CVE-2006-0939

The CVE-2006-0939 entry describes a SQL injection vulnerability in DCI-Taskeen 1.03. An attacker can manipulate the database by supplying crafted values for (1) id or (2) action to basket.php, or (3) id or (4) page to cat.php, potentially executing arbitrary SQL commands. Affected product/version...

SQL Injection in DCI-Taskeen

Hello Vulnerable: DCI-Taskeen v1.03 http://www.dci-designs.com Exploit : http://example.com/basket.php?action=addex&id=SQL http://example.com/basket.php?action=SQL http://example.com/basket.php?action=addr&id=SQL http://example.com/cat.php?do=cat&page=1&id=SQL http://example/cat.php?do=cat&page=S...

DCI-Taskeen 1.03 - cat.php Multiple SQL Injections

DCI-Taskeen 1.03 - cat.php Multiple SQL Injections source: https://www.securityfocus.com/bid/16828/info DCI-Taskeen is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query...

DCI-Taskeen 1.03 - 'cat.php' Multiple SQL Injections

source: https://www.securityfocus.com/bid/16828/info DCI-Taskeen is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could allow an attacker to...