Sql injection

SQL injection vulnerability in action.asp in PuterJam's Blog PJBlog3 3.0.6.170 allows remote attackers to execute arbitrary SQL commands via the cname parameter in a checkAlias action, as exploited in the wild in April 2009. NOTE: the provenance of this information is unknown; the details are...

CVE-2009-1481

SQL injection vulnerability in action.asp in PuterJam's Blog PJBlog3 3.0.6.170 allows remote attackers to execute arbitrary SQL commands via the cname parameter in a checkAlias action, as exploited in the wild in April 2009. NOTE: the provenance of this information is unknown; the details are...

CVE-2009-1481

The CVE-2009-1481 issue is an SQL injection in PuterJam’s Blog (PJBlog3) 3.0.6.170, specifically in action.asp via the cname parameter in the checkAlias action. This vulnerability could allow remote attackers to execute arbitrary SQL commands and partially compromise data integrity. The informati...

CVE-2009-1481

SQL injection vulnerability in action.asp in PuterJam's Blog PJBlog3 3.0.6.170 allows remote attackers to execute arbitrary SQL commands via the cname parameter in a checkAlias action, as exploited in the wild in April 2009. NOTE: the provenance of this information is unknown; the details are...

VulnCheck KEV: CVE-2009-1481

SQL injection vulnerability in action.asp in PuterJam's Blog PJBlog3 3.0.6.170 allows remote attackers to execute arbitrary SQL commands via the cname parameter in a checkAlias action, as exploited in the wild in April 2009. NOTE: the provenance of this information is unknown; the details...

EZ-Blog Beta2 (category) Remote SQL Injection Vulnerability

No description provided by source. || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH! ------------------...

SQL INJECTION (SHELL UPLOAD)--EZ-blog Beta2-->

------------------------------------------------- SQL INJECTION VULNERABILITY --EZ-blog Beta2-- ------------------------------------------------- CMS INFORMATION: --WEB: http://sourceforge.net/projects/ez-blog/ --DOWNLOAD: http://sourceforge.net/projects/ez-blog/ --DEMO: N/A --CATEGORY: CMS /...

Rilke CMS 0.95 Beta Cross Site Scripting

=========================================================================================== Title : Cross-site Scripting XSS Vulnerability Software : Rilke CMS v0.95 Beta Vendor : http://www.rilkecms.com/ Date : 26 April 2009 Indonesia Author : Vrs-hCk Contact : [email protected] Blog :...

ClearSpace Detection

The remote web server is running Jive ClearSpace, a social networking site letting users manage wikis, publish blog entries and discuss between each other. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid38183; scriptversion"1.8"; scriptnameenglish:"ClearSpace...

EZ-Blog Beta2 - 'category' SQL Injection

|| || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH! ---------------------------------------------------------------------------------------------- | SQL INJECTIO...

ClamAV Multiple Vulnerabilities (Windows)

This host has ClamAV installed, and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbclamavmultvulnapr09win.nasl 4865 2016-12-28 16:16:43Z teissa $ ClamAV Multiple Vulnerabilities Windows Authors: Nikita MR Copyright: Copyright c 2009 Greenbone Networks GmbH,...

FOWLCMS 1.1 (AB/LFI/SU) Multiple Remote Vulnerabilities

No description provided by source. || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH! ------------------...

cpCommerce 1.2.8 (id_document) Blind SQL Injection Vulnerability

No description provided by source. ========================================================================================== o cpCommerce 1.2.8 Blind SQL Injection Vulnerability Software : cpCommerce version 1.2.8 Vendor : http://cpcommerce.cpradio.org/ Download :...

FreznoShop 1.3.0 SQL Injection

====================================================================================== o FreznoShop 1.3.0 SQL Injection Vulnerability Software : FreznoShop version 1.3.0 Vendor : http://sourceforge.net/projects/freznoshop/ Download : http://sourceforge.net/project/platformdownload.php?groupid=860...

Geeklog Detection

The remote host is running Geeklog, an open source blog engine / content management system written in PHP. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid36143; scriptversion"1.15"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/10/12";...

Adam Shostack on the Science of Security and Value of Thinking Differently

Dennis Fisher talks to Adam Shostack of Microsoft, about the evolution of thinking around “The New School of Information Security,” his new group blog and what surprised him most when he went to work at Microsoft. Download Subscribe to the Digital Underground podcast on Podcast audio courtesy of...

Pluck CMS 4.6.1 Local File Inclusion

", "../apache/logs/access.log", "../../apache/logs/access.log", "../../../apache/logs/access.log", "../../../../apache/logs/access.log", "../../../../../apache/logs/access.log", "../../../../../../a...

Bo-blogV2.1.0 跨站漏洞

文件\inc\realplay.php 这个小bug有点搞笑 ?php echo getmagicquotesgpc ? stripslashes$GET'link' : $GET'link'; ? Bo-blog V2.1.0 暂无 !/usr/bin/env python coding: utf-8 from pocsuite.net import req from pocsuite.poc import POCBase, Output from pocsuite.utils import register import requests ''' 原始利用链接：...

CVE-2009-1038

Multiple SQL injection vulnerabilities in YAP Blog 1.1.1 allow remote attackers to execute arbitrary SQL commands via the 1 imageid parameter to comments.php, and remote authenticated administrators to execute arbitrary SQL commands via the 2 user parameter in a modif action to admin/index.php...

Sql injection

Multiple SQL injection vulnerabilities in YAP Blog 1.1.1 allow remote attackers to execute arbitrary SQL commands via the 1 imageid parameter to comments.php, and remote authenticated administrators to execute arbitrary SQL commands via the 2 user parameter in a modif action to admin/index.php...