3 is a small to midsize enterprise-class Content

Title: Posse Sports SQL Injection VulnerabilitiyPrepared by: H4ckCity Security Team farbodmahini www.2cto.com WwW. H4ckCity. OrgProgram address: www.possesports.comAll versions affectedTest Platform: GNU/Linux Ubuntu-Windows Server-win7##############

Title: DIGIT Cms SQL Injection/XSS Multiple VulnerabilityAuthor: BHG Security Center: Http://www.dig-it.co.il/Affected Versions: [1.0.7]Test Platform: ubuntu 11.04Discoverer list-Net. Edit0r (Net. edit0r [at] att [dot] net)-G3n3Rall (Ant1_s3cur1ty

[»] TinyWebGallery 1.8.3 Remote Command ExecutionAuthor: Explain 0! Ts --------> My Best t34m -----> "BaC, RoBert MilEs, Bl4ck_ID"Address: http://www.tinywebgallery.com/dl.php? File = twg_latestTest Platform wind xp ! -----> THnKs T0 My ALLAHBIG

Title: Multiple Vulnerability on ClipBucket 2.6Author: YaDoY666Develop this Website: http://yadoy666.serverisdown.orgProgram: Clip Bucket (Open Source Video Sharing)Affected Versions: 2.6 Cross Site Scripting================================ [[=]

Title: WordPress wp-autoyoutube plugin Blind SQL InjectionVulnerabilityAuthor: longrifle0x www.2cto.comSoftware: Wordpress: Http://wordpress.org/extend/plugins/wp-autoyoutube/Test Tool: SQLMAPOverviewWordpress plug-in wp-autoyoutube was found to

Apusic Web ConsoleDefault backend address: admin/login. jspDefault management account password: admin Method of exploits: the backend can execute SQL statements or load Shenma. The specific words are missing ~Find the place to upload. If you see the

Title: pGB 2.12 SQL Injection VulnerabilityAuthor: 3spi0nSoftware Website: http://www.powie.de/Test Platform: BackTrack 5-Win7 UltimatePlatform: Php>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>[$] Defect file: [~] Kommentar. php [$] Test

Brief description: MIUI mobile phone control-Xiaomi mobile phone xss VulnerabilityHttp://kong.miui.com/user_22710%22%20onerror=%22alert%28document.cookie%29%22Parameters are not filtered and referenced directly on the page.   Proof of vulnerability:

The pt novel system kills the version. Patch released officially! (Fuck !) Let's get started with the following text: Here is our own communication platform, a technology sharing platform for all our 90sec members!This set of program users do not

Program: http://wapvy.cn/FILE/DOWNLOAD/2011/07/09/2011070902255801.rar  First injection: http://www.bkjia.com/bbs/bbsvice. asp? Action = view & id = [SQL]Filtering; chicken ribs The second serial number is used to kill the wap mobile phone network

Brief description: songtaste, which can be injected into a file and can be taken out of pants directly.Detailed Description: playmusic. php does not filter submitted parameters, resulting in injection.Proof of vulnerability:

Title: Cyberoam Central Console v2.00.2-File Include VulnerabilityOverview: Cyberoam Central Console (CCC) appliances offer the flexibility of hardware CCC appliances and virtual CCCAppliances to provide centralized security management Guest SS

Title: BASE 1.4.5 SQL Injection VulnerabilityAuthor: a. kadir altan (testpenter_AT_gmail.com): Http://base.secureideas.netAffected Version: 1.4.5Test Platform: PHP##########################BASE Snort Analysis Front-end SQLi VulnerabilityVulnerable

Title: PBBoard v2.1.4 KedAns-Dz www.2cto.com ked-h@hotmail.com | ked-h@exploit-id.com | kedans@facebook.comFacebook: http://facebook.com/KedAnsScript: phpDefect category: Multiple XSRF/FUTest Platform: Windows XP-SP3 Fr### ### |> -------- ++ = [Dz

Brief description:The management files in the background only perform cookie verification. You can perform cookie spoofing on a remote client to obtain the management system permission.Detailed description: 'Permission settings // verification

Title: SyndeoCMS By Ivano Binetti (http://ivanobinetti.com)Program Development Site: http://www.syndeocms.org/: Http://sourceforge.net/projects/syndeocmsAffected Versions: 3.0 and earlierTest System Platform: Debian Squeeze (6.0)+ -------------- +

|__ | _/|__] |__ | | __/| |___ | ___ | |||||\_ |__] ||| \========================================================== ==========================================================####Title: Sagem F @ ST 2604 CSRF Vulnerability (ADSL Router)Author: KinG

Title: webgrind 1.0 (file param) Local File isolation sion VulnerabilityBy Joakim Nygard and Jacob OettingerDeveloper: http://code.google.com/p/webgrindAffected Versions: 1.0 (v1.02 in trunk on github)Abstract:Webgrind is an Xdebug profiling web