1490 matches found
Sql injection
SQL injection vulnerability in fullnews.php in PHP Real Estate Classifieds allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2007-6463
Multiple cross-site scripting XSS vulnerabilities in the admin panel in PHP Real Estate Classifieds allow remote attackers to inject arbitrary web script or HTML via unspecified "text areas/boxes."...
CVE-2007-6462
SQL injection vulnerability in fullnews.php in PHP Real Estate Classifieds allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2007-6463
CVE-2007-6463 affects PHP Real Estate Classifieds: multiple XSS flaws in the admin panel allow remote injection of arbitrary script via unspecified text areas/boxes. Base score 4.3 (MEDIUM); impact limited to partial integrity compromise and non-sensitive disclosure, with no authentication requir...
CVE-2007-6462
SQL injection vulnerability in fullnews.php in PHP Real Estate Classifieds allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2007-6462
CVE-2007-6462 affects PHP Real Estate Classifieds (fullnews.php) where the id parameter is vulnerable to SQL injection. Remote attackers could potentially execute arbitrary SQL commands through this parameter. The vulnerability is documented across multiple feeds (NVD, CVE lists) with a consisten...
PHP Real Estate Classifieds 'fullnews.php' SQL注入漏洞
PHP Real Estate Classifieds是一款基于PHP的WEB应用程序。 PHP Real Estate Classifieds不正确过滤用户提交的URI数据,远程攻击者可以利用漏洞进行SQL注入攻击,可获得敏感信息或操作数据库。 问题是由于''fullnews.php''脚本对用户提交的WEB参数处理缺少充分过滤,提交恶意SQL查询作为参数数据,可更改原来的SQL逻辑,获得敏感信息或操作数据库。 PHP Real Estate Classifieds Premium Plus 目前没有解决方案提供: http://phprealestatescript.com/...
CVE-2003-1520
Technical details for CVE-2003-1520 are not publicly available in the provided documents. No concrete information on affected versions, root cause, or fixes is included. Monitor for updates.
CVE-2003-1520
SQL injection vulnerability in FuzzyMonkey My Classifieds 2.11 allows remote attackers to execute arbitrary SQL commands via the email parameter...
CVE-2007-5122
SQL injection vulnerability in storeinfo.php in SoftBiz Classifieds PLUS allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2007-5122
The CVE-2007-5122 entry documents a SQL injection vulnerability in SoftBiz Classifieds PLUS, specifically in store_info.php via the id parameter. Remote attackers could potentially execute arbitrary SQL commands. Connected sources confirm the affected component and vulnerability class, but do not...
CVE-2007-5122
SQL injection vulnerability in storeinfo.php in SoftBiz Classifieds PLUS allows remote attackers to execute arbitrary SQL commands via the id parameter...
softbiz-sql.txt
$ Classifieds SQL INJECTION BY IRCRASH AUTHOR : IRCRASH R3d.w0rm & Dr.Crash Script Download : http://www.softbizscripts.com/ DORK: "Powered by SoftbizScripts" inurl:storeinfo.php Injection Adress :...
Softbiz Classifieds PLUS (id) Remote SQL Injection Vulnerability
No description provided by source. $ Classifieds SQL INJECTION BY IRCRASH &...
Softbiz Classifieds PLUS - id SQL Injection
Softbiz Classifieds PLUS - id SQL Injection $ Classifieds SQL INJECTION BY IRCRASH AUTHOR : IRCRASH R3d.w0rm & Dr.Crash Script Download : http://www.softbizscripts.com/ DORK: "Powered by SoftbizScripts" inurl:storeinfo.php Injection Adress :...
Softbiz Classifieds PLUS (id) Remote SQL Injection Vulnerability
Exploit for unknown platform in category web applications ================================================================ Softbiz Classifieds PLUS id Remote SQL Injection Vulnerability ================================================================ $ Classifieds SQL INJECTION BY IRCRASH AUTHOR ...
Softbiz Classifieds PLUS - 'id' SQL Injection
$ Classifieds SQL INJECTION BY IRCRASH AUTHOR : IRCRASH R3d.w0rm & Dr.Crash Script Download : http://www.softbizscripts.com/ DORK: "Powered by SoftbizScripts" inurl:storeinfo.php Injection Adress :...
CVE-2007-3160
PHP remote file inclusion vulnerability in admin/header.php in PHP Real Estate Classifieds Premium Plus allows remote attackers to execute arbitrary PHP code via a URL in the loc parameter...
PHP Real Estate Classifieds Remote File Inclusion Exploit
No description provided by source. html head meta http-equiv="Content-Type" content="text/html; charset=windows-1254" titlePHP Real Estate Classifieds Premium Plusheader.php Remote File Inclusion Exploit/title script language="JavaScript"...
PHP Real Estate Classifieds - Remote File Inclusion
PHP Real Estate Classifieds - Remote File Inclusion PHP Real Estate Classifieds Premium Plusheader.php Remote File Inclusion Exploit //=============================================================================================== //Script Name: PHP Real Estate Classifieds Premium Plus // not sec...