CVE-2008-3308: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in cuenta/cuerpo.php in C. Desseno YouTube Blog ytb 0.1, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the basearchivo parameter...

CVE-2008-3306: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in info.php in C. Desseno YouTube Blog ytb 0.1 allows remote attackers to execute arbitrary SQL commands via the id parameter, a different vector than CVE-2008-3307. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

CVE-2008-3307: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in todos.php in C. Desseno YouTube Blog ytb 0.1 allows remote attackers to execute arbitrary SQL commands via the id parameter, a different vector than CVE-2008-3306...

YouTube Blog多个输入验证漏洞

BUGTRAQ ID: 30345 CNCAN ID：CNCAN-2008072304 YouTube Blog是一款基于PHP的博客程序。 YouTube Blog不正确处理用户提交的输入，远程攻击者可以利用漏洞以WEB权限执行任意代码或获得目标用户敏感信息。 todos.php脚本对'id'参数缺少过滤，可导致SQL注入攻击。 mensaje.php脚本对'm'参数缺少过滤，可导致跨站脚本攻击。 'cuenta/cuerpo.php'对'basearchivo'参数缺少过滤，可导致远程文件包含，以WEB权限执行任意代码。 Carlos Desseno YouTube Blog 0.1...

YouTube Blog 0.1 (RFI/SQL/XSS) Multiple Remote Vulnerabilities

No description provided by source. / | || | | | | | | | | /| | | | | || ||| ||||| || C. H. R. O. O. T. SECURITY GROUP - -- ----- --- -- -- ---- --- -- - http://www.chroot.org Hacks In Taiwan | || | | | | | | | Conference 2008 | | | | | | | | | || ||| || |||| http://www.hitcon.org Title...

youtubeblog-rfisqlxss.txt

/ | || | | | | | | | | /| | | | | || ||| ||||| || C. H. R. O. O. T. SECURITY GROUP - -- ----- --- -- -- ---- --- -- - http://www.chroot.org Hacks In Taiwan | || | | | | | | | Conference 2008 | | | | | | | | | || ||| || |||| http://www.hitcon.org Title =======:: YouTube Blog 0.1 Multiple Remote...

YouTube Blog 0.1 (RFI/SQL/XSS) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ============================================================== YouTube Blog 0.1 RFI/SQL/XSS Multiple Remote Vulnerabilities ============================================================== ScriptName ==:: YouTube Blog Download ====::...

YouTube blog 0.1 - Remote File Inclusion SQL Injection Cross-Site Scripting

YouTube blog 0.1 - Remote File Inclusion SQL Injection Cross-Site Scripting / | || | | | | | | | | /| | | | | || ||| ||||| || C. H. R. O. O. T. SECURITY GROUP - -- ----- --- -- -- ---- --- -- - http://www.chroot.org Hacks In Taiwan | || | | | | | | | Conference 2008 | | | | | | | | | || ||| ||...

YouTube blog 0.1 - Remote File Inclusion / SQL Injection / Cross-Site Scripting

/ | || | | | | | | | | /| | | | | || ||| ||||| || C. H. R. O. O. T. SECURITY GROUP - -- ----- --- -- -- ---- --- -- - http://www.chroot.org Hacks In Taiwan | || | | | | | | | Conference 2008 | | | | | | | | | || ||| || |||| http://www.hitcon.org Title =======:: YouTube Blog 0.1 Multiple Remote...

Unfixed XSS vulnerability at www.youtube-tr.net

Security researcher 3kb3ruqan, has submitted on 17/05/2008 a cross-site-scripting XSS vulnerability affecting www.youtube-tr.net, which at the time of submission ranked 340567 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 25/05/2008. It is...

Sql injection

SQL injection vulnerability in groupposts.php in vShare YouTube Clone 2.6 allows remote attackers to execute arbitrary SQL commands via the tid parameter...

CVE-2008-2223

SQL injection vulnerability in groupposts.php in vShare YouTube Clone 2.6 allows remote attackers to execute arbitrary SQL commands via the tid parameter...

CVE-2008-2223

CVE-2008-2223 describes an SQL injection in group_posts.php of the vShare YouTube Clone 2.6, exploitable via the tid parameter to execute arbitrary SQL. The vulnerability is confirmed in multiple sources (NVD/NVD-entry) with a CVSS v2 base score of 7.5 (HIGH) and network attack vector with low co...

CVE-2008-2223

SQL injection vulnerability in groupposts.php in vShare YouTube Clone 2.6 allows remote attackers to execute arbitrary SQL commands via the tid parameter...

vShare YouTube Clone脚本group_posts.php文件SQL注入漏洞

BUGTRAQ ID: 29114 vShare YouTube clone是用于在网站上共享视频的PHP脚本。 vShare YouTube clone的groupposts.php文件中没有正确地过滤对tid参数的输入便在SQL查询中使用，这允许远程攻击者通过提交恶意查询请求执行SQL注入攻击。 BuyScripts vShare YouTube Clone 2.6 BuyScripts ---------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://forums.buyscripts.in/viewtopic.php?f=7&t=3389...

CVE-2008-2223: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in groupposts.php in vShare YouTube Clone 2.6 allows remote attackers to execute arbitrary SQL commands via the tid parameter...

vShare YouTube Clone 2.6 - tid SQL Injection

vShare YouTube Clone 2.6 - tid SQL Injection !/usr/bin/perl Coded by: Saime vShare Youtube Clone v2.6 groupposts.php tid Remote SQL Injection Author: Saime URL: http://www.buyscripts.in Price: $10.00 Date: 8/05/2008 Greetz:...

vShare Youtube Clone 2.6 (tid) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================= vShare Youtube Clone 2.6 tid Remote SQL Injection Vulnerability ================================================================= !/usr/bin/perl Coded by: Saime vShare Youtu...

vShare Youtube Clone 2.6 (tid) Remote SQL Injection Vulnerability

No description provided by source. !/usr/bin/perl Coded by: Saime vShare Youtube Clone v2.6 groupposts.php tid Remote SQL Injection Author: Saime URL: http://www.buyscripts.in Price: $10.00 Date: 8/05/2008 Greetz:...

vShare YouTube Clone 2.6 - 'tid' SQL Injection

!/usr/bin/perl Coded by: Saime vShare Youtube Clone v2.6 groupposts.php tid Remote SQL Injection Author: Saime URL: http://www.buyscripts.in Price: $10.00 Date: 8/05/2008 Greetz: BaKo,DrWh4x,optiplex,xprog,cam-man-dan,Tulle,t0pP8uZz,Inspiratio,Novalok,illuz1oN,Untamed and everyone else I forgot!...