EUVD-2006-0527

Malware in sbrugna...

Sql injection

SQL injection vulnerability index.php in Dragoran Portal module 1.3 for Invision Power Board IPB allows remote attackers to execute arbitrary SQL commands via the site parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2006-0520

SQL injection vulnerability index.php in Dragoran Portal module 1.3 for Invision Power Board IPB allows remote attackers to execute arbitrary SQL commands via the site parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2006-0520

The CVE-2006-0520 entry concerns Invision Power Board’s Dragoran Portal module (IPB) version around 1.3. The vulnerability is an SQL injection in index.php via the site parameter, caused by inadequate sanitization before using the input in database queries. This allows remote attackers to inject ...

CVE-2006-0520

SQL injection vulnerability index.php in Dragoran Portal module 1.3 for Invision Power Board IPB allows remote attackers to execute arbitrary SQL commands via the site parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2006-0520: Undefined Security Weakness

SQL injection vulnerability index.php in Dragoran Portal module 1.3 for Invision Power Board IPB allows remote attackers to execute arbitrary SQL commands via the site parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

[SA18664] IPB Dragoran Portal Module "site" SQL Injection Vulnerability

TITLE: IPB Dragoran Portal Module "site" SQL Injection Vulnerability SECUNIA ADVISORY ID: SA18664 VERIFY ADVISORY: http://secunia.com/advisories/18664/ CRITICAL: Moderately critical IMPACT: Manipulation of data WHERE: From remote SOFTWARE: Dragoran Portal 1.x module for IPB...

Invision Power Board Dragoran Portal Module index.php site Parameter SQL Injection

The installation of Invision Power Board on the remote host contains an optional plugin module known as Dragoran Portal that fails to sanitize input to the 'site' parameter of the 'index.php' script before using it in database queries. An attacker may be able to leverage this issue to disclose...

Invision Power Board Dragoran Portal Mod 1.3 - SQL Injection

Invision Power Board Dragoran Portal Mod 1.3 - SQL Injection !/usr/bin/perl IPB Portal 1.3-Invision Power Board plugin Created By SkOd SED security Team , http://sed-team.be google: "Portal 1.3 by Dragoran" use IO::Socket; if @ARGV new Proto = "tcp", PeerAddr = "$serv", PeerPort = "80" || die...