Sql injection

SQL injection vulnerability in page.php in Pre Printing Press allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2012-5333

CVE-2012-5333 pertains to a SQL injection vulnerability in the application component: page.php of the Pre Printing Press product. The issue is triggered by the id parameter, allowing remote attackers to execute arbitrary SQL commands. This vulnerability is rated with a CVSS v2 base score of 7.5 (...

CVE-2012-5333: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in page.php in Pre Printing Press allows remote attackers to execute arbitrary SQL commands via the id parameter...

PT-2012-5932

Name of the Vulnerable Software and Affected Versions Pre Printing Press affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands via the id parameter in the "page.php" file. This can lead to unauthorized access and manipulation of database...

phpMyDirectory 'id' Parameter SQL Injection Vulnerability

phpMyDirectory is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2012-5288: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in page.php in phpMyDirectory 1.3.3 allows remote attackers to execute arbitrary SQL commands via the id parameter...

PT-2012-5887

Name of the Vulnerable Software and Affected Versions phpMyDirectory version 1.3.3 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the id parameter in the page.php file. Recommendations For phpMyDirectory version 1.3.3, consider restricting...

PT-2012-2117

Name of the Vulnerable Software and Affected Versions Pre Studio Business Cards Designer affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands via the id parameter in the page.php file. Recommendations At the moment, there is no informatio...

CVE-2011-5139: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in page.php in Pre Studio Business Cards Designer allows remote attackers to execute arbitrary SQL commands via the id parameter...

HCAMindbox CMS SQL Injection

Exploit Title: HCAMindbox cms Sql Injection Vulnerability Google Dork: Intext:"powered by Data Management Products" Date: 08/29/2012 Author: Crim3R Site : Http://Ajaxtm.com/ Vendor Home : http://www.hcamindbox.com/ Tested on: all ================================== + id parametr in page.php is...

PT-2012-2002

Name of the Vulnerable Software and Affected Versions Adminimize plugin versions prior to 1.7.22 Description The issue is related to a cross-site scripting XSS vulnerability. This allows remote attackers to inject arbitrary web script or HTML. The vulnerability is exploited via the page parameter...

VLinks 2.0.3 SQL Injection

!x! Informations: Name : vlinks Download : http://www.vlinks.org/ =http://www.vlinks.org/telechargements/Vlinks2.0.3.zip And All Version Vulnerability : Sql Injection Author : JIKOJAWAD Contact : [email protected] Site : No-ExploiT.CoM Is Back Notes : No-ExploiT.CoM Miss !x! Bug: Bugged file is...

PicoPublisher v2.0 Remote SQL injection

Exploit for php platform in category web applications Exploit Title : PicoPublisher v2.0 Remote SQL injection Date : 29/03/2012 Author : ZeTH Contact : zeth/at/hacktheplan8/dot/com http://www.hacktheplan8.com Vendor : Pico Software Site : http://pico.no/ Version : 2.0 Price : $29,00 Dork :...

Posse Sports SQL Injection

Exploit Title: Posse Sports SQL Injection Vulnerabilitiy Google Dork: "Powered By Posse Sports" Date: 4/1/2012 Author: H4ckCity Security Team Discovered By: farbodmahini Home: WwW.H4ckCity.Org Software Link: www.possesports.com Version: All Version Category:: webapps Security Risk:: High Tested o...

SyriaNobles SQL Injection

Exploit Title: SyriaNobles SQL Injection Vulnerabilitiy Google Dork: inurl:view-page.php "Powered by SyriaNobles" Date: 4/1/2012 Author: H4ckCity Security Team Discovered By: farbodmahini Home: WwW.H4ckCity.Org Version: All Version Category:: webapps Security Risk:: High Tested on: GNU/Linux Ubun...

MyPHPDating 1.0 - SQL Injection

MyPHPDating 1.0 - SQL Injection MyPHPDating 1.0 SQL Injection Vulnerability \ ==============================================\ Software : MyPHPDating version 1.0 \ Date : 1/1/2012 \ Vendor : http://www.phponlinedatingsoftware.com/ \ Demo : http://www.phponlinedatingsoftware.com/demo.htm \ Get App....

MyPHPDating 1.0 - SQL Injection

MyPHPDating 1.0 SQL Injection Vulnerability \ ==============================================\ Software : MyPHPDating version 1.0 \ Date : 1/1/2012 \ Vendor : http://www.phponlinedatingsoftware.com/ \ Demo : http://www.phponlinedatingsoftware.com/demo.htm \ Get App. :...

CVE-2010-5047: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in page.php in V-EVA Press Release Script allows remote attackers to execute arbitrary SQL commands via the id parameter...

PT-2011-1982

Name of the Vulnerable Software and Affected Versions V-EVA Press Release Script affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands via the id parameter in the page.php file. This can be exploited by sending malicious input to the API...

Art Dimension SQL Injection

Exploit Title: Art Dimension Sql Injection Vulnerability Date: 25.10.2011 - 01:03 Author: 3spi0n Software Website: http://www.artdimension.ca/ Tested On: BackTrack 5 - Win7 Ultimate Platform: Php $ Vulnerable File: Page.php / Pages.php $ Dorks: "Designed by Art Dimension" $ Demo Sites:...