99 matches found
Sql injection
SQL injection vulnerability in report.php in Mr. CGI Guy Hot Links SQL-PHP 3.0 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2008-4379
CVE-2008-4379 is a cross-site scripting (XSS) vulnerability impacting report.php in Mr. CGI Guy Hot Links SQL-PHP 3.0 and earlier. The flaw allows remote attackers to inject arbitrary web script or HTML via the id parameter, as described in the NVD entry. The reported impact is partial confidenti...
CVE-2008-4378
CVE-2008-4378 describes an SQL injection vulnerability in the file report.php of the affected product family “Mr. CGI Guy Hot Links SQL-PHP 3.0 and earlier.” The flaw allows remote attackers to inject and execute arbitrary SQL commands through the id parameter. Public references in the connected ...
CVE-2008-4379
Cross-site scripting XSS vulnerability in report.php in Mr. CGI Guy Hot Links SQL-PHP 3.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the id parameter...
hotlinks-sqlxss.txt
/\ \ /\ \ \ /\ /\ \ //\ \ \ \ \ \ \ \ \ \ \ /',\ \ \ \ \ \ \ \ /\ /'\ /'\ \ \ \ /\ ,\ /, \ \ \ \ ,\ \ \ \ // / // /\//\///\/\ \ \/\ // // // //////// //// security breakd0wn! Title: Hot Links SQL-PHP 3 report.php Multiple Vulnerabilities Vendor:...
Hot Links SQL-PHP 3 (report.php) Multiple Vulnerabilities
Exploit for unknown platform in category web applications ========================================================= Hot Links SQL-PHP 3 report.php Multiple Vulnerabilities ========================================================= 1. Information Hot Links was the initial script developed by Mr CGI...
Hot Links SQL-PHP 3 - 'report.php' Multiple Vulnerabilities
/\ \ /\ \ \ /\ /\ \ //\ \ \ \ \ \ \ \ \ \ \ /',\ \ \ \ \ \ \ \ /\ /'\ /'\ \ \ \ /\ ,\ /, \ \ \ \ ,\ \ \ \ // / // /\//\///\/\ \ \/\ // // // //////// //// security breakd0wn! Title: Hot Links SQL-PHP 3 report.php Multiple Vulnerabilities Vendor:...
CVE-2008-3565
Multiple cross-site scripting XSS vulnerabilities in Meeting Room Booking System MRBS 1.2.6 allow remote attackers to inject arbitrary web script or HTML via the area parameter to 1 day.php, 2 week.php, 3 month.php, 4 search.php, 5 report.php, and 6 help.php. NOTE: the provenance of this...
Information disclosure
Moodle 1.6.5, when displayerrors is enabled, allows remote attackers to obtain sensitive information via a direct request to 1 blog/blogpage.php and 2 course/report/stats/report.php, which reveals the installation path in an error message...
Unfixed XSS vulnerability at www.uhostfiles.com
Security researcher Shocker -at- ShockingSoft.com, has submitted on 02/06/2008 a cross-site-scripting XSS vulnerability affecting www.uhostfiles.com, which at the time of submission ranked 223136 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on...
shnew31-rfi.txt
Found By : Hasadya Raed Contact : [email protected] --------------------------- Script : SH-News 3.1 Dork : "Powered by SH-News 3.1" Greetz : Guardian Information Systems --------------------------- B.Files : report.php archive.php comments.php init.php news.php Exploits :...
CVE-2006-5282
SH-News 3.1 and earlier is affected by multiple PHP remote file inclusion vulnerabilities. The flaw allows an attacker to trigger arbitrary PHP code execution by supplying a URL in the scriptpath parameter to one of five pages: report.php, archive.php, comments.php, init.php, or news.php. The iss...
vikingMultiple.txt
================================================ :: Vikingboard 0.1b Multiple Vulnerabilities :: ================================================ Software : Vikingboard Website : http://www.vikingboard.com/ Discover : Hessam-x / www.hessamx.net I. Cross Site Scripting Vulnerabilities...
CVE-2006-4708
Multiple cross-site scripting XSS vulnerabilities in Vikingboard 0.1b allow remote attackers to inject arbitrary web script or HTML via the 1 act parameter in a help.php and b search.php, and the 2 p parameter in report.php...
CVE-2006-4708
Multiple cross-site scripting XSS vulnerabilities in Vikingboard 0.1b allow remote attackers to inject arbitrary web script or HTML via the 1 act parameter in a help.php and b search.php, and the 2 p parameter in report.php...
Vikingboard 0.1b Multiple Vulnerabilities
================================================ :: Vikingboard 0.1b Multiple Vulnerabilities :: ================================================ Software : Vikingboard Website : http://www.vikingboard.com/ Discover : Hessam-x / www.hessamx.net I. Cross Site Scripting Vulnerabilities...
WBB<<---v2.3.1"report.php" SQL Injection
======================================== Discovered By: CrAzY CrAcKeR Site:www.alshmokh.com I want to thank my friend:- nono225-mHOn-rageh-Lover Hacker-Breeeeh BoNym-Rootshill-LiNuXrOOt-Sw33t h4ck3r ======================================== Example:- /report.php?postid=SQL...
CVE-2005-1581
Cross-site scripting XSS vulnerability in Bug Report 1.0 allows remote attackers to inject arbitrary web script or HTML via various fields to bugreport.php, which are not filtered or quoted when processed by buglist.php or admin/index.php...