CVE-2008-4713: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in view.php in 212cafe Board 0.07 allows remote attackers to execute arbitrary SQL commands via the qID parameter...

CVE-2008-4627

SQL injection vulnerability in the rGallery plugin 1.09 for WoltLab Burning Board WBB allows remote attackers to execute arbitrary SQL commands via the itemID parameter in the RGalleryImageWrapper page in index.php...

Sql injection

SQL injection vulnerability in the rGallery plugin 1.09 for WoltLab Burning Board WBB allows remote attackers to execute arbitrary SQL commands via the itemID parameter in the RGalleryImageWrapper page in index.php...

CVE-2008-4627

SQL injection vulnerability in the rGallery plugin 1.09 for WoltLab Burning Board WBB allows remote attackers to execute arbitrary SQL commands via the itemID parameter in the RGalleryImageWrapper page in index.php...

CVE-2008-4627

SQL injection vulnerability in the rGallery plugin 1.09 for WoltLab Burning Board WBB allows remote attackers to execute arbitrary SQL commands via the itemID parameter in the RGalleryImageWrapper page in index.php...

CVE-2008-4627

CVE-2008-4627 describes an SQL injection in the rGallery plugin for WoltLab Burning Board (WBB) version 1.09. The vulnerability allows remote attackers to execute arbitrary SQL commands through the itemID parameter on the RGalleryImageWrapper page (index.php). The CVE entry notes a high risk (CVS...

CVE-2008-4627: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the rGallery plugin 1.09 for WoltLab Burning Board WBB allows remote attackers to execute arbitrary SQL commands via the itemID parameter in the RGalleryImageWrapper page in index.php...

Kusaba <= 1.0.4 Remote Code Execution Exploit

No description provided by source. ?php / 9 Oct 2008 Kusaba = 1.0.4 Remote Code Execution Sausage [email protected] After execution: http://www.kusaba.image.board/url/kasubaoek/oekaki.php?pc=print "Hello"; http://www.kusaba.image.board/url/kasubaoek/oekaki.php?sc=echo Hello / $shellname =...

kusaba1-exec.txt

After execution: http://www.kusaba.image.board/url/kasubaoek/oekaki.php?pc=print "Hello"; http://www.kusaba.image.board/url/kasubaoek/oekaki.php?sc=echo Hello / $shellname = 'oekaki.php'; // any filename ending in php $server = 'http://www.kusaba.image.board/url/'; // BBS website, with trailing...

Galerie 3.2 (pic) WBB Lite Addon Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ============================================================ Galerie 3.2 pic WBB Lite Addon Blind SQL Injection Exploit ============================================================ !/usr/bin/perl Galerie 3.2 galerie.php Remote "Blind" SQL...

Galerie 3.2 (pic) WBB Lite Addon Blind SQL Injection Exploit

No description provided by source. !/usr/bin/perl Galerie 3.2 galerie.php Remote "Blind" SQL Injection found by: J0hn.X3r exploit written by: J0hn.X3r and electron1x Date: 05.10.2008 Dork: "Galerie 3.2 © 2004 by progressive" Contact: J0hn.X3r + ICQ: 573813 + Mail: J0hn.X3ratgmail.com electron1x ...

212cafe Board 0.07 (view.php qID) SQL Injection Vulnerability

No description provided by source. =================================================================== 212cafe Board view.php qID Remote SQL Injection Vulnerability =================================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' ...

212cafe Board 0.07 (view.php qID) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================= 212cafe Board 0.07 view.php qID SQL Injection Vulnerability ============================================================= ,--^----------,--------,-----,-------^--, | |||||||||...

212cafe-sql.txt

=================================================================== 212cafe Board view.php qID Remote SQL Injection Vulnerability =================================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team...

212Cafe Board 0.07 - 'qID' SQL Injection

=================================================================== 212cafe Board view.php qID Remote SQL Injection Vulnerability =================================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team...

Invision Power Board 2.* commands execution exploit by RST/GHC

No description provided by source. !/usr/bin/perl Invision Power Board 2. commands execution exploit by RST/GHC vulnerable versions = 2.1.5 tested on 2.1.4, 2.0.2 coded by 1dt.w0lf RST/GHC http://rst.void.ru http://ghc.ru use IO::Socket; use Getopt::Std; getopts"l:h:p:d:f:v:"; $host = $opth; $dir...

Gentoo Security Advisory GLSA 200711-20 (pioneers)

The remote host is missing updates announced in advisory GLSA 200711-20. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Invision Power Board 'name'参数SQL注入漏洞

BUGTRAQ ID: 31288 CNCAN ID：CNCAN-2008092307 Invision Power Board是一款基于PHP的论坛程序。 Invision Power Board不正确处理用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，获得敏感信息或可操作数据库。 问题是脚本对'name'参数缺少过滤，构建恶意的SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息。 Invision Power Services Invision Power Board 2.3.5 Invision Power Services Invision Power Boa...

CVE-2008-4171

SQL injection vulnerability in xmlout.php in Invision Power Board IP.Board or IPB 2.2.x and 2.3.x allows remote attackers to execute arbitrary SQL commands via the name parameter...

Sql injection

SQL injection vulnerability in xmlout.php in Invision Power Board IP.Board or IPB 2.2.x and 2.3.x allows remote attackers to execute arbitrary SQL commands via the name parameter...