Sql injection

Multiple SQL injection vulnerabilities in Stride 1.0 allow remote attackers to execute arbitrary SQL commands via 1 the p parameter to main.php in the Content Management System, 2 the id parameter in a sto cmd action to shop.php in the Merchant subsystem, or the 3 course or 4 provider parameter t...

CVE-2007-5430

Multiple SQL injection vulnerabilities in Stride 1.0 allow remote attackers to execute arbitrary SQL commands via 1 the p parameter to main.php in the Content Management System, 2 the id parameter in a sto cmd action to shop.php in the Merchant subsystem, or the 3 course or 4 provider parameter t...

CVE-2007-5430

Multiple SQL injection vulnerabilities in Stride 1.0 allow remote attackers to execute arbitrary SQL commands via 1 the p parameter to main.php in the Content Management System, 2 the id parameter in a sto cmd action to shop.php in the Merchant subsystem, or the 3 course or 4 provider parameter t...

Scott Manktelow Design Stride 1.0 - Content Management System main.php SQL Injection

Scott Manktelow Design Stride 1.0 - Content Management System main.php SQL Injection source: https://www.securityfocus.com/bid/26041/info Scott Manktelow Design Stride 1.0 Content Management System is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied...

Scott Manktelow Design Stride 1.0 - 'Content Management System main.php' SQL Injection

source: https://www.securityfocus.com/bid/26041/info Scott Manktelow Design Stride 1.0 Content Management System is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker t...

eGov Content Manager Cross Site Scripting Vulrnability

HSC eGov Content Manager Cross Site Scripting Vulrnability The eGov Manager was designed to simplify the efforts of government staffers who are responsible for posting public documents, news updates, events, managing staff directories and online services. This issue is due to a failure in the...

actsitebase-rfi.txt

'/ -.- ---------------------oOO------OOo-------------------- | actSite v1.991 Beta base.php Remote File Inclusion | | coded by DNX | -------------------------------------------------------- ! Discovered: DNX ! Vendor: http://www.actsite.de ! Detected: 02.09.2007 ! Reported: 02.09.2007 ! Remote:...

actSite 1.991 Beta (base.php) Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ================================================================= actSite 1.991 Beta base.php Remote File Inclusion Vulnerability ================================================================= '/ -.-...

Novus 1.0 (notas.asp nota_id) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================ Novus 1.0 notas.asp notaid Remote SQL Injection Vulnerability ================================================================ Novus - Sistema de administracion y contenido...

множественные уязвимости в Stride v1.0

Здравствуйте, 3APA3A. Software: Stride v1.0 Content Management System, Merchant, Courses Vendor: www.scottmanktelow.com Vulnerability: множественные уязвимости Risk: высокий Date: 16.09.2007 discovered by durito -duritoatmaildotru- HTTP: durito.narod.ru +:| Details |: SQL-инъекции +:| Экплойт |:...

Micro CMS 3.5 (revert-content.php) Remote SQL Injection Vulnerability

No description provided by source. not sec group http://www.notsec.com [email protected] Micro CMS 3.5 Class: SQL Injection Found: 28/08/2007 Remote: Yes Site: http://www.impliedbydesign.com/ibd-micro-cms-static-content-manager.html Download: http://www.impliedbydesign.com/apps/microcms/microcms.zi...

Micro CMS 3.5 - revert-content.php SQL Injection

Micro CMS 3.5 - revert-content.php SQL Injection not sec group http://www.notsec.com [email protected] Micro CMS 3.5 Class: SQL Injection Found: 28/08/2007 Remote: Yes Site: http://www.impliedbydesign.com/ibd-micro-cms-static-content-manager.html Download:...

Ripe Website Manager SQL Injection and Cross Site Scripting Vulnerabilities

Ripe Website Manager SQL Injection and Cross Site Scripting Vulnerabilities OS2A ID: OS2A1009 Status: 07/11/2007 Issue Discovered 07/12/2007 Reported to the Vendor 08/22/2007 Public Release Class: SQL Injection and Cross Site Scripting Severity: High Overview: --------- Ripe Website Manager is a...

eXV2.de Browser Cookie is not properly sanitised

Details ======= Product: eXV2.de CMS = 2.0.5. Severity: moderated Remote-Exploit: yes Vendor-URL: http://www.exv2.de/ Vendor-Status: informed Advisory-Status: published Credits ============ Discovered by: Vision aka n-tier http://www.i-s-o.org Original Advisory: ============...

Joomla 1.0.12 CMS - Session fixation Issue in backend Administration interface

==================================================================================== Team Intell Security Advisory TISA2007-03 ------------------------------------------------------------------------------------ Joomla 1.0.12 CMS - Session fixation Issue in backend Administration interface...

[SECURITY] Fedora 7 Update: drupal-5.2-1.fc7

Equipped with a powerful blend of features, Drupal is a Content Management System written in PHP that can support a variety of websites ranging from personal weblogs to large community-driven websites. Drupal is highly configurable, skinnable, and secure...

[Full-disclosure] ActiveWeb Contentserver CMS SQL Injection Management Interface

Advisory: ActiveWeb Contentserver CMS SQL Injection Management Interface RedTeam Pentesting discovered an SQL Injection in the picturerealedit.asp script of the activeWeb contentserver CMS during a penetration test. An editor with the permission to edit pictures can exploit this by injecting...

endonesia84-sql.txt

Application: eNdonesia 8.4 Web Site: http://www.endonesia.org/ Versions: all Platform: linux, windows Bug: multiple injection sql Fix Available: no ------------------------------------------------------- 1 Introduction 2 Bug 3 proof of concept =========== 1 Introduction =========== "eNdonesia 8.4...

[Full-disclosure] Papoo CMS 3.6 - SQL Injection

Papoo Content Management System Backend SQL Injection Jun 24 2007 Product Papoo Content Management System Vulnerable Versions Papoo 3.6 and maybe prior Vendor Status The Vendor was notified and the issue was fixed. A patch is available at http://www.papoo.de/index/menuid/204/reporeid/215 Details...

Elxis CMS <= 2006.4 - banner module - sql injection

Elxis Content Management System Banner Mod SQL Injection Jun 14 2007 ------------------------------------------------------------------------------- Product Elxis Content Management System Vulnerable Versions All versions to 2006.4 of the Elxis CMS. Vendor Status The Vendor was notified and the...