Information Security News and Exploits

Providing you with Security News and Exploits from all over the web.

Entries for July 2nd, 2010

Sunbyte eFlower Script SQL Injection Vulnerability

Jul.02, 2010 in Exploits

<!DOCTYPE HTML PUBLIC ‘-//W3C//DTD HTML 4.01 Transitional//EN’><html><head><meta http-equiv=’Content-Type’ content=’text/html; charset=windows-1251′><title>Sunbyte eFlower Script SQL Injection Vulnerability</title><link rel=’shortcut icon’ href=’/favicon.ico’ type=’image/x-icon’><link rel=’alternate’ type=’application/rss+xml’ title=’Inj3ct0r RSS’ href=’/rss’></head><body><pre>==================================================
Sunbyte eFlower Script SQL Injection Vulnerability
==================================================
1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0
0 _ __ [...]

Leave a Comment

DMXReady Online Notebook Manager SQL Injection Vulnerability

Jul.02, 2010 in Exploits

<!DOCTYPE HTML PUBLIC ‘-//W3C//DTD HTML 4.01 Transitional//EN’><html><head><meta http-equiv=’Content-Type’ content=’text/html; charset=windows-1251′><title>DMXReady Online Notebook Manager SQL Injection Vulnerability</title><link rel=’shortcut icon’ href=’/favicon.ico’ type=’image/x-icon’><link rel=’alternate’ type=’application/rss+xml’ title=’Inj3ct0r RSS’ href=’/rss’></head><body><pre>============================================================
DMXReady Online Notebook Manager SQL Injection Vulnerability
============================================================
1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0
0 _ __ [...]

Leave a Comment

iScripts SocialWare 2.2.x Arbitrary File Upload Vulnerability

Jul.02, 2010 in Exploits

<!DOCTYPE HTML PUBLIC ‘-//W3C//DTD HTML 4.01 Transitional//EN’><html><head><meta http-equiv=’Content-Type’ content=’text/html; charset=windows-1251′><title>iScripts SocialWare 2.2.x Arbitrary File Upload Vulnerability</title><link rel=’shortcut icon’ href=’/favicon.ico’ type=’image/x-icon’><link rel=’alternate’ type=’application/rss+xml’ title=’Inj3ct0r RSS’ href=’/rss’></head><body><pre>=============================================================
iScripts SocialWare 2.2.x Arbitrary File Upload Vulnerability
=============================================================
Name iScripts SocialWare
Vendor [...]

Leave a Comment

Docmint => 2.1 XSS|HTML|URL Injection/Redirecting Vulnerability

Jul.02, 2010 in Exploits

<!DOCTYPE HTML PUBLIC ‘-//W3C//DTD HTML 4.01 Transitional//EN’><html><head><meta http-equiv=’Content-Type’ content=’text/html; charset=windows-1251′><title>Docmint =&gt; 2.1 XSS|HTML|URL Injection/Redirecting Vulnerability</title><link rel=’shortcut icon’ href=’/favicon.ico’ type=’image/x-icon’><link rel=’alternate’ type=’application/rss+xml’ title=’Inj3ct0r RSS’ href=’/rss’></head><body><pre>===============================================================
Docmint =&gt; 2.1 XSS|HTML|URL Injection/Redirecting Vulnerability
===============================================================
1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0
0 _ __ [...]

Leave a Comment

Mp3 Digitalbox 2.7.2.0 (.mp3) Local Stack Overflow PoC

Jul.02, 2010 in Exploits

<!DOCTYPE HTML PUBLIC ‘-//W3C//DTD HTML 4.01 Transitional//EN’><html><head><meta http-equiv=’Content-Type’ content=’text/html; charset=windows-1251′><title>Mp3 Digitalbox 2.7.2.0 (.mp3) Local Stack Overflow PoC</title><link rel=’shortcut icon’ href=’/favicon.ico’ type=’image/x-icon’><link rel=’alternate’ type=’application/rss+xml’ title=’Inj3ct0r RSS’ href=’/rss’></head><body><pre>======================================================
Mp3 Digitalbox 2.7.2.0 (.mp3) Local Stack Overflow PoC
======================================================
#!/usr/bin/perl
# Mp3 Digitalbox 2.7.2.0 (.mp3) Local Stack Overflow POC
# Author : v3n0m
# Site : http://yogyacarderlink.web.id/
# [...]

Leave a Comment

Youâ??ll still need permission if you want to crawl Facebookâ??s public content

Jul.02, 2010 in News

Facebook is updating its policies to explicitly allow a handful of third-party search engines to crawl public content.
Before, Facebook banned robots, spiders, scrapers or harvesting bots from automatically collecting data across the social networkâ??s pages, unless their creators had written permission. This raised the criticism that the social network was trying to have it both [...]

Leave a Comment

HITB Magazine Issue 003 out now

Jul.02, 2010 in News

We’re really super excited about the release of this issue as it coincides with our first ever HITB security conference in Europe – HITBSecConf2010 – Amsterdam!
The design team has come up with (what we feel) is an even better and more refined layout and our magazine now has its own site! You’ll [...]

Leave a Comment