CVE-2009-2885

CVE-2009-2885 describes an SQL injection in bios.php of PHP Scripts Now World’s Tallest Buildings, exploitable via the rank parameter to allow remote command execution against the database. The vulnerability is caused by unsanitized input incorporated into SQL queries. Documented impact is partia...

CVE-2009-2884

Cross-site scripting XSS vulnerability in bios.php in PHP Scripts Now World's Tallest Buildings allows remote attackers to inject arbitrary web script or HTML via the rank parameter...

PHP Scripts Now (Multiple Products) - 'bios.php?rank' SQL Injection

source: https://www.securityfocus.com/bid/44306/info Multiple PHP Scripts Now products are prone to an input-validation vulnerability that can be exploited to conduct SQL-injection and cross-site scripting attacks. Exploiting this vulnerability could allow an attacker to steal cookie-based...

Tallest Buildings SQL Injection / XSS

0000000000000000000000000000000000 000000000000000000000 00000000000000000000000000000000000 0000000000000000 00000000000000000000000000000000 + Tallest Buildings Multiple Vulnerabilities + Software : Tallest Buildings + Author : 599eme Man + Contact : [email protected] + Thanks : Moudi, Neocoderz,...

Autodesk LiveUpdate ActiveX Control Code Execution (CVE-2008-4471; CVE-2008-4472)

Autodesk provides several software products for professional designing of buildings and other infrastructure. A code execution vulnerability has been reported in Autodesk LiveUpdate ActiveX control within multiple products. The vulnerability is due to an error in the Autodesk LiveUpdate ActiveX...