Dev!l'z Clanportal Security Vulnerabilities

deV!L'z Clanportal 1.5.2 Remote File Inclusion

...

deV!L`z Clanportal 1.5.2 Remote File Include Vulnerability

========================================================== deV!Lz Clanportal 1.5.2 Remote File Include Vulnerability ========================================================== [+] deV!Lz Clanportal 1.5.2 Remote File Include Vulnerability...

deV!L`z Clanportal 1.5.2 Remote File Include Vulnerability

Exploit for unknown platform in category web...

DZCP (deV!L_z Clanportal) 1.5.2 - Remote File Inclusion

DZCP (deV!L_z Clanportal) 1.5.2 - Remote File...

DZCP (deV!L`z Clanportal) 1.5.2 - Remote File Inclusion

...

CVE-2008-4889

SQL injection vulnerability in index.php in deV!L'z Clanportal (DZCP) 1.4.9.6 and earlier allows remote attackers to execute arbitrary SQL commands via the users parameter in an addbuddy operation in a buddys...

CVE-2008-4889

SQL injection vulnerability in index.php in deV!L'z Clanportal (DZCP) 1.4.9.6 and earlier allows remote attackers to execute arbitrary SQL commands via the users parameter in an addbuddy operation in a buddys...

Sql injection

SQL injection vulnerability in index.php in deV!L'z Clanportal (DZCP) 1.4.9.6 and earlier allows remote attackers to execute arbitrary SQL commands via the users parameter in an addbuddy operation in a buddys...

devilzclanportal-blindsql.txt

...

CVE-2008-4889

SQL injection vulnerability in index.php in deV!L'z Clanportal (DZCP) 1.4.9.6 and earlier allows remote attackers to execute arbitrary SQL commands via the users parameter in an addbuddy operation in a buddys...

deV!Lz Clanportal [DZCP] <= 1.4.9.6 Blind SQL Injection Exploit

No description provided by...

deV!Lz Clanportal [DZCP] <= 1.4.9.6 Blind SQL Injection Exploit

Exploit for unknown platform in category web...

DZCP (deV!L_z Clanportal) 1.4.9.6 - Blind SQL Injection

DZCP (deV!L_z Clanportal) 1.4.9.6 - Blind SQL...

DZCP (deV!L`z Clanportal) 1.4.9.6 - Blind SQL Injection

...

deV!Lz Clanportal [DZCP] &lt;= 1.4.9.6 Blind SQL Injection Exploit

No description provided by...

Code injection

inc/filebrowser/browser.php in deV!L`z Clanportal (DZCP) 1.4.5 and earlier allows remote attackers to obtain MySQL data via the inc/mysql.php value of the file...

CVE-2007-1167

inc/filebrowser/browser.php in deV!L`z Clanportal (DZCP) 1.4.5 and earlier allows remote attackers to obtain MySQL data via the inc/mysql.php value of the file...

CVE-2007-1167

inc/filebrowser/browser.php in deV!L`z Clanportal (DZCP) 1.4.5 and earlier allows remote attackers to obtain MySQL data via the inc/mysql.php value of the file...

CVE-2007-1167

inc/filebrowser/browser.php in deV!L`z Clanportal (DZCP) 1.4.5 and earlier allows remote attackers to obtain MySQL data via the inc/mysql.php value of the file...

DZCP &#40;Devilz Clanportal&#41; &lt;= 1.4.5 Mysql Data viewable

DZCP (Devilz Clanportal) &lt;= 1.4.5 Mysql Data viewable Found by: Kiba Solution: Install security Fix! Exploit: http://[SITE]/[PATH]/inc/filebrowser/browser.php?file=inc/mysql.php Example:...

deV!Lz Clanportal [DZCP] <= 1.4.5 Remote File Disclosure Vulnerability

No description provided by...

deV!Lz Clanportal [DZCP] <= 1.4.5 Remote File Disclosure Vulnerability

Exploit for unknown platform in category web...

deV!Lz Clanportal [DZCP] &lt;= 1.4.5 Remote File Disclosure Vulnerability

No description provided by...

DZCP (deV!L_z Clanportal) 1.4.5 - Remote File Disclosure

DZCP (deV!L_z Clanportal) 1.4.5 - Remote File...

DZCP (deV!L`z Clanportal) 1.4.5 - Remote File Disclosure

...

CVE-2006-6338

Unrestricted file upload vulnerability in upload/index.php in deV!L`z Clanportal (DZCP) before 1.3.6.1 allows remote attackers to upload and execute arbitrary .php files by embedding PHP code in a JPEG or GIF file that is uploaded to...

CVE-2006-6338

Unrestricted file upload vulnerability in upload/index.php in deV!L`z Clanportal (DZCP) before 1.3.6.1 allows remote attackers to upload and execute arbitrary .php files by embedding PHP code in a JPEG or GIF file that is uploaded to...

CVE-2006-6339

SQL injection vulnerability in sites/index.php in deV!L`z Clanportal (DZCP) before 1.3.6.1 allows remote attackers to execute arbitrary SQL commands via the show element in a GET...

CVE-2006-6339

SQL injection vulnerability in sites/index.php in deV!L`z Clanportal (DZCP) before 1.3.6.1 allows remote attackers to execute arbitrary SQL commands via the show element in a GET...

CVE-2006-6338

Unrestricted file upload vulnerability in upload/index.php in deV!L`z Clanportal (DZCP) before 1.3.6.1 allows remote attackers to upload and execute arbitrary .php files by embedding PHP code in a JPEG or GIF file that is uploaded to...

CVE-2006-6339

SQL injection vulnerability in sites/index.php in deV!L`z Clanportal (DZCP) before 1.3.6.1 allows remote attackers to execute arbitrary SQL commands via the show element in a GET...

dc-sql.txt

...

dc-arbitrary.txt

...

deV!Lz Clanportal Show参数SQL注入漏洞

deV!Lz Clanportal是一款基于Invision的一个图库模块。 deV!Lz Clanportal不充分过滤用户提交的URI输入，远程攻击者可以利用漏洞进行SQL注入攻击，获得敏感信息。 问题是'Index.PHP'脚本对用户提交的'show'参数缺少过滤，提交恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息。 deV!Lz Clanportal deV!Lz Clanportal 1.3.6 目前没有解决方案提供：...

deV!Lz Clanportal [DZCP] <= 1.3.6 Arbitrary File Upload Vulnerability

No description provided by...

Daily web applications security vulnerabilities summary &#40;PHP, ASP, JSP, CGI, Perl&#41;

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks,...

[Full-disclosure] deV!L&#96;z Clanportal - Arbitrary File Upload [061124b]

/ -[061124b]- \ | deV!Lz Clanportal - Arbitrary File Upload | \ / S Y N O P S I S / =================&#x27; -( access: remote severity: high )- deV!Lz Clanportal allows nearly arbitrary files to...

DZCP (deV!L`z Clanportal) 1.3.6 - &#039;Show&#039; SQL Injection

...

deV!Lz Clanportal [DZCP] <= 1.3.6 Arbitrary File Upload Vulnerability

Exploit for unknown platform in category web...

DZCP (deV!L`z Clanportal) 1.3.6 - Arbitrary File Upload

...

DZCP (deV!L_z Clanportal) 1.3.6 - Show SQL Injection

DZCP (deV!L_z Clanportal) 1.3.6 - Show SQL...

DZCP (deV!L_z Clanportal) 1.3.6 - Arbitrary File Upload

DZCP (deV!L_z Clanportal) 1.3.6 - Arbitrary File...

CVE-2006-3347

SQL injection vulnerability in index.php in deV!Lz Clanportal DZCP 1.3.4 allows remote attackers to execute arbitrary SQL commands via the id...

CVE-2006-3347

SQL injection vulnerability in index.php in deV!Lz Clanportal DZCP 1.3.4 allows remote attackers to execute arbitrary SQL commands via the id...

CVE-2006-3347

SQL injection vulnerability in index.php in deV!Lz Clanportal DZCP 1.3.4 allows remote attackers to execute arbitrary SQL commands via the id...

deV!Lz Clanportal [DZCP] &lt;= 1.34 (id) Remote SQL Injection Exploit

No description provided by...

DZCP (deV!L`z Clanportal) 1.34 - &#039;id&#039; SQL Injection

...

DZCP (deV!L_z Clanportal) 1.34 - id SQL Injection

DZCP (deV!L_z Clanportal) 1.34 - id SQL...

deV!Lz Clanportal [DZCP] <= 1.34 (id) Remote SQL Injection Exploit

Exploit for unknown platform in category web...

TClanPortal 1.1.3 - id SQL Injection

TClanPortal 1.1.3 - id SQL...