Browse by Tag

ajax blog blog archive categories code css database database security databases development exploit flat guitar hosting injection internet javascript Links linux menu mysql MySQL Security network new news password perl mysql php php mysql security programming query really simple syndication registerwidget search security select seo server software sql sql injection technology update utf vulnerability web widgetinfo widgetmanager wordpress xml

xoops mylinks module - sql injection

I have found a mysql injection vulnerability in. mylinks xoops module. brokenlink.php page where. $_GET[’lid’] is not validated by intval() …

The rest is here:
xoops mylinks module - sql injection

atom bugtraq security bugtraq security focus edit me focus injection module module sql mysql sql xoops mylinksatom, bugtraq security, bugtraq security focus, edit me, focus, injection, module, module sql, mysql, sql, xoops mylinks

[waraxe-2007-SA#059] - XSS in WordPress 2.3

“register_globals” must be “on” for this exploit to be successful. Proof of concept:. http://victim.com/wp-admin/edit-post-rows.php?posts_columns[]=alert(123);. //—–> See ya soon and have a nice day

See the rest here:
[waraxe-2007-SA#059] - XSS in WordPress 2.3

adl asap atom bugtraq security focus edit me edit post email post permanent link rsd utf xssadl, asap, atom, bugtraq security focus, edit me, edit post, email post, permanent link, rsd, utf, xss