Unfixed XSS vulnerability at www.iwdp.co.uk

Security researcher Gamoscu, has submitted on 15/03/2010 a cross-site-scripting XSS vulnerability affecting www.iwdp.co.uk, which at the time of submission ranked 2341561 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/07/2010. It is current...

CVE-2009-4673

CVE-2009-4673 concerns a SQL injection in profile.php of the Mole Group Adult Portal Script, exploitable via the user_id parameter. The vulnerability allows remote attackers to execute arbitrary SQL commands (impact: partial confidentiality, integrity, and availability according to NVD). Public r...

phpMDJ 1.0.3 SQL Injection

,------------------------, Author : k4cp3r/Ablus ^ Date : 05.01.2010 ^ '------------------------' ,--------------------------------------------------------------, Vulnerable Script : phpMDJ 1.0.3 \ Download : http://www.weboac.be/phpmdj/docs/phpmdj1.0.3.zip \ Vulnerability : Remote Sql Injection ...

phpMDJ 1.0.3 - SQL Injection

,--------------------------------------------------------------, Vulnerable Script : phpMDJ 1.0.3 \ Download : http://www.weboac.be/phpmdj/docs/phpmdj1.0.3.zip \ Vulnerability : Remote Sql Injection \ '--------------------------------------------------------------'...

phpMDJ 1.0.3 SQL Injection Vulnerability

Exploit for unknown platform in category web applications ======================================== phpMDJ 1.0.3 SQL Injection Vulnerability ======================================== ,--------------------------------------------------------------, Vulnerable Script : phpMDJ 1.0.3 \ Download :...

phpMDJ 1.0.3 - SQL Injection

phpMDJ 1.0.3 - SQL Injection ,--------------------------------------------------------------, Vulnerable Script : phpMDJ 1.0.3 \ Download : http://www.weboac.be/phpmdj/docs/phpmdj1.0.3.zip \ Vulnerability : Remote Sql Injection \ '--------------------------------------------------------------'...

Sql injection

SQL injection vulnerability in profile.php in WebLeague 2.2.0 allows remote attackers to execute arbitrary SQL commands via the name parameter...

CVE-2009-4560

SQL injection vulnerability in profile.php in WebLeague 2.2.0 allows remote attackers to execute arbitrary SQL commands via the name parameter...

phpbb 2.0.14 profile.php 跨站脚本漏洞

No description provided by source...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Scriptsez.net Ez Poll Hoster EPH allow remote attackers to inject arbitrary web script or HTML via the 1 pid parameter in a code action to index.php and the 2 uid parameter in a view action to profile.php...

MyMsg 'profile.php' SQL Injection Vulnerability

MyMsg is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MyMsg 'profile.php' SQL Injection Vulnerability

This host is installed with MyMsg and is prone to SQL Injection vulnerability. OpenVAS Vulnerability Test $Id: gbmymsgprofilesqlinjvuln.nasl 4869 2016-12-29 11:01:45Z teissa $ MyMsg 'profile.php' SQL Injection Vulnerability Authors: Nikita MR Copyright: Copyright c 2009 Greenbone Networks GmbH,...

CVE-2009-3528

SQL injection vulnerability in Profile.php in MyMsg 1.0.3 allows remote authenticated users to execute arbitrary SQL commands via the uid parameter in a show action...

Sql injection

SQL injection vulnerability in Profile.php in MyMsg 1.0.3 allows remote authenticated users to execute arbitrary SQL commands via the uid parameter in a show action...

CVE-2009-3528

SQL injection vulnerability in Profile.php in MyMsg 1.0.3 allows remote authenticated users to execute arbitrary SQL commands via the uid parameter in a show action...

CVE-2009-3528

MyMsg 1.0.3 is vulnerable in profile.php (SQL injection) via the uid parameter in a show action. The OpenVAS entries confirm a remote-authenticated SQLi flaw that could allow arbitrary SQL execution. Impact is partial confidentiality, integrity, and availability, with a CVSS v2 base score of 6.5 ...

CVE-2009-3355

Cross-site scripting XSS vulnerability in profile.php in Datetopia Buy Dating Site 1.0 allows remote attackers to inject arbitrary web script or HTML via the sr parameter...

CVE-2009-3358

The CVE-2009-3358 entry corresponds to a SQL injection in profile.php of the Tourism Scripts Adult Portal escort listing, exploitable via the user_id parameter. Root cause is improper handling of user_id leading to arbitrary SQL execution by remote attackers. The vulnerability is classified with ...

CVE-2009-3355

CVE-2009-3355 is a cross-site scripting vulnerability in the Datetopia Buy Dating Site 1.0, specifically in profile.php. The issue arises from unsafely handling the s_r parameter, enabling remote attackers to inject arbitrary web script or HTML. Affected software and component: Datetopia Buy Dati...

Adult Portal escort listing (user_id) Remote SQL Injection Vulnerability

No description provided by source. Viva IslaM Viva IslaM Remote SQL Injection Vulnerability profile.php userid Adult Portal escort listing http://www.tourismscripts.com/ AuTh0r : Mr.SQL H0ME : WwW.55a.NeT Email : [email protected] -: ExploiteS :-...