EUVD-2008-0887

Malware in sbrugna...

EasyContent CMS (participant.php?id) Remote SQL injection Vulnerability

IRANIAN THE BEST HACKERS IN THE WORLD Remote SQL injection Vulnerability EasyContent CMS participant.php?id AuTh0r : EhsanHp200 H0ME : www.ehsanhp.blogsky.com Email : [email protected] Vendor : http://www.emmattweb.com/ Persian Gulf 4 Ever! Dork : "Powered by EasyContent CMS"...

EasyContent CMS SQL Injection

IRANIAN THE BEST HACKERS IN THE WORLD Remote SQL injection Vulnerability EasyContent CMS participant.php?id AuTh0r : EhsanHp200 H0ME : www.ehsanhp.blogsky.com Email : [email protected] Vendor : http://www.emmattweb.com/ Persian Gulf 4 Ever! Dork : "Powered by EasyContent CMS"...

PHP-Nuke EasyContent模块'page_id' SQL注入漏洞

BUGTRAQ ID: 27897 CNCAN ID:CNCAN-2008022206 PHP-Nuke EasyContent模块是一款基于PHP的WEB应用程序。 PHP-Nuke EasyContent模块不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞进行SQL注入攻击，可获得敏感信息或操作数据库。 问题是由于脚本对用户提交的'pageid'参数处理缺少充分过滤，提交恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息或操作数据库。 PHP-Nuke EasyContent Module 目前没有详细解决方案提供： http://www.phpnuke.org/...

Sql injection

SQL injection vulnerability in modules.php in the EasyContent module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the pageid parameter...

CVE-2008-0880

SQL injection vulnerability in modules.php in the EasyContent module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the pageid parameter...

CVE-2008-0880

The CVE-2008-0880 entry concerns an SQL injection in the EasyContent module for PHP-Nuke, exploitable via the page_id parameter in modules.php. Affected component: EasyContent module (PHP-Nuke). Root cause: unsafely constructed SQL queries in modules.php that interpolate page_id without proper va...

CVE-2008-0880

SQL injection vulnerability in modules.php in the EasyContent module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the pageid parameter...

CVE-2008-0880: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in modules.php in the EasyContent module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the pageid parameter...

PHP-Nuke Module EasyContent (page_id) SQL Injection Vulnerability

No description provided by source. ------------------------------------------------------------------------------- php-nuke modules EasyContent remote sql inj ------------------------------------------------------------------------------- found =xoron...

phpnukeeasy-sql.txt

------------------------------------------------------------------------------- php-nuke modules EasyContent remote sql inj ------------------------------------------------------------------------------- found =xoron -------------------------------------------------------------------------------...

PHP-Nuke Module EasyContent (page_id) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================= PHP-Nuke Module EasyContent pageid SQL Injection Vulnerability =================================================================...

PHP-Nuke Module EasyContent - 'page_id' SQL Injection

------------------------------------------------------------------------------- php-nuke modules EasyContent remote sql inj ------------------------------------------------------------------------------- found =xoron -------------------------------------------------------------------------------...

PHP-Nuke Module EasyContent - page_id SQL Injection

PHP-Nuke Module EasyContent - pageid SQL Injection ------------------------------------------------------------------------------- php-nuke modules EasyContent remote sql inj ------------------------------------------------------------------------------- found =xoron...