Unfixed XSS vulnerability at www.promociona.net

Security researcher sl4xUz, has submitted on 18/06/2008 a cross-site-scripting XSS vulnerability affecting www.promociona.net, which at the time of submission ranked 470569 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 02/07/2008. It is...

CVE-2008-2691

SQL injection vulnerability in read.asp in JiRo's FAQ Manager eXperience 1.0 allows remote attackers to execute arbitrary SQL commands via the fID parameter...

Sql injection

SQL injection vulnerability in read.asp in JiRo's FAQ Manager eXperience 1.0 allows remote attackers to execute arbitrary SQL commands via the fID parameter...

CVE-2008-2691

CVE-2008-2691 : SQL injection in JiRo's FAQ Manager eXperience 1.0, via the fID parameter in read.asp, allows remote attackers to execute arbitrary SQL commands. Affected component: the read.asp endpoint handling fID. Exploitation details and exact root cause are not expanded beyond the parameter...

CVE-2008-2691

SQL injection vulnerability in read.asp in JiRo's FAQ Manager eXperience 1.0 allows remote attackers to execute arbitrary SQL commands via the fID parameter...

jiro-sql.txt

Script Name : JiRo´s FAQ Manager eXperience + Version : v 1.0 + Price : Single Website License 34.95 $ 2 Websites License 62.95 $ 5 Websites License 139.95 $ + Author : Underz0ne Crew + Home : http://www.underz0ne.net + Script In short : 'JiRos FAQ Management System is an essential element for...

JiRo?s FAQ Manager (read.asp fID) SQL Injection Vulnerability

No description provided by source. + Script Name : JiRo´s FAQ Manager eXperience + Version : v 1.0 + Price : Single Website License 34.95 $ 2 Websites License 62.95 $ 5 Websites License 139.95 $ + Author : Underz0ne Crew + Home : http://www.underz0ne.net + Script In short : 'JiRos FAQ Management...

JiRo?s FAQ Manager (read.asp fID) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================= JiRo's FAQ Manager read.asp fID SQL Injection Vulnerability ============================================================= + Script Name : JiRo?s FAQ Manager eXperience + Version...

JiRo's FAQ Manager eXperience 1.0 - 'fID' SQL Injection

Script Name : JiRo´s FAQ Manager eXperience + Version : v 1.0 + Price : Single Website License 34.95 $ 2 Websites License 62.95 $ 5 Websites License 139.95 $ + Author : Underz0ne Crew + Home : http://www.underz0ne.net + Script In short : 'JiRos FAQ Management System is an essential element for...

JiRos FAQ Manager eXperience 1.0 - fID SQL Injection

JiRos FAQ Manager eXperience 1.0 - fID SQL Injection + Script Name : JiRo´s FAQ Manager eXperience + Version : v 1.0 + Price : Single Website License 34.95 $ 2 Websites License 62.95 $ 5 Websites License 139.95 $ + Author : Underz0ne Crew + Home : http://www.underz0ne.net + Script In short :...

Sql injection

SQL injection vulnerability in faq.php in vBulletin 3.7.0 Gold allows remote attackers to execute arbitrary SQL commands via the q parameter in a search action...

Microsoft Security Bulletin MS08-029 – Moderate Vulnerabilities in Microsoft Malware Protection Engine Could Allow Denial of Service (952044)

Microsoft Security Bulletin MS08-029 – Moderate Vulnerabilities in Microsoft Malware Protection Engine Could Allow Denial of Service 952044 Published: May 13, 2008 Version: 1.0 General Information Executive Summary This security update resolves two privately reported vulnerabilities in the...

joomla faq SQL Injection

allinurl :"index.php?option=faq task" index.php?option=faq&task=viewallfaq&catid=-9999999//union//select//concatusername,0x3a,password,0x3a,0//from//mosusers/...

Joomla! / Mambo Component faq - 'catid' SQL Injection

source: https://www.securityfocus.com/bid/27822/info The Joomla! and Mambo 'faq' component is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

joomlafaq-sql.txt

allinurl :"index.php?option=faq task" index.php?option=faq&task=viewallfaq&catid=-9999999//union//select//concatusername,0x3a,password,0x3a,0//from//mosusers/...

Debian Security Advisory DSA 109-1 (faqomatic)

The remote host is missing an update to faqomatic announced via advisory DSA 109-1. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

Debian Security Advisory DSA 109-1 (faqomatic)

The remote host is missing an update to faqomatic announced via advisory DSA 109-1. OpenVAS Vulnerability Test $Id: deb1091.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 109-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Microsoft Security Bulletin MS08-001 – Critical Vulnerabilities in Windows TCP/IP Could Allow Remote Code Execution (941644)

Microsoft Security Bulletin MS08-001 – Critical Vulnerabilities in Windows TCP/IP Could Allow Remote Code Execution 941644 Published: January 8, 2008 Version: 1.0 General Information Executive Summary This critical security update resolves two privately reported vulnerabilities in Transmission...

MyPHP Forum多个SQL注入漏洞

BUGTRAQ ID: 27118 MyPHP Forum是一个易于架设并且易于使用基于MySQL与PHP的论坛。 MyPHP Forum处理用户请求数据时存在输入验证漏洞，远程攻击者可能利用此漏洞执行SQL注入攻击。 MyPHP Forum的faq.php文件没有正确地验证对id参数的输入，member.php文件没有正确验证对member参数的输入，search.php文件没有正确验证对searchtext和searchuser参数的输入，允许攻击者通过注入任意SQL代码控制SQL查询。成功攻击要求禁用了magicquotesgpc。 faq.php文件中的漏洞代码：...

CVE-2007-6667

SQL injection vulnerability in faq.php in MyPHP Forum 3.0 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: the member.php vector is already covered by CVE-2005-0413...