Sangteamtham

18 exploits Active since Nov 2005
CVE-2010-2687 EXPLOITDB WORKING POC
Site2Nite Boat Classifieds - SQL Injection
SQL injection vulnerability in printdetail.asp in Site2Nite Boat Classifieds allows remote attackers to execute arbitrary SQL commands via the Id parameter.
CVE-2010-2509 EXPLOITDB text WORKING POC
2daybiz Web Template Software - Cross-Site Scripting via Category Keyword or Member Login Password Parameter
Multiple cross-site scripting (XSS) vulnerabilities in 2daybiz Web Template Software allow remote attackers to inject arbitrary web script or HTML via the (1) keyword parameter to category.php and the (2) password parameter to memberlogin.php.
CVE-2005-3868 EXPLOITDB text WORKING POC
K-Search < 1.0 - SQL Injection via Multiple Parameters
Multiple SQL injection vulnerabilities in K-Search 1.0 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) term, (2) id, (3) stat, and (4) source parameters to index.php, and (5) through the image parameters with an add request.
EIP-2026-119307 EXPLOITDB text WORKING POC
XAMPP for Windows 1.7.7 - Multiple Cross-Site Scripting / SQL Injections
EIP-2026-119303 EXPLOITDB text WRITEUP
XAMPP 1.7.4 - Cross-Site Scripting
EIP-2026-112322 EXPLOITDB text WRITEUP
Softbiz PHP FAQ Script - Blind SQL Injection
EIP-2026-112326 EXPLOITDB text WRITEUP
Softbiz Resource Repository Script - Blind SQL Injection
EIP-2026-111478 EXPLOITDB text WORKING POC
Pre PHP Classifieds - SQL Injection
EIP-2026-111492 EXPLOITDB text WORKING POC
PreProject Multi-Vendor Shopping Malls - SQL Injection
CVE-2010-2457 EXPLOITDB text WORKING POC
K-Search - Cross-Site Scripting via Term Parameter
Cross-site scripting (XSS) vulnerability in index.php in K-Search allows remote attackers to inject arbitrary web script or HTML via the term parameter.
EIP-2026-107957 EXPLOITDB text WORKING POC
iScripts EasyBiller - Cross-Site Scripting
CVE-2010-2508 EXPLOITDB text WRITEUP
2daybiz Video Community Portal Script - SQL Injection via UserID Parameter
SQL injection vulnerability in user-profile.php in 2daybiz Video Community Portal Script allows remote attackers to execute arbitrary SQL commands via the userid parameter.
EIP-2026-104825 EXPLOITDB text WRITEUP
2DayBiz Real Estate Portal - 'viewpropertydetails.php' SQL Injection
EIP-2026-104822 EXPLOITDB text WORKING POC
2DayBiz Matrimonial Script - SQL Injection / Cross-Site Scripting
CVE-2010-2610 EXPLOITDB text WRITEUP
2daybiz Job Site Script - SQL Injection via jid, job_iid, or left_cat Parameter
Multiple SQL injection vulnerabilities in 2daybiz Job Site Script allow remote attackers to execute arbitrary SQL commands via the (1) jid parameter to view_current_job.php, (2) job_iid parameter to show_search_more.php, and (3) left_cat parameter to show_search_result.php.
CVE-2010-2510 EXPLOITDB text WORKING POC
2daybiz Web Template Software - SQL Injection via customize.php tid Parameter
SQL injection vulnerability in customize.php in 2daybiz Web Template Software allows remote attackers to execute arbitrary SQL commands via the tid parameter.
CVE-2010-2691 EXPLOITDB text WRITEUP
2daybiz Custom T-Shirt Design Script - SQL Injection
Multiple SQL injection vulnerabilities in 2daybiz Custom T-Shirt Design Script allow remote attackers to execute arbitrary SQL commands via the (1) sbid parameter to products_details.php, (2) pid parameter to products/products.php, and (3) designid parameter to designview.php.
CVE-2010-2688 EXPLOITDB text WORKING POC
Site2Nite Boat Classifieds - SQL Injection
SQL injection vulnerability in detail.asp in Site2Nite Boat Classifieds allows remote attackers to execute arbitrary SQL commands via the ID parameter.