CVE-2009-0106

SQL injection vulnerability in profile.php in PHPAuctions aka PHPAuctionSystem allows remote attackers to execute arbitrary SQL commands via the userid parameter...

CVE-2009-0107

Cross-site scripting XSS vulnerability in profile.php in PHPAuctions aka PHPAuctionSystem allows remote attackers to inject arbitrary web script or HTML via the userid parameter...

PHPAuctionSystem (XSS/SQL) Multiple Remote Vulnerabilities

No description provided by source. PHPAuctionSystem Author:x0r Email:[email protected] Cms:PhpAuctionSystemvnew Cmsprice:$59.99 Demo:http://www.phpauctions.info/demo/ BugIn:\profile.phpBlind\Normal Sql Injection ExploitBlind: profile.php?userid=29%20and%20substring@@version,1,1=5--...

PHPAuctionSystem - Cross-Site Scripting SQL Injection

PHPAuctionSystem - Cross-Site Scripting SQL Injection PHPAuctionSystem Author:x0r Email:[email protected] Cms:PhpAuctionSystemvnew Cmsprice:$59.99 Demo:http://www.phpauctions.info/demo/ BugIn:\profile.phpBlind\Normal Sql Injection ExploitBlind:...

Unfixed XSS vulnerability at www.lerciamaio.altervista.org

Security researcher r080cy90r, has submitted on 11/05/2008 a cross-site-scripting XSS vulnerability affecting www.lerciamaio.altervista.org, which at the time of submission ranked 236 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 11/05/2008. ...

CVE-2008-4642

SQL injection vulnerability in profile.php in AstroSPACES 1.1.1 allows remote attackers to execute arbitrary SQL commands via the id parameter in a view action...

Sql injection

SQL injection vulnerability in profile.php in AstroSPACES 1.1.1 allows remote attackers to execute arbitrary SQL commands via the id parameter in a view action...

CVE-2008-4642

AstroSPACES profile.php SQL Injection: in version 1.1.1, the id parameter in a view action is unvalidated, enabling remote attackers to inject arbitrary SQL via the vulnerable query. The issue is documented with a CVSSv2 base score of 7.5 (HIGH) and vector AV:N/AC:L/Au:N/C:P/I:P/A:P. Connected so...

astrospaces-sql.txt

AstroSPACES profile.php SQL Powered by Philippine Website Developers and AstroSPACES © P3NET 2006-2007 AUTHOR : TurkishWarriorr Sehitler Ölmez Vatan Bölünmez .... HOME : http://www.1923turk.org DORK : Powered By AstroSPACES EXPLOIT :...

AstroSPACES (id) Remote SQL Injection Vulnerability

No description provided by source. AstroSPACES profile.php SQL Powered by Philippine Website Developers and AstroSPACES © P3NET 2006-2007 AUTHOR : TurkishWarriorr Sehitler Ölmez Vatan Bölünmez .... HOME : http://www.1923turk.org DORK : Powered By AstroSPACES EXPLOIT :...

AstroSPACES 1.1.1 - id SQL Injection

AstroSPACES 1.1.1 - id SQL Injection AstroSPACES profile.php SQL Powered by Philippine Website Developers and AstroSPACES © P3NET 2006-2007 AUTHOR : TurkishWarriorr Sehitler Ölmez Vatan Bölünmez .... HOME : http://www.1923turk.org DORK : Powered By AstroSPACES EXPLOIT :...

AstroSPACES 1.1.1 - 'id' SQL Injection

AstroSPACES profile.php SQL Powered by Philippine Website Developers and AstroSPACES © P3NET 2006-2007 AUTHOR : TurkishWarriorr Sehitler Ölmez Vatan Bölünmez .... HOME : http://www.1923turk.org DORK : Powered By AstroSPACES EXPLOIT :...

Sql injection

Multiple SQL injection vulnerabilities in cyberBB 0.6 allow remote authenticated users to execute arbitrary SQL commands via the 1 id parameter to showtopic.php and the 2 user parameter to profile.php...

CVE-2008-3718

Multiple SQL injection vulnerabilities in cyberBB 0.6 allow remote authenticated users to execute arbitrary SQL commands via the 1 id parameter to showtopic.php and the 2 user parameter to profile.php...

CVE-2008-3718

Multiple SQL injection vulnerabilities in cyberBB 0.6 allow remote authenticated users to execute arbitrary SQL commands via the 1 id parameter to showtopic.php and the 2 user parameter to profile.php...

CVE-2008-3718

CVE-2008-3718 involves multiple SQL injection vulnerabilities in cyberBB 0.6. The issue allows remote authenticated users to execute arbitrary SQL commands via the (1) id parameter to show_topic.php and (2) user parameter to profile.php. The affected component is cyberBB 0.6; root cause is input-...

cyberbb-sql.txt

Name : cyberBB v. 0.6 Multiply Remote SQL Injection Vulnerabilities Author : cOndemned Dark-Coders Greetz : Avantura, str0ke, ZaBeaTy, voo|doo, irk4z, and many, many more... Conditions : Magic quotes gpc = On & Off / User must be logged into source of /showtopic.php : 21. $id=$REQUEST'id'; 22. 23...

CVE-2008-3487

SQL injection vulnerability in profile.php in PHPAuction GPL Enhanced 2.51 allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

SQL injection vulnerability in profile.php in PHPAuction GPL Enhanced 2.51 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-3487

PHPAuction GPL Enhanced 2.51 is affected by a SQL injection in profile.php via the id parameter, allowing remote execution of arbitrary SQL commands. The root cause is input unsanitized in the id parameter; CVSSv2 base score 7.5 (HIGH) reflects network access, low attack complexity, no authentica...