SebracCMS 0.4 - Multiple SQL Injections

Name: SebracCMS Webiste: http://www.sebrac.netsons.org/cms/ Vulnerability type: SQL Injection Author: shinmai, 2008-06-28 Description: SebracCMS contains two major SQL injection vulnerabilities: Unsanitazed POST-variables in SQL queries when logging users in. This allows login access without prop...

Sql injection

SQL injection vulnerability in pilot.asp in ASPilot Pilot Cart 7.3 allows remote attackers to execute arbitrary SQL commands via the article parameter in a kb action...

CVE-2008-2688

SQL injection vulnerability in pilot.asp in ASPilot Pilot Cart 7.3 allows remote attackers to execute arbitrary SQL commands via the article parameter in a kb action...

CVE-2008-2688

SQL injection vulnerability in pilot.asp in ASPilot Pilot Cart 7.3 allows remote attackers to execute arbitrary SQL commands via the article parameter in a kb action...

AJ Article 1.0 (featured_article.php) Remote SQL Injection Vulnerability

No description provided by source. --==+================================================================================+==-- --==+ AJ Article 1.0 featuredarticle.php Remote SQL Injection Vulnerability +==-- --==+================================================================================+==-...

AJ Article 1.0 (featured_article.php) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ======================================================================== AJ Article 1.0 featuredarticle.php Remote SQL Injection Vulnerability ========================================================================...

ajarticle-sql.txt

--==+================================================================================+==-- --==+ AJ Article 1.0 featuredarticle.php Remote SQL Injection Vulnerability +==-- --==+================================================================================+==-- Discovered By: t0pP8uZz Discovere...

AJ Article 1.0 - featured_article.php SQL Injection

AJ Article 1.0 - featuredarticle.php SQL Injection --==+================================================================================+==-- --==+ AJ Article 1.0 featuredarticle.php Remote SQL Injection Vulnerability +==--...

AJ Article 1.0 - 'featured_article.php' SQL Injection

--==+================================================================================+==-- --==+ AJ Article 1.0 featuredarticle.php Remote SQL Injection Vulnerability +==-- --==+================================================================================+==-- Discovered By: t0pP8uZz Discovere...

CVE-2008-2094

SQL injection vulnerability in article.php in the Article module for XOOPS allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

SQL injection vulnerability in article.php in the Article module for XOOPS allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-2094

CVE-2008-2094 : The provided documents describe a SQL injection vulnerability in the XOOPS Article Module, specifically in article.php via the id parameter. The vulnerability allows a remote attacker to execute arbitrary SQL commands through user-supplied input, thereby potentially exposing or al...

CVE-2008-2094

SQL injection vulnerability in article.php in the Article module for XOOPS allows remote attackers to execute arbitrary SQL commands via the id parameter...

XOOPS Article Module article.php id Parameter SQL Injection

The remote host is running the Articles module, a third-party module for XOOPS. The version of this module installed on the remote host fails to properly sanitize user-supplied input to the 'id' parameter of the 'modules/articles/article.php' script before using it to build a database query...

xoopsall-sql.txt

/Cr@zyKing / http://coderx.org Xoops All Version -Articles- Article.PHP ID Blind SQL Injection ExpL0it Sql 1-2 article.php?id=3+union+select+1,2,3,4,5,6,AESDECRYPTAESENCRYPTUSER,0x71,0x71,8,9,0,1,2,3,4,5,6,7,8,9,0/...

XOOPS 2.0.14 Article Module - article.php SQL Injection

XOOPS 2.0.14 Article Module - article.php SQL Injection source: https://www.securityfocus.com/bid/28879/info XOOPS Article module is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could...

XOOPS 2.0.14 Article Module - 'article.php' SQL Injection

source: https://www.securityfocus.com/bid/28879/info XOOPS Article module is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or...

BosNews 4.0 - 'article' SQL Injection

By CrackersChild [email protected] BosNews v4.0 Remote Sql injection Exploit Script website:http://www.bosdev.com Exploit : " site.com/path/news.php?news=more&article=248+union%20select%200,1,username,password,4%20from%20bosdevUUS/ milw0rm.com 2008-04-14...

CVE-2008-1533

CVE-2008-1533 affects Joomla! 1.5 via the XML-RPC Blogger API plugin. The vulnerability allows remote attackers to perform unauthorized article operations on articles through unknown vectors. The public description lacks concrete exploit details or affected versions beyond Joomla! 1.5 and the plu...

Mambo Component Comments <= 0.5.8.5g SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================ Mambo Component Comments = 0.5.8.5g SQL Injection Vulnerability ================================================================ Mambo SQL Injection comcomments Version...