ITechBids 6.0 (detail.php item_id) SQL Injection Vulnerability

No description provided by source. ITechBids v.6.0 Gold Edition Sql Injection Exploit AUTHOR:SoSo H H Iraqi-Cracker Script Site: http://itechscripts.com/ Price:$125.00 Exploit in: detail.php?itemid==SQL Example:...

CVE-2008-0776

SQL injection vulnerability in detail.php in iTechBids Gold 6.0 allows remote attackers to execute arbitrary SQL commands via the itemid parameter...

itechbids60-sql.txt

ITechBids v.6.0 Gold Edition Sql Injection Exploit AUTHOR:SoSo H H Iraqi-Cracker Script Site: http://itechscripts.com/ Price:$125.00 Exploit in: detail.php?itemid==SQL Example:...

ITechBids 6.0 - item_id SQL Injection

ITechBids 6.0 - itemid SQL Injection ITechBids v.6.0 Gold Edition Sql Injection Exploit AUTHOR:SoSo H H Iraqi-Cracker Script Site: http://itechscripts.com/ Price:$125.00 Exploit in: detail.php?itemid==SQL Example:...

ITechBids 6.0 (detail.php item_id) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================== ITechBids 6.0 detail.php itemid SQL Injection Vulnerability ============================================================== ITechBids v.6.0 Gold Edition Sql Injection Exploit...

Astanda Directory Project 1.2 (link_id) SQL Injection Vulnerability

Exploit for unknown platform in category web applications =================================================================== Astanda Directory Project 1.2 linkid SQL Injection Vulnerability ===================================================================...

Scott Manktelow Design Stride 1.0 Courses - 'detail.php' Multiple SQL Injections

source: https://www.securityfocus.com/bid/26036/info Stride 1.0 Courses is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the application,...

mcLinksCounter 1.2 Remote File Include by iNs

App Name : mcLinksCounter 1.2 HomePage: http://www.phpforums.net Vuln type : Remote File Include RFI Vuln Discovered by : iNs BUG: on file stats.php ,login.php ,detail.php : include "$langfile"; PoC: http://www.site.com/path/stats.php?langfile=sH3lLz? iNs @ uNkn0wn.eu Gr33tz t0: uNkn0wn.eu - iD -...

Sql injection

SQL injection vulnerability in detail.php in Pre Shopping Mall 1.0 allows remote attackers to execute arbitrary SQL commands via the prodid parameter...

Pre Shopping Mall 1.0 Remote SQL Injection Vulnerability

No description provided by source. ============================================== Pre Shopping Mall v1.0 Remote SQL Injection ============================================== Found: Cyber-Security.org ============================================== Exploit:...

Pre Shopping Mall 1.0 Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ======================================================== Pre Shopping Mall 1.0 Remote SQL Injection Vulnerability ======================================================== ============================================== Pre Shopping Mall v1....

CVE-2007-2262

CVE-2007-2262 corresponds to multiple PHP remote file inclusion vulnerabilities in html/php/detail.php of Sinato jmuffin, enabling remote attackers to execute arbitrary PHP code by supplying a URL via the relPath or folder parameters. The NVD entry cites a CVSS v2 base score of 7.5 (HIGH) with ne...

file117-rfi.txt

File117 Remote File Inclusion Affected Software .: File117 Download..: http://www.sinato.com/jmuffin/upload/file117.zip Risk ..............: high Found by ..........: InyeXion Contact ...........: InyeXionatgmail.com Web .............: Www.InyeXion.com.ar Affected File: /html/php/detail.php...

Sql injection

SQL injection vulnerability in Grayscale Blog 0.8.0, and possibly earlier versions, might allow remote attackers to execute arbitrary SQL commands via the 1 id parameter to a userdetail.php, id and 2 url parameter to b jump.php, and id variable to c detail.php...

Cross site scripting

Cross-site scripting XSS vulnerability in Grayscale Blog 0.8.0, and possibly earlier versions, allows remote attackers to inject arbitrary web script or HTML via the comment fields to 1 scripts/addblogcomment.php and 2 detail.php...

CVE-2006-5828

CVE-2006-5828 affects DeltaScripts PHP Classifieds before the 7.2/7.1 release: the vulnerable file is detail.php, where the user_id parameter is used in an SQL query, enabling remote attackers to execute arbitrary SQL commands. The entry explicitly notes a SQL injection vulnerability in DeltaScri...

PHP Classifieds 7.1 - 'detail.php' SQL Injection

!/usr/bin/perl Script Name: Php Classifieds newProto = "tcp", PeerAddr = "$classifiedsserver", PeerPort = "$classifiedsport" || die "\n+ Connection failed...\n"; print $classifieds "...

PHP Classifieds <= 7.1 (detail.php) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ================================================================ PHP Classifieds = 7.1 detail.php Remote SQL Injection Exploit ================================================================ !/usr/bin/perl Script Name: Php Classifieds = 7...

CVE-2005-3308

Multiple cross-site scripting XSS vulnerabilities in Zomplog 3.4 allow remote attackers to inject arbitrary web script or HTML via the 1 name or 2 comment parameter in detail.php, 3 the username parameter in get.php, and 4 the search parameter in index.php...

CVE-2005-2430

Multiple cross-site scripting XSS vulnerabilities in GForge 4.5 allow remote attackers to inject arbitrary web script or HTML via the 1 forumid or 2 groupid parameter to forum.php, 3 projecttaskid parameter to task.php, 4 id parameter to detail.php, 5 the text field on the search page, 6 groupid...