EUVD-2008-6424

Malware in sbrugna...

EUVD-2008-6423

Malware in sbrugna...

6rbScript 'cat.php' SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/31329/info 6rbScript is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

Sql injection

SQL injection vulnerability in section.php in 6rbScript 3.3 allows remote attackers to execute arbitrary SQL commands via the singerid parameter in a singers action...

Directory traversal

Directory traversal vulnerability in section.php in 6rbScript 3.3, when magicquotesgpc is disabled, allows remote attackers to read arbitrary files via a .. dot dot in the name parameter...

CVE-2008-6454

The CVE-2008-6454 entry concerns a SQL injection in 6rbScript 3.3, exploitable via the singerid parameter in the singers action (section.php). The vulnerability is caused by unsafely constructed SQL queries, enabling remote attackers to execute arbitrary SQL commands. Public references (e.g., Exp...

CVE-2008-6454

SQL injection vulnerability in section.php in 6rbScript 3.3 allows remote attackers to execute arbitrary SQL commands via the singerid parameter in a singers action...

CVE-2008-6453

CVE-2008-6453 affects 6rbScript 3.3. A directory traversal flaw in section.php can be exploited when magic_quotes_gpc is disabled to read arbitrary files by supplying a double-dot (.. ) in the name parameter. The NVD entry notes a remote-access vector with MEDIUM severity (CVSS v2: AV:N/AC:M/Au:N...

CVE-2008-6453

Directory traversal vulnerability in section.php in 6rbScript 3.3, when magicquotesgpc is disabled, allows remote attackers to read arbitrary files via a .. dot dot in the name parameter...

CVE-2008-6454: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in section.php in 6rbScript 3.3 allows remote attackers to execute arbitrary SQL commands via the singerid parameter in a singers action...

CVE-2008-6453: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in section.php in 6rbScript 3.3, when magicquotesgpc is disabled, allows remote attackers to read arbitrary files via a .. dot dot in the name parameter...

CVE-2008-4344

The CVE-2008-4344 entry describes a SQL injection vulnerability in the file cat.php of 6rbScript , exploitable via the CatID parameter to allow remote attackers to execute arbitrary SQL commands. The incident is supported by multiple sources (e.g., NVD and CVE records) with a CVSS v2 base score o...

CVE-2008-4344: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in cat.php in 6rbScript allows remote attackers to execute arbitrary SQL commands via the CatID parameter...

6rbScript 3.3 (section.php name) Local File Inclusion Vulnerability

No description provided by source. || | | 6rbScript V3.3 Local file Vulnerability | | | | | | script : www.6rbscript.com | | DorK : inurl:"section.php?name=singers" | dorK : Powered By 6rbScript V3.3 || Author : Stack Expl need magic quote = off & open basdir = off in many server...

6rbScript - cat.php SQL Injection

6rbScript - cat.php SQL Injection source: https://www.securityfocus.com/bid/31329/info 6rbScript is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

6rbScript - 'cat.php' SQL Injection

source: https://www.securityfocus.com/bid/31329/info 6rbScript is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify dat...

6rbscriptcat-sql.txt

$/ $ $ 6rbScript cat.php Remote SQL Injection $ $/ $ -- K -- $ $ Author:\ Kararalshami $ $ Home:\ Google.Com $ $ email:\ KararalshameaTYahood0tcom $ $ $ $/ $ -- K -- $ $ script :\ www.6rbscript.com $ $ Price! :\ 150$ $ $ DorK :\ "Try 2 Find it!" $/ Exploit:\ ------------...

6rbScript 3.3 - singerid SQL Injection

6rbScript 3.3 - singerid SQL Injection || | | 6rbScript V3.3 singerid Remote SQL Injection Vulnerability | | |---------------------Hussin X----------------------| | | Author: Hussin X | | Home : WwW.IQ-ty.CoM | WwW.TrYaG.CC | | email: darkangelg85atYahooDoTcom | | | | | | | | script :...

6rbScript 3.3 - section.php Local File Inclusion

6rbScript 3.3 - section.php Local File Inclusion || | | 6rbScript V3.3 Local file Vulnerability | | | | | | script : www.6rbscript.com | | DorK : inurl:"section.php?name=singers" | dorK : Powered By 6rbScript V3.3 || Author : Stack Expl need magic quote = off & open basdir = off in many server...

6rbScript 3.3 (section.php name) Local File Inclusion Vulnerability

Exploit for unknown platform in category web applications =================================================================== 6rbScript 3.3 section.php name Local File Inclusion Vulnerability =================================================================== || | | 6rbScript V3.3 Local file...