ComicShout <= 2.8 SQLi Vulnerability - Active Check

ComicShout is prone to an SQL injection SQLi vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Sql injection

SQL injection vulnerability in news.php in ComicShout 2.8 allows remote attackers to execute arbitrary SQL commands via the newsid parameter, a different vector than CVE-2008-2456...

CVE-2008-6425

CVE-2008-6425 concerns ComicShout 2.8, where the News.php news_id parameter is vulnerable to SQL injection. OpenVAS notes the issue arises because user data is not sufficiently sanitized before being used in SQL queries, enabling a remote attacker to manipulate or view data. Connected sources als...

Nokia S60 SMS/MMS (Curse of Silence) Denial of Service Vulnerability

Exploit for hardware platform in category dos / poc ==================================================================== Nokia S60 SMS/MMS Curse of Silence Denial of Service Vulnerability ==================================================================== Vulnerability Advisory...

Nokia S60 SMS/MMS (Curse of Silence) Denial of Service Vulnerability

No description provided by source. Vulnerability Advisory ====================== Remote SMS/MMS Denial of Service - "Curse Of Silence" for Nokia S60 phones URL === https://berlin.ccc.de/tobias/cos/s60-curse-of-silence-advisory.txt Video =====...

Lynx 2.8 - .mailcap.mime.type Local Code Execution

Lynx 2.8 - .mailcap.mime.type Local Code Execution source: https://www.securityfocus.com/bid/31917/info Lynx is prone to a local code-execution vulnerability. Successful exploits may allow attackers to execute arbitrary code within the context of the user running the affected application. Version...

ComicShout 2.8 (news.php news_id) SQL Injection Vulnerability

No description provided by source. --==+=================== Spanish Hackers Team www.spanish-hackers.com =================+==-- --==+ ComicShout 2.8 news.php newsid Remote SQL Injection Vulnerability +==--...

comicshout28-sql.txt

--==+=================== Spanish Hackers Team www.spanish-hackers.com =================+==-- --==+ ComicShout 2.8 news.php newsid Remote SQL Injection Vulnerability +==-- --==+====================================================================================+==-- - dreaming of necessity is reas...

ComicShout 2.8 - 'news_id' SQL Injection

--==+=================== Spanish Hackers Team www.spanish-hackers.com =================+==-- --==+ ComicShout 2.8 news.php newsid Remote SQL Injection Vulnerability +==-- --==+====================================================================================+==-- - dreaming of necessity is reas...

ComicShout 2.8 - news_id SQL Injection

ComicShout 2.8 - newsid SQL Injection --==+=================== Spanish Hackers Team www.spanish-hackers.com =================+==-- --==+ ComicShout 2.8 news.php newsid Remote SQL Injection Vulnerability +==--...

ComicShout 2.8 (news.php news_id) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================= ComicShout 2.8 news.php newsid SQL Injection Vulnerability ============================================================= + Info: Bug found by JosS EspSeC & Hack0wn!. Software:...

BoastMachine 2.8 - 'index.php' Local File Inclusion

source: https://www.securityfocus.com/bid/26032/info boastMachine is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. Exploiting this issue may allow an unauthorized user to view files and execute local scripts. boastMachine 2.8 is vulnerable ...

BoastMachine 2.8 - index.php Local File Inclusion

BoastMachine 2.8 - index.php Local File Inclusion source: https://www.securityfocus.com/bid/26032/info boastMachine is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. Exploiting this issue may allow an unauthorized user to view files and...

bMachine v 2.8 Local File Include Vulnerabilityes

X---- w w w . u N k n 0 w n . e u ----X bMachine v 2.8 Local File Inclusion Vulnerability ::Home: http://opensignature.sourceforge.net/blog/ ::Vuln Type : Local File Include LFI ::Discovered by : iNs PoC: index.php?id=../../../../../../../../../../etc/passwd d0rK: Powered by bMachine v 2.8 :: iNs...

CVE-2007-4943

Technical details for CVE-2007-4943 are not publicly available in the provided documents. Monitor for updates from official advisories.

CVE-2007-4163

Multiple SQL injection vulnerabilities in IndexScript 2.7 and 2.8 before 20070726 allow remote attackers to execute arbitrary SQL commands via the 1 catid, 2 startid, 3 rowparentid, and 4 rowcatid parameters to unspecified components, related to use of these parameters within include/utils.php...

CVE-2007-4069

SQL injection vulnerability in showcat.php in IndexScript 2.8 and earlier allows remote attackers to execute arbitrary SQL commands via the catid parameter...

Sql injection

SQL injection vulnerability in showcat.php in IndexScript 2.8 and earlier allows remote attackers to execute arbitrary SQL commands via the catid parameter...

CVE-2007-4069

CVE-2007-4069 is an SQL injection in show_cat.php of IndexScript 2.8 and earlier, exploitable via the cat_id parameter to execute arbitrary SQL remotely. The connected records also reference related CVEs (CVE-2007-4163) describing similar injection vectors in IndexScript 2.7/2.8, noting the show_...

IndexScript 2.8 - 'cat_id' SQL Injection

Site: http://indexscript.com Found By: xssvgamer Google Dork: allintext: "This site is powered by IndexScript" exploit: http://www.example.com/showcat.php?catid=-1 UNION ALL SELECT login,password FROM dirlogin / Blind SQL injection in indexscript.. Vul Code: "$sql = "select name, metatitle,...