CVE-2010-4866

CVE-2010-4866 describes a SQL injection vulnerability in Chipmunk Board 1.3, specifically in index.php, allowing remote attackers to execute arbitrary SQL commands via the forumID parameter. The reports indicate a remote exploit path with a base score of 7.5 (HIGH) under CVSS v2, but the provided...

CVE-2010-4866: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in Chipmunk Board 1.3 allows remote attackers to execute arbitrary SQL commands via the forumID parameter...

Chipmunk Pwngame Multiple SQLi Vulnerabilities

Chipmunk Pwngame is prone to multiple SQL injection SQLi vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2010-4799

Multiple SQL injection vulnerabilities in Chipmunk Pwngame 1.0, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 username and 2 password parameters to authenticate.php and the 3 ID parameter to pwn.php. NOTE: some of these details are obtained fr...

Sql injection

Multiple SQL injection vulnerabilities in Chipmunk Pwngame 1.0, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 username and 2 password parameters to authenticate.php and the 3 ID parameter to pwn.php. NOTE: some of these details are obtained fr...

CVE-2010-4799

Chipmunk Pwngame 1.0 is affected by multiple SQL injection vulnerabilities (CVE-2010-4799). The flaws allow remote attackers to inject arbitrary SQL via three input vectors when magic_quotes_gpc is disabled: (1) username, (2) password in authenticate.php, and (3) ID in pwn.php. Affected software ...

CVE-2010-4799

Multiple SQL injection vulnerabilities in Chipmunk Pwngame 1.0, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 username and 2 password parameters to authenticate.php and the 3 ID parameter to pwn.php. NOTE: some of these details are obtained fr...

CVE-2010-4799: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Chipmunk Pwngame 1.0, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 username and 2 password parameters to authenticate.php and the 3 ID parameter to pwn.php. NOTE: some of these details are obtained fr...

Chipmunk Chat CSRF remote attack vulnerability-vulnerability warning-the black bar safety net

Chipmunk Chat program background the lack of validation, leading to a CSRF attack remote add administrator exploit. Exp html form method="post" action="http:///admin/reguser.php" Type Username Here: input type="text" name="adminname" size="1 5"br Type Password Here: input type="text"...

Chipmunk Pwngame SQL Injection

=================================================== Chipmunk Pwngame = Multiple SQL Vulnerabilities =================================================== My + Author : KnocKout Contact : [email protected] + Greatz : h4x0reSEC / Inj3ct0r Team / Exploit-DB H4X0RE SECURITY PROJECT AQ. "Rüyalarýma bite...

Chipmunk Chat <= Remote Admin Add CSRF Exploit

Exploit for php platform in category web applications...

Chipmunk Pwngame Multiple SQL Injection Vulnerabilities

Exploit for php platform in category web applications ======================================================= Chipmunk Pwngame Multiple SQL Injection Vulnerabilities ======================================================= My + Author : KnocKout Contact : email protected + Greatz : h4x0reSEC /...

Chipmunk Pwngame - Multiple SQL Injections

Chipmunk Pwngame - Multiple SQL Injections =================================================== Chipmunk Pwngame = Multiple SQL Vulnerabilities =================================================== My + Author : KnocKout Contact : [email protected] + Greatz : h4x0reSEC / Inj3ct0r Team / Exploit-DB...

Chipmunk Pwngame - Multiple SQL Injections

=================================================== Chipmunk Pwngame = Multiple SQL Vulnerabilities =================================================== My + Author : KnocKout Contact : [email protected] + Greatz : h4x0reSEC / Inj3ct0r Team / Exploit-DB H4X0RE SECURITY PROJECT AQ. "Rüyalarýma bite...

Chipmunk Board 1.3 (index.php?forumID) SQL Injection

Exploit for php platform in category web applications ==================================================== Chipmunk Board 1.3 index.php?forumID SQL Injection ==================================================== Exploit Title: Chipmunk Board index.php?forumID Remote SQL Injection Vulnerability Dat...

Chipmunk Board 1.3 - 'index.php?forumID' SQL Injection

Exploit Title: Chipmunk Board index.php?forumID Remote SQL Injection Vulnerability Date: October, 01 st 2010 Author: Shamus Software Link: http://www.chipmunk-scripts.com/board/board.zip Version: Chipmunk Forums Version 1.3 Tested on: windows CVE : -...

Chipmunk Board 1.3 SQL Injection

Exploit Title: Chipmunk Board index.php?forumID Remote SQL Injection Vulnerability Date: October, 01 st 2010 Author: Shamus Software Link: http://www.chipmunk-scripts.com/board/board.zip Version: Chipmunk Forums Version 1.3 Tested on: windows CVE : -...

Chipmunk Board 1.3 - index.php?forumID SQL Injection

Chipmunk Board 1.3 - index.php?forumID SQL Injection Exploit Title: Chipmunk Board index.php?forumID Remote SQL Injection Vulnerability Date: October, 01 st 2010 Author: Shamus Software Link: http://www.chipmunk-scripts.com/board/board.zip Version: Chipmunk Forums Version 1.3 Tested on: windows C...

Chipmunk Newsletter 2.0 Cross Site Scripting

dadf Title: Chipmunk Newsletter XSS Vulnerabilities Date: 01-19-2010 Author: b0telh0 Software Link: http://www.chipmunk-scripts.com/newsletter/newsletter.zip Version: 2.0 Tested on: Windows 7 Another XSS on Chipmunk Newsletter... Thanks to mrme who found the first flaw on it! ::...

Chipmunk NewsLetter 2.0 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/40024/info Chipmunk Newsletter is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of a...