4227 matches found
Sql injection
SQL injection vulnerability in article.php in OmniStar Article Manager allows remote attackers to execute arbitrary SQL commands via the pageid parameter in a favorite op action, a different vector than CVE-2006-5917...
CVE-2007-4952
SQL injection vulnerability in article.php in OmniStar Article Manager allows remote attackers to execute arbitrary SQL commands via the pageid parameter in a favorite op action, a different vector than CVE-2006-5917...
CVE-2007-4952
SQL injection vulnerability in article.php in OmniStar Article Manager allows remote attackers to execute arbitrary SQL commands via the pageid parameter in a favorite op action, a different vector than CVE-2006-5917...
CVE-2007-4952
Affected software: OmniStar Article Manager. Vulnerability (CVE-2007-4952): SQL injection in article.php via the page_id parameter in a favorite op action, a different vector than CVE-2006-5917; remote attackers may execute arbitrary SQL commands. Related entry CVE-2006-5917 describes multiple SQ...
omnistar-sql.txt
/bin/bash Omnistar Article Manager Software article.php Remote SQL Injection Exploit Exploit Coded By : Cold z3ro http://Hackteach.org Exploit : /article.php?op=favorite&articleid=4&pageid=-1'//union//select//name,1//from//user/...
CVE-2007-4952: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in article.php in OmniStar Article Manager allows remote attackers to execute arbitrary SQL commands via the pageid parameter in a favorite op action, a different vector than CVE-2006-5917...
Omnistar Article Manager Software (article.php) SQL Injection Exploit
No description provided by source. /bin/bash Omnistar Article Manager Software article.php Remote SQL Injection Exploit &nb...
Omnistar Article Manager Software (article.php) SQL Injection Exploit
Exploit for unknown platform in category web applications ===================================================================== Omnistar Article Manager Software article.php SQL Injection Exploit ===================================================================== /bin/bash Omnistar Article...
Omnistar Article Manager Software - article.php SQL Injection
Omnistar Article Manager Software - article.php SQL Injection /bin/bash Omnistar Article Manager Software article.php Remote SQL Injection Exploit Exploit Coded By : Cold z3ro http://Hackteach.org Exploit : /article.php?op=favorite&articleid=4&pageid=-1'//union//select//name,1//from//user/...
CVE-2007-4332
SQL injection vulnerability in article.php in Article Dashboard, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter in a print action. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...
CVE-2007-4333
Multiple cross-site scripting XSS vulnerabilities in signup.php in Article Dashboard allow remote attackers to inject arbitrary web script or HTML via the 1 femailaddress, 2 freemailaddress, and other unspecified parameters. NOTE: the provenance of this information is unknown; the details are...
Sql injection
SQL injection vulnerability in article.php in Article Dashboard, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter in a print action. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in signup.php in Article Dashboard allow remote attackers to inject arbitrary web script or HTML via the 1 femailaddress, 2 freemailaddress, and other unspecified parameters. NOTE: the provenance of this information is unknown; the details are...
CVE-2007-4333
Multiple cross-site scripting XSS vulnerabilities in signup.php in Article Dashboard allow remote attackers to inject arbitrary web script or HTML via the 1 femailaddress, 2 freemailaddress, and other unspecified parameters. NOTE: the provenance of this information is unknown; the details are...
CVE-2007-4332
CVE-2007-4332 is a SQL injection vulnerability in Article Dashboard’s article.php. When magic_quotes_gpc is disabled, remote attackers can inject arbitrary SQL commands through the id parameter during a print action. The vulnerability is described across multiple sources (NVD/NVDB-derived and thi...
CVE-2007-4333
CVE-2007-4333 describes multiple cross-site scripting (XSS) vulnerabilities in signup.php of Article Dashboard. The issue allows remote attackers to inject arbitrary web script or HTML via the parameters f_emailaddress, f_reemailaddress, and other unspecified fields. Connected sources corroborate...
CVE-2007-4332
SQL injection vulnerability in article.php in Article Dashboard, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter in a print action. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...
CVE-2007-4332: Undefined Security Weakness
SQL injection vulnerability in article.php in Article Dashboard, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter in a print action. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...
CVE-2007-4333: Undefined Security Weakness
Multiple cross-site scripting XSS vulnerabilities in signup.php in Article Dashboard allow remote attackers to inject arbitrary web script or HTML via the 1 femailaddress, 2 freemailaddress, and other unspecified parameters. NOTE: the provenance of this information is unknown; the details are...