CVE-2008-3491: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in go.php in Scripts24 iPost 1.0.1 and iTGP 1.0.4 allows remote attackers to execute arbitrary SQL commands via the id parameter in a report action...

iPost 'go.php' SQL注入漏洞

BUGTRAQ ID: 30504 CNCAN ID：CNCAN-2008080417 iPost是一款基于PHP的WEB应用程序。 iPost不正确处理用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，可能获得敏感信息或操作数据库。 问题由于'go.php'脚本对用户提交给'id'参数缺少过滤，构建恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息或操作数据库。 Scripts24 iPost 1.0.1 目前没有解决方案提供： http://scripts24.com/ipost/index.php...

Scripts24 iTGP 1.0.4 (id) Remote SQL Injection Vulnerability

No description provided by source. Viva IslaM Viva IslaM Remote SQL Injection Vulnerability iTGP go.php action www.scripts24.com AuTh0r : Mr.SQL H0ME : WwW.PaL-HaCkEr.CoM & WwW.AtsDp.CoM Email : [email protected] SYRIAN Arab HACkErS -: Exploite :- www.Target.com/go.php?action=report&id= Rial id here...

Scripts24 iPost 1.0.1 (id) Remote SQL Injection Vulnerability

No description provided by source. Viva IslaM Viva IslaM Remote SQL Injection Vulnerability iPOST go.php action www.scripts24.com AuTh0r : Mr.SQL H0ME : WwW.PaL-HaCkEr.CoM & WwW.AtsDp.CoM Email : [email protected] SYRIAN Arab HACkErS -: Exploite :- www.Target.com/go.php?action=report&id= Real id her...

Scripts24 iTGP 1.0.4 - 'id' SQL Injection

Viva IslaM Viva IslaM Remote SQL Injection Vulnerability iTGP go.php action www.scripts24.com AuTh0r : Mr.SQL H0ME : WwW.PaL-HaCkEr.CoM & WwW.AtsDp.CoM Email : [email protected] SYRIAN Arab HACkErS -: Exploite :- www.Target.com/go.php?action=report&id= Rial id here...

ipost-sql.txt

Viva IslaM Viva IslaM Remote SQL Injection Vulnerability iPOST go.php action www.scripts24.com AuTh0r : Mr.SQL H0ME : WwW.PaL-HaCkEr.CoM & WwW.AtsDp.CoM Email : [email protected] SYRIAN Arab HACkErS -: Exploite :- www.Target.com/go.php?action=report&id= Real id here...

Scripts24 iTGP 1.0.4 (id) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================ Scripts24 iTGP 1.0.4 id Remote SQL Injection Vulnerability ============================================================ Viva IslaM Viva IslaM Remote SQL Injection Vulnerability...

CVE-2007-6578

The CVE-2007-6578 entry documents a SQL injection in the PHP ZLink 0.3 application, specifically in go.php via the id parameter. The vulnerability allows remote attackers to execute arbitrary SQL commands, as described in multiple sources (e.g., NVD entry). No mitigation, patch, or affected versi...

CVE-2007-6578: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in go.php in PHP ZLink 0.3 allows remote attackers to execute arbitrary SQL commands via the id parameter...

PHP ZLink 0.3 (go.php) Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl use LWP::UserAgent; use Getopt::Long; if!$ARGV3 print "\n \'/ "; print "\n -.- "; print "\n -----------------oOO------OOo----------------"; print "\n | PHP ZLink v0.3 go.php Remote SQL Injection |"; print "\n | coded by DNX |"; print "\n...

PHP ZLink 0.3 - go.php SQL Injection

PHP ZLink 0.3 - go.php SQL Injection !/usr/bin/perl use LWP::UserAgent; use Getopt::Long; if!$ARGV3 print "\n \'/ "; print "\n -.- "; print "\n -----------------oOO------OOo----------------"; print "\n | PHP ZLink v0.3 go.php Remote SQL Injection |"; print "\n | coded by DNX |"; print "\n...

PHP ZLink 0.3 - 'go.php' SQL Injection

!/usr/bin/perl use LWP::UserAgent; use Getopt::Long; if!$ARGV3 print "\n \'/ "; print "\n -.- "; print "\n -----------------oOO------OOo----------------"; print "\n | PHP ZLink v0.3 go.php Remote SQL Injection |"; print "\n | coded by DNX |"; print "\n...

CVE-2006-3549: Undefined Security Weakness

services/go.php in Horde Application Framework 3.0.0 through 3.0.10 and 3.1.0 through 3.1.1 does not properly restrict its image proxy capability, which allows remote attackers to perform "Web tunneling" attacks and use the server as a proxy via 1 http, 2 https, and 3 ftp URL in the url parameter...

CVE-2006-3548: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in Horde Application Framework 3.0.0 through 3.0.10 and 3.1.0 through 3.1.1 allow remote attackers to inject arbitrary web script or HTML via a 1 javascript URI or an external 2 http, 3 https, or 4 ftp URI in the url parameter in services/go.php a...

Horde < 3.0.11 / 3.1.2 Multiple Script XSS

The version of Horde installed on the remote host fails to validate input to the 'url' parameter of the 'services/go.php' script before using it in dynamically-generated content. An unauthenticated attacker may be able to leverage this issue to inject arbitrary HTML and script code into a user's...

CVE-2006-1260: Undefined Security Weakness

Horde Application Framework 3.0.9 allows remote attackers to read arbitrary files via a null character in the url parameter in services/go.php, which bypasses a sanity check...