PT-2005-4858 · Simple Machines · Simple Machines Forum

Name of the Vulnerable Software and Affected Versions: Simple Machines Forum SMF versions 1.1 rc1 and earlier Description: A SQL injection issue in Memberlist.php allows remote attackers to potentially execute arbitrary SQL commands via the start parameter. However, the vendor and third parties...

CVE-2005-4055

CVE-2005-4055 affects Cars Portal 1.1 and earlier; the vulnerability is a SQL injection in index.php exploitable via the (1) page and (2) car parameters, allowing remote attackers to execute arbitrary SQL commands. No remediation or patch details are provided in the connected sources here. Resear...

CVE-2005-4055

SQL injection vulnerability in index.php in Cars Portal 1.1 and earlier allows remote attackers to execute arbitrary SQL commands via the 1 page and 2 car parameters...

SimpleBBS <= 1.1 Remote Commands Execution Exploit (c code)

No description provided by source. / SimpleBBS = v1.1 remote commands execution in c coded by: unitedasia v.Dec.7.2005 greetz: iloveyouma http://geography.about.com/library/maps/blrasia.htm http://www.lib.utexas.edu/maps/middleeastandasia/asiapol00.jpg $ gcc -o bbs bbs.c Usage ./bbs host /folder/...

CVE-2005-4032

CVE-2005-4032 describes a cross-site scripting (XSS) vulnerability in search.cgi of Easy Search System 1.1 and earlier. The flaw allows remote attackers to inject arbitrary web script or HTML through the q parameter. The available connected documents confirm the existence of the vulnerability and...

Cars Portal 1.1 - 'index.php' Multiple SQL Injections

source: https://www.securityfocus.com/bid/15747/info Cars Portal is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a compromise ...

CVE-2005-4027

CVE-2005-4027 affects SimpleBBS 1.1. The issue is a SQL injection vulnerability reported to allow remote attackers to execute arbitrary SQL commands via unspecified search module parameters. The provided sources list a CVSS2 base score of 7.5 (HIGH) with network attack vector, low complexity, and...

CVE-2005-3937

The CVE-2005-3937 entry concerns a SQL injection vulnerability in Softbiz B2B Trading Marketplace Script 1.1 and earlier. The flaw allows remote attackers to execute arbitrary SQL commands by manipulating the cid parameter in one of four scripts: selloffers.php, buyoffers.php, products.php, or pr...

CVE-2005-3953

Bedeng PSP 1.1 is affected by an SQL injection via user-supplied input to index.php, download.php (parameter cwhere) and baca.php (parameter ckode). Root cause: improper handling of input enables arbitrary SQL execution by remote attackers. Impact: information exposed or modified data; scale/gene...

CVE-2005-3953

SQL injection vulnerability in Bedeng PSP 1.1 allows remote attackers to execute arbitrary SQL commands via the cwhere parameter to 1 index.php and 2 download.php, or 3 ckode parameter to baca.php...

SoftBiz FAQ 1.1 - print_article.php?id SQL Injection

SoftBiz FAQ 1.1 - printarticle.php?id SQL Injection source: https://www.securityfocus.com/bid/15653/info Softbiz FAQ is prone to multiple SQL injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit coul...

Softbiz B2B trading Marketplace Script SQL inj

Softbiz B2B trading Marketplace Script SQL inj. Vuln. dicovered by : r0t Date: 28 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/softbiz-b2b-trading-marketplace-script.html Vendor:http://www.softbizscripts.com/b2b-trading-marketplace-script-features.php affected version:1.1and pri...

Survey System 1.1 SQL inj. vuln.

Survey System 1.1 SQL inj. vuln. Vuln. dicovered by : r0t Date: 29 nov. 2005 orginal advisory:http://pridels.blogspot.com/2005/11/survey-system-11-sql-inj-vuln.html Vendor:http://ilyav.net/?q=node/22 affected version:1.1 and prior Product Description: This extremely detailed Survey application ha...

CVE-2005-3816

CVE-2005-3816 describes multiple SQL injection vulnerabilities in freeForum 1.1 and earlier, exploitable via the cat or thread parameters in thread mode, allowing remote execution of arbitrary SQL commands. Affected product: freeForum (forum.php). Root cause: insufficient input handling leading t...

CVE-2005-3813

IMAP service meimaps.exe of MailEnable Professional 1.7 and Enterprise 1.1 allows remote authenticated attackers to cause a denial of service application crash by using RENAME with a non-existent mailbox, a different vulnerability than CVE-2005-3690...

efiction 1.01.12.0 - titles.php SQL Injection

efiction 1.01.12.0 - titles.php SQL Injection source: https://www.securityfocus.com/bid/15568/info eFiction is prone to SQL injection, remote file upload, and cross site scripting vulnerabilities. These vulnerabilities may allow an attacker to view and modify sensitive information, gain...

efiction 1.01.12.0 - uid SQL Injection

efiction 1.01.12.0 - uid SQL Injection source: https://www.securityfocus.com/bid/15568/info eFiction is prone to SQL injection, remote file upload, and cross site scripting vulnerabilities. These vulnerabilities may allow an attacker to view and modify sensitive information, gain unauthorized...

SoftBiz Web Hosting Directory Script 1.1 - browsecats.php?cid SQL Injection

SoftBiz Web Hosting Directory Script 1.1 - browsecats.php?cid SQL Injection source: https://www.securityfocus.com/bid/15561/info Softbiz Web Host Directory Script is prone to multiple SQL injection vulnerabilities. These issues occur because the application fails to properly sanitize user-supplie...

SoftBiz Web Hosting Directory Script 1.1 - 'search_result.php?cid' SQL Injection

source: https://www.securityfocus.com/bid/15561/info Softbiz Web Host Directory Script is prone to multiple SQL injection vulnerabilities. These issues occur because the application fails to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could resul...

SoftBiz Web Hosting Directory Script 1.1 - 'email.php?h_id' SQL Injection

source: https://www.securityfocus.com/bid/15561/info Softbiz Web Host Directory Script is prone to multiple SQL injection vulnerabilities. These issues occur because the application fails to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could resul...