EUVD-2006-1238

Malware in sbrugna...

DSCounter 1.2 Index.PHP SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/17112/info DSCounter is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow...

[eVuln] DSCounter 'X-Forwarded-For' SQL Injection Vulnerability

New eVuln Advisory: DSCounter 'X-Forwarded-For' SQL Injection Vulnerability http://evuln.com/vulns/98/summary.html --------------------Summary---------------- eVuln ID: EV0098 CVE: CVE-2006-1234 Software: DSCounter Sowtware's Web Site: http://dsportal.uw.hu/ Versions: 1.2 Critical Level: Moderate...

Sql injection

SQL injection vulnerability in index.php in DSCounter 1.2, with magicquotesgpc disabled, allows remote attackers to execute arbitrary SQL commands via the X-Forwarded-For field HTTPXFORWARDEDFOR environment variable in an HTTP header...

CVE-2006-1234

SQL injection vulnerability in index.php in DSCounter 1.2, with magicquotesgpc disabled, allows remote attackers to execute arbitrary SQL commands via the X-Forwarded-For field HTTPXFORWARDEDFOR environment variable in an HTTP header...

CVE-2006-1234

DSCounter 1.2 contains a SQL Injection via the X-Forwarded-For header (HTTP_X_FORWARDED_FOR) when magic_quotes_gpc is disabled. The vulnerable script is index.php; attacker can inject arbitrary SQL to the query, enabling remote exploitation. Exploitation information is provided (PoC/Exploit avail...

CVE-2006-1234

SQL injection vulnerability in index.php in DSCounter 1.2, with magicquotesgpc disabled, allows remote attackers to execute arbitrary SQL commands via the X-Forwarded-For field HTTPXFORWARDEDFOR environment variable in an HTTP header...

DSCounter 1.2 - index.php SQL Injection

DSCounter 1.2 - index.php SQL Injection source: https://www.securityfocus.com/bid/17112/info DSCounter is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could...

CVE-2006-1234: Undefined Security Weakness

SQL injection vulnerability in index.php in DSCounter 1.2, with magicquotesgpc disabled, allows remote attackers to execute arbitrary SQL commands via the X-Forwarded-For field HTTPXFORWARDEDFOR environment variable in an HTTP header...

DSCounter 1.2 - 'index.php' SQL Injection

source: https://www.securityfocus.com/bid/17112/info DSCounter is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the...