Websecurity - Веб безпека

В даній добірці експлоіти в веб додатках:

• Yoxel <= 1.23beta (itpm_estimate.php a) Remote Code Execution Vuln (деталі)
• PHP-Lance 1.52 (show.php catid) Remote SQL Injection Vulnerability (деталі)
• ParsaWeb CMS (Search) Remote SQL Injection Vulnerability (деталі)
• ZEELYRICS 2.0 (bannerclick.php adid) SQL Injection Vulnerability (деталі)
• BbZL.PhP 0.92 (lien_2) Local Directory Traversal Vulnerability (деталі)
• Pilot Group eTraining (news_read.php id) SQL Injection Vulnerability (деталі)
• Pro Chat Rooms 3.0.3 (guid) SQL Injection Vulnerabilities (деталі)
• PHPcounter <= 1.3.2 (index.php name) Remote SQL Injection Exploit (деталі)
• MiNBank 1.5.0 Multiple Remote File Inclusion Vulnerability (деталі)
• SG Real Estate Portal 2.0 Blind SQL Injection/Local File Inclusion Vulns (деталі)
• FAQ Management Script (catid) Remote SQL Injection Vulnerability (деталі)
• ArabCMS (rss.php rss) Local File Inclusion Vulnerability (деталі)
• PG Matchmaking Script Multiple SQL Injection Vulnerabilities (деталі)
• Post Comments 3.0 Insecure Cookie Handling Vulnerability (деталі)
• Firebird remote BOF POC (деталі)

This entry was posted on 17:34 17.03.2009 and is filed under Експлоіти. You can follow any responses to this entry through the RSS 2.0 feed.