8 matches found
EUVD-2008-4155
Malware in sbrugna...
Cars & Vehicle - 'page.php' SQL Injection Vulnerability
exp www.example.com/Script/page.php?lnkid=-1//UNION//SELECT//1,1,1,1,concatwsuser,version,database,1/ 文件page.php没有对linkid的值进行过滤,直接带入了查询,导致sql注入漏洞产生 source: http://www.securityfocus.com/bid/31214/info The Cars & Vehicle script is prone to an SQL-injection vulnerability because it fails to...
CVE-2008-4172
SQL injection vulnerability in page.php in Cars & Vehicle aka Cars-Vehicle Script allows remote attackers to execute arbitrary SQL commands via the lnkid parameter...
Sql injection
SQL injection vulnerability in page.php in Cars & Vehicle aka Cars-Vehicle Script allows remote attackers to execute arbitrary SQL commands via the lnkid parameter...
CVE-2008-4172
CVE-2008-4172 is a SQL injection vulnerability in the Cars & Vehicle (Cars-Vehicle Script) stack, specifically in page.php where the lnkid parameter can be exploited to run arbitrary SQL commands. The issue permits remote attackers to potentially compromise data integrity and access, as described...
CVE-2008-4172
SQL injection vulnerability in page.php in Cars & Vehicle aka Cars-Vehicle Script allows remote attackers to execute arbitrary SQL commands via the lnkid parameter...
CVE-2008-4172: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in page.php in Cars & Vehicle aka Cars-Vehicle Script allows remote attackers to execute arbitrary SQL commands via the lnkid parameter...
Cars Vehicle - page.php SQL Injection
Cars Vehicle - page.php SQL Injection source: https://www.securityfocus.com/bid/31214/info The Cars & Vehicle script is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attack...