mcGallery 1.1 - detail.php?lang Cross-Site Scripting

mcGallery 1.1 - detail.php?lang Cross-Site Scripting source: https://www.securityfocus.com/bid/28587/info mcGallery is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary...

CVE-2008-1177: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in shop/detail.php in Affiliate Market affmarket 0.1 BETA allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

SQL injection vulnerability in detail.php in iTechBids Gold 6.0 allows remote attackers to execute arbitrary SQL commands via the itemid parameter...

CVE-2008-0776

SQL injection vulnerability in detail.php in iTechBids Gold 6.0 allows remote attackers to execute arbitrary SQL commands via the itemid parameter...

ITechBids 6.0 (detail.php item_id) SQL Injection Vulnerability

No description provided by source. ITechBids v.6.0 Gold Edition Sql Injection Exploit AUTHOR:SoSo H H Iraqi-Cracker Script Site: http://itechscripts.com/ Price:$125.00 Exploit in: detail.php?itemid==SQL Example:...

CVE-2008-0776

SQL injection vulnerability in detail.php in iTechBids Gold 6.0 allows remote attackers to execute arbitrary SQL commands via the itemid parameter...

CVE-2008-0776: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in detail.php in iTechBids Gold 6.0 allows remote attackers to execute arbitrary SQL commands via the itemid parameter...

itechbids60-sql.txt

ITechBids v.6.0 Gold Edition Sql Injection Exploit AUTHOR:SoSo H H Iraqi-Cracker Script Site: http://itechscripts.com/ Price:$125.00 Exploit in: detail.php?itemid==SQL Example:...

ITechBids 6.0 (detail.php item_id) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================== ITechBids 6.0 detail.php itemid SQL Injection Vulnerability ============================================================== ITechBids v.6.0 Gold Edition Sql Injection Exploit...

ITechBids 6.0 - item_id SQL Injection

ITechBids 6.0 - itemid SQL Injection ITechBids v.6.0 Gold Edition Sql Injection Exploit AUTHOR:SoSo H H Iraqi-Cracker Script Site: http://itechscripts.com/ Price:$125.00 Exploit in: detail.php?itemid==SQL Example:...

CVE-2008-0649: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in detail.php in Astanda Directory Project ADP 1.2 and 1.3 allows remote attackers to execute arbitrary SQL commands via the linkid parameter...

Astanda Directory Project 1.2 (link_id) SQL Injection Vulnerability

Exploit for unknown platform in category web applications =================================================================== Astanda Directory Project 1.2 linkid SQL Injection Vulnerability ===================================================================...

CVE-2007-5430: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Stride 1.0 allow remote attackers to execute arbitrary SQL commands via 1 the p parameter to main.php in the Content Management System, 2 the id parameter in a sto cmd action to shop.php in the Merchant subsystem, or the 3 course or 4 provider parameter t...

Scott Manktelow Design Stride 1.0 Courses - 'detail.php' Multiple SQL Injections

source: https://www.securityfocus.com/bid/26036/info Stride 1.0 Courses is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the application,...

mcLinksCounter 1.2 Remote File Include by iNs

App Name : mcLinksCounter 1.2 HomePage: http://www.phpforums.net Vuln type : Remote File Include RFI Vuln Discovered by : iNs BUG: on file stats.php ,login.php ,detail.php : include "$langfile"; PoC: http://www.site.com/path/stats.php?langfile=sH3lLz? iNs @ uNkn0wn.eu Gr33tz t0: uNkn0wn.eu - iD -...

Sql injection

SQL injection vulnerability in detail.php in Pre Shopping Mall 1.0 allows remote attackers to execute arbitrary SQL commands via the prodid parameter...

CVE-2007-2674: Undefined Security Weakness

SQL injection vulnerability in detail.php in Pre Shopping Mall 1.0 allows remote attackers to execute arbitrary SQL commands via the prodid parameter...

Pre Shopping Mall 1.0 Remote SQL Injection Vulnerability

No description provided by source. ============================================== Pre Shopping Mall v1.0 Remote SQL Injection ============================================== Found: Cyber-Security.org ============================================== Exploit:...

Pre Shopping Mall 1.0 Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ======================================================== Pre Shopping Mall 1.0 Remote SQL Injection Vulnerability ======================================================== ============================================== Pre Shopping Mall v1....

CVE-2007-2262

CVE-2007-2262 corresponds to multiple PHP remote file inclusion vulnerabilities in html/php/detail.php of Sinato jmuffin, enabling remote attackers to execute arbitrary PHP code by supplying a URL via the relPath or folder parameters. The NVD entry cites a CVSS v2 base score of 7.5 (HIGH) with ne...