CVE-2008-4606

Multiple SQL injection vulnerabilities in IP Reg 0.4 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 locationid parameter to locationdel.php and 2 vlanid parameter to vlanedit.php. NOTE: the vlanview.php and vlandel.php vectors are already covered by CVE-2007-6579...

Sql injection

Multiple SQL injection vulnerabilities in IP Reg 0.4 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 locationid parameter to locationdel.php and 2 vlanid parameter to vlanedit.php. NOTE: the vlanview.php and vlandel.php vectors are already covered by CVE-2007-6579...

IP Reg <= 0.4 Multiple Remote SQL Injection Vulnerabilities

No description provided by source. IP Reg = 0.4 Multiple Remote SQL Injection Vulnerabilities url: http://sourceforge.net/projects/ipreg/ Author: JosS mail: sys-projectathotmaildotcom site: http://spanish-hackers.com team: Spanish Hackers Team - SHT This was written for educational purpose. Use i...

IP Reg 0.4 - Multiple SQL Injections

IP Reg = 0.4 Multiple Remote SQL Injection Vulnerabilities url: http://sourceforge.net/projects/ipreg/ Author: JosS mail: sys-projectathotmaildotcom site: http://spanish-hackers.com team: Spanish Hackers Team - SHT This was written for educational purpose. Use it at your own risk. Author will be...

CVE-2008-4523

SQL injection vulnerability in login.php in IP Reg 0.4 and earlier allows remote attackers to execute arbitrary SQL commands via the username parameter...

Sql injection

SQL injection vulnerability in login.php in IP Reg 0.4 and earlier allows remote attackers to execute arbitrary SQL commands via the username parameter...

CVE-2008-4523

CVE-2008-4523 describes a SQL injection in login.php for IP Reg 0.4 and earlier, exploitable via the user_name parameter to run arbitrary SQL commands remotely. The vulnerability is evidenced in multiple sources (NVD, CVE listings, and related references) with a CVSS v2 base score of 7.5 (HIGH) a...

CVE-2008-4523

SQL injection vulnerability in login.php in IP Reg 0.4 and earlier allows remote attackers to execute arbitrary SQL commands via the username parameter...

IP Reg 0.4 - Blind SQL Injection

IP Reg 0.4 - Blind SQL Injection !/usr/bin/perl ----------------------------------------------- IP Reg post$host, username = $param, userpass = 'admin' ; sub givechar my $send = undef; my $charz,$uidz = @; $send = "' or select ifasciisubstring". "userpass,$uidz,1=$charz,"...

printlog-disclose.txt

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Printlog eNYe-Sec - www.enye-sec.org -- Description by the author's page -- PRITLOG is an extremely simple, small and powerful blog system. It does not use or need a MYSQL database and fully works based on flat files. The idea is derived from a...

Pritlog <= 0.4 (filename) Remote File Disclosure Vulnerability

No description provided by source. -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Printlog = 0.4: Remote File Edition Vulnerability -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= $ Program: Printlog $ File affected: index.php $ Version: 0.4 $ Download: http://www.hardkap.net/pritlog Found...

Pritlog <= 0.4 (filename) Remote File Disclosure Vulnerability

Exploit for unknown platform in category web applications ============================================================== Pritlog = 0.4 filename Remote File Disclosure Vulnerability ============================================================== -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=...

Pritlog 0.4 - Filename Remote File Disclosure

Pritlog 0.4 - Filename Remote File Disclosure -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Printlog eNYe-Sec - www.enye-sec.org -- Description by the author's page -- PRITLOG is an extremely simple, small and powerful blog system. It does not use or need a MYSQL database and fully works bas...

Pritlog 0.4 - 'Filename' Remote File Disclosure

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Printlog eNYe-Sec - www.enye-sec.org -- Description by the author's page -- PRITLOG is an extremely simple, small and powerful blog system. It does not use or need a MYSQL database and fully works based on flat files. The idea is derived from a...

Sql injection

Multiple SQL injection vulnerabilities in index.php in Catviz 0.4 beta 1 allow remote attackers to execute arbitrary SQL commands via the 1 foreignkeyvalue parameter in the news page and 2 webpage parameter in the webpagemultiedit form...

CVE-2008-2556

SQL injection vulnerability in read.php in PHP Visit Counter 0.4 and earlier allows remote attackers to execute arbitrary SQL commands via the datespan parameter in a read action...

CVE-2008-2556

The CVE-2008-2556 entry documents a SQL injection vulnerability in read.php of PHP Visit Counter 0.4 and earlier, exploitable via the datespan parameter in a read action. The vulnerability originates from unsafely incorporating the datespan input into SQL queries, enabling remote attackers to exe...

CVE-2008-2461

CVE-2008-2461 : SQL injection in Netious CMS 0.4 (index.php) via the pageid parameter, a vector different from CVE-2006-4047. The vulnerability allows remote execution of arbitrary SQL commands as described in the NVD entry; no remediation details are provided in the supplied documents.

netiouscms-sql.txt

|| || | || o,7 || . o7 || 4||| ow, : / / . ================================ ========================== ==================== |-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=| | | | /' \ /'\ /\ \ /'\ /\ \ | | /, \ /\/\L\ \ \ \ ,/\ /\ \ \ \ / | | //\ \ /' \ /\ //\ Kings...

Netious CMS 0.4 - pageid SQL Injection

Netious CMS 0.4 - pageid SQL Injection || || | || o,7 || . o7 || 4||| ow, : / / . ================================ ========================== ==================== |-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=| | | | /' \ /'\ /\ \ /'\ /\ \ | | /, \ /\/\L\ \ \ \ ,/\ /...