CVE-2009-4871: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in globepersonnelforum.asp in Logoshows BBS 2.0 allows remote attackers to execute arbitrary SQL commands via the forumid parameter...

BBSxp 2 0 0 8 (Build: 8.0.4) Sql injection vulnerability-vulnerability warning-the black bar safety net

File:MoveThread. asp MoveThread. asp line 2-2 of 4 % if CookieUserName =empty then error"you have nota href=""javascript:BBSXPModal. Open 'Login. asp',3 8 0,1 7 0;""login/a" 'save the cookie log can be ThreadID=Request"ThreadID" ' Sql Injection Vulnerability If Not IsNumericThreadID then...

Logoshows BBS 2.0 - forumid SQL Injection

Logoshows BBS 2.0 - forumid SQL Injection Author : RuzgarinOglu Script Name : Logoshows BBS v2.0 Script Download : http://www.logoshows.com/download/bbs88.rar Vulnerable Type : Sql Injection Demo : http://www.logoshows.com/bbs/ Licence And Pricing : $1.00 USD Special Thanks : By.Ultr@siStudent...

Logoshows BBS 2.0 - 'forumid' SQL Injection

Author : RuzgarinOglu Script Name : Logoshows BBS v2.0 Script Download : http://www.logoshows.com/download/bbs88.rar Vulnerable Type : Sql Injection Demo : http://www.logoshows.com/bbs/ Licence And Pricing : $1.00 USD Special Thanks : By.Ultr@siStudent...

CVE-2009-1747

SQL injection vulnerability in index.php in 26th Avenue bSpeak 1.10 allows remote attackers to execute arbitrary SQL commands via the forumid parameter in a post action...

Sql injection

SQL injection vulnerability in index.php in 26th Avenue bSpeak 1.10 allows remote attackers to execute arbitrary SQL commands via the forumid parameter in a post action...

CVE-2009-1747

SQL injection vulnerability in index.php in 26th Avenue bSpeak 1.10 allows remote attackers to execute arbitrary SQL commands via the forumid parameter in a post action...

CVE-2009-1747

CVE-2009-1747 is a SQL injection vulnerability in the 26th Avenue bSpeak 1.10 application. The issue resides in index.php during a post action and can be triggered via the forumid parameter, allowing remote attackers to execute arbitrary SQL commands. The NVD entry lists a CVSSv2 base score of 7....

CVE-2009-1747: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in 26th Avenue bSpeak 1.10 allows remote attackers to execute arbitrary SQL commands via the forumid parameter in a post action...

bSpeak 1.10 - 'forumid' Blind SQL Injection

-------------------------AllaH AkbaR------------------------------- forum bspeak v1.10 Blind SQL Injection Exploit ------------------------------------------------------------------- Discovered By: Snakespc ALGERIAN HaCkEr Mail: [email protected] Site:http://www.snakespc.com/sc/index.php Chi3aro...

bSpeak 1.10 - forumid Blind SQL Injection

bSpeak 1.10 - forumid Blind SQL Injection -------------------------AllaH AkbaR------------------------------- forum bspeak v1.10 Blind SQL Injection Exploit ------------------------------------------------------------------- Discovered By: Snakespc ALGERIAN HaCkEr Mail: [email protected]...

CVE-2009-0768: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in forumhop.php in YapBB 1.2 and earlier allows remote attackers to execute arbitrary SQL commands via the forumID parameter in a next action...

YapBB <= 1.2 (forumID) Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ================================================== YapBB ". "\n? Ex. : perl $0 localhost /YapBB root abcdefghijklmnopqrstuvwxyz". "\n\n"; sub query my $user, $chr, $pos = @; my $query = "123 OR IF ASCIISUBSTRINGSELECT password FROM "...

YapBB 1.2 - forumID Blind SQL Injection

YapBB 1.2 - forumID Blind SQL Injection --+++======================================================+++-- --+++====== YapBB ". "\n? Ex. : perl $0 localhost /YapBB root abcdefghijklmnopqrstuvwxyz". "\n\n"; sub query my $user, $chr, $pos = @; my $query = "123 OR IF ASCIISUBSTRINGSELECT password FROM...

Sql injection

SQL injection vulnerability in read.php in RiotPix 0.61 and earlier allows remote attackers to execute arbitrary SQL commands via the forumid parameter...

CVE-2009-0110: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in read.php in RiotPix 0.61 and earlier allows remote attackers to execute arbitrary SQL commands via the forumid parameter...

RiotPix 0.61 - 'forumid' Blind SQL Injection

\n\n", $argv0; exit; list$sploit, $target, $username, $topicid = $argv; $charsArr = array48, 49, 50, 51, 52, 53, 54, 55, 56, 57, 97, 98, 99, 100, 101, 102; $pos = 1; echo " Password Hash : "; while$pos != 33 for$i = 0; $i = count$charsArr; $i++ $query =...

RiotPix 0.61 - forumid Blind SQL Injection

RiotPix 0.61 - forumid Blind SQL Injection \n\n", $argv0; exit; list$sploit, $target, $username, $topicid = $argv; $charsArr = array48, 49, 50, 51, 52, 53, 54, 55, 56, 57, 97, 98, 99, 100, 101, 102; $pos = 1; echo " Password Hash : "; while$pos != 33 for$i = 0; $i = count$charsArr; $i++ $query =...

Sql injection

SQL injection vulnerability in forum.asp in W1L3D4 Philboard 1.14 and 1.2 allows remote attackers to execute arbitrary SQL commands via the forumid parameter. NOTE: this might overlap CVE-2008-2334, CVE-2008-1939, CVE-2007-2641, or CVE-2007-0920...

CVE-2008-5192

SQL injection vulnerability in forum.asp in W1L3D4 Philboard 1.14 and 1.2 allows remote attackers to execute arbitrary SQL commands via the forumid parameter. NOTE: this might overlap CVE-2008-2334, CVE-2008-1939, CVE-2007-2641, or CVE-2007-0920...