Lucene search
+L

1490 matches found

Exploit DB
Exploit DB
added 2007/03/04 12:0 a.m.39 views

AJ Classifieds 1.0 - 'postingdetails.php' SQL Injection

AJ Classifieds 1.0 postingdetails.php Remote BLIND SQL Injection Exploit //'=============================================================================================== //'Script Name: AJ Classifieds 1.0 postingdetails.php Remote BLIND SQL Injection Exploit //'Coded by : ajann //'Author : ajan...

7.5CVSS5.8AI score0.01041EPSS
SaveExploits2
0day.today
0day.today
added 2007/03/04 12:0 a.m.53 views

AJ Classifieds 1.0 (postingdetails.php) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ==================================================================== AJ Classifieds 1.0 postingdetails.php Remote SQL Injection Exploit ==================================================================== AJ Classifieds 1.0...

7.1AI score
SaveExploits0
NVD
NVD
added 2006/11/10 1:7 a.m.14 views

CVE-2006-5828

SQL injection vulnerability in detail.php in DeltaScripts PHP Classifieds 7.1 and earlier allows remote attackers to execute arbitrary SQL commands via the userid parameter...

7.5CVSS8.4AI score0.01087EPSS
SaveExploits2References5
Cvelist
Cvelist
added 2006/11/10 1:0 a.m.25 views

CVE-2006-5828

SQL injection vulnerability in detail.php in DeltaScripts PHP Classifieds 7.1 and earlier allows remote attackers to execute arbitrary SQL commands via the userid parameter...

8.4AI score0.01087EPSS
SaveExploits2References5
CVE
CVE
added 2006/11/10 1:0 a.m.41 views

CVE-2006-5828

CVE-2006-5828 affects DeltaScripts PHP Classifieds before the 7.2/7.1 release: the vulnerable file is detail.php, where the user_id parameter is used in an SQL query, enabling remote attackers to execute arbitrary SQL commands. The entry explicitly notes a SQL injection vulnerability in DeltaScri...

7.5CVSS8.4AI score0.01087EPSS
SaveExploits2References5Affected Software1
seebug.org
seebug.org
added 2006/11/06 12:0 a.m.27 views

PHP Classifieds <= 7.1 (detail.php) Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl Script Name: Php Classifieds = 7.1 detail.php Remote SQL Injection Exploit Coded by : ajann Author : ajann Contact : : use IO::Socket; if@ARGV 3 print " ======================================================================== // Php Classifieds =...

7.1AI score
SaveExploits0
exploitpack
exploitpack
added 2006/11/05 12:0 a.m.11 views

PHP Classifieds 7.1 - detail.php SQL Injection

PHP Classifieds 7.1 - detail.php SQL Injection !/usr/bin/perl Script Name: Php Classifieds newProto = "tcp", PeerAddr = "$classifiedsserver", PeerPort = "$classifiedsport" || die "\n...

0.7AI score
SaveExploits0
0day.today
0day.today
added 2006/11/05 12:0 a.m.18 views

PHP Classifieds <= 7.1 (detail.php) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ================================================================ PHP Classifieds = 7.1 detail.php Remote SQL Injection Exploit ================================================================ !/usr/bin/perl Script Name: Php Classifieds = 7...

7.1AI score
SaveExploits0
Exploit DB
Exploit DB
added 2006/11/05 12:0 a.m.22 views

PHP Classifieds 7.1 - 'detail.php' SQL Injection

!/usr/bin/perl Script Name: Php Classifieds newProto = "tcp", PeerAddr = "$classifiedsserver", PeerPort = "$classifiedsport" || die "\n+ Connection failed...\n"; print $classifieds "...

7.5CVSS5.8AI score0.01087EPSS
SaveExploits2
seebug.org
seebug.org
added 2006/10/27 12:0 a.m.16 views

PHP Classifieds catid_search及catid变量远程SQL注入漏洞

PHP Classifieds是一款基于WEB的PHP编写的目录分类程序。 PHP Classifieds对用户提交给的参数缺少正确充分的过滤,远程攻击者可以利用此漏洞非授权操作数据库。 PHP Classifieds的index.php和search.php脚本对用户提交catidsearch或catid参数数据缺少充分过滤,远程攻击者可以通过在输入数据中插入特定的SQL命令来非授权获取对数据库的访问。 DeltaScripts PHP Classifieds = 7.1 目前厂商还没有提供补丁或者升级程序,我们建议使用此软件的用户随时关注厂商的主页以获取最新版本:...

7.1AI score
SaveExploits0
NVD
NVD
added 2006/10/26 4:7 p.m.16 views

CVE-2006-5520

PHP remote file inclusion vulnerability in functions.php in DeltaScripts PHP Classifieds 7.1 allows remote attackers to execute arbitrary PHP code via a URL in the setpath parameter...

7.5CVSS7.5AI score0.01442EPSS
SaveExploits0References4
CVE
CVE
added 2006/10/26 4:0 p.m.55 views

CVE-2006-5520

CVE-2006-5520 describes a PHP remote file inclusion vulnerability in the DeltaScripts PHP Classifieds 7.1 package. The flaw is in the file functions.php , allowing a remote attacker to execute arbitrary PHP code by supplying a URL in the set_path parameter. Attack impact is rated as high (CVSS v2...

7.5CVSS7.9AI score0.01442EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
added 2006/10/26 4:0 p.m.24 views

CVE-2006-5520

PHP remote file inclusion vulnerability in functions.php in DeltaScripts PHP Classifieds 7.1 allows remote attackers to execute arbitrary PHP code via a URL in the setpath parameter...

7.5AI score0.01442EPSS
SaveExploits0References4
Packet Storm
Packet Storm
added 2006/10/24 12:0 a.m.35 views

PHPClassifieds7.1.txt

=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= PHP Classifieds 7.1 - Remote File Include Vulnerability =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Download : http://softadmin.deltascripts.com/downloadget.php?id=32...

7.4AI score
SaveExploits0
securityvulns
securityvulns
added 2006/10/21 12:0 a.m.43 views

PHP Classifieds 7.1 - Remote File Include Vulnerability

=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= PHP Classifieds 7.1 - Remote File Include Vulnerability =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Download : http://softadmin.deltascripts.com/downloadget.php?id=32...

0.9AI score
SaveExploits0
NVD
NVD
added 2006/10/16 6:7 p.m.12 views

CVE-2006-5293

Cross-site scripting XSS vulnerability in index.php in PhpOutsourcing Noah's Classifieds 1.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the frommethod parameter...

6.8CVSS5.7AI score0.01251EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2006/10/16 6:0 p.m.22 views

CVE-2006-5293

Cross-site scripting XSS vulnerability in index.php in PhpOutsourcing Noah's Classifieds 1.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the frommethod parameter...

5.7AI score0.01251EPSS
SaveExploits0References5
CVE
CVE
added 2006/10/16 6:0 p.m.42 views

CVE-2006-5293

CVE-2006-5293 affects PhpOutsourcing Noah’s Classifieds, prior to or including version 1.3, where index.php is vulnerable to cross-site scripting via the frommethod parameter. Affected component: index.php; vulnerability type: XSS. CVSS v2 base score 6.8 (Medium) with network attack vector, requi...

6.8CVSS6AI score0.01251EPSS
SaveExploits0References5Affected Software1
Packet Storm
Packet Storm
added 2006/10/14 12:0 a.m.24 views

NoahsClassifieds.txt

Noah's Classifieds is prone to a Cross Site Scripting Vulnerability, due to a failure in the application to properly sanitize the "frommethod" POST parameter in "index.php" : alert'XSS Vulnerable';" Advisory: http://zone14.free.fr/advisories/5/ --Raphael HUCK...

7.4AI score
SaveExploits0
securityvulns
securityvulns
added 2006/10/12 12:0 a.m.87 views

Noah&#39;s Classifieds Cross Site Scripting Vulnerability

Noah's Classifieds is prone to a Cross Site Scripting Vulnerability, due to a failure in the application to properly sanitize the "frommethod" POST parameter in "index.php" : html body form method="POST" enctype="multipart/form-data" action="http://www.example.com/classifieds/index.php" input...

0.2AI score
SaveExploits0
Rows per page
Query Builder