7215 matches found
SQL-Injection in evoArticles
Advisory: SQL-Injection in evoArticles Home Page: http://evo-dev.com/ Уязвимость/Vulnerability: SQL-injection Уязвимый скрипт/Vulnerable script: index.php http://www.target.com/index.php?do=cat&total=19&cid=37&sort=date&order=desc'&page=2...
SaPHPLession30.txt
SaPHPLesson 3.0 Multbugs By :-- D3vil-0x1 | Devil-00 --: 1- Unfilter array Filename :- show.php Line :- 102 code $hrow = $Row2;/code Fix :- Add To Line 11 /show.php This Code :- we add the code to global to fix all unfilter ver. at the code : code $hrow = array;/code Exploit :- GET ^...
CVE-2006-2209
Multiple SQL injection vulnerabilities in index.php in PHP Arena paCheckBook 1.1 allow remote attackers to execute arbitrary SQL commands via 1 the transtype parameter in an add action or 2 entry parameter in an edit action. NOTE: the provenance of this information is unknown; the details are...
Sql injection
SQL injection vulnerability in index.php in Invision Power Board allows remote attackers to execute arbitrary SQL commands via the pid parameter in a reputation action. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2006-2211
Absolute path traversal vulnerability in index.php in 321soft PhP-Gallery 0.9 allows remote attackers to browse arbitrary directories via the path parameter...
Path traversal
Absolute path traversal vulnerability in index.php in 321soft PhP-Gallery 0.9 allows remote attackers to browse arbitrary directories via the path parameter...
Sql injection
Multiple SQL injection vulnerabilities in index.php in PHP Arena paCheckBook 1.1 allow remote attackers to execute arbitrary SQL commands via 1 the transtype parameter in an add action or 2 entry parameter in an edit action. NOTE: the provenance of this information is unknown; the details are...
CVE-2006-2217
SQL injection vulnerability in index.php in Invision Power Board allows remote attackers to execute arbitrary SQL commands via the pid parameter in a reputation action. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2006-2217
SQL injection vulnerability in index.php in Invision Power Board allows remote attackers to execute arbitrary SQL commands via the pid parameter in a reputation action. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2006-2209
PHP Arena paCheckBook 1.1 is affected by multiple SQL injection vulnerabilities in index.php. The issues allow remote attackers to execute arbitrary SQL commands via the transtype parameter in an add action or the entry parameter in an edit action. The description notes that provenance is from th...
CVE-2006-2211
321soft PhP-Gallery 0.9 is affected by an absolute path traversal in index.php via the path parameter. This allows remote attackers to browse arbitrary directories on the server. No remediation details are provided in the supplied documents; verify with vendor advisories or updates for a patched ...
CVE-2006-2217
The CVE-2006-2217 entry describes a SQL injection vulnerability in Invision Power Board’s index.php, exploitable via the pid parameter in a reputation action. The underlying issue is an injection flaw that allows remote attackers to execute arbitrary SQL commands. The description appears consiste...
CVE-2006-2163
Cross-site scripting XSS vulnerability in index.php in Pinnacle Cart 3.33 and earlier allows remote attackers to inject arbitrary web script or HTML via the setbackurl parameter...
CVE-2006-2187
Multiple cross-site scripting XSS vulnerabilities in zenphoto 1.0.1 beta and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 a parameter in i.php, and the 2 album and 3 image parameters in index.php...
CVE-2006-2146
Multiple cross-site scripting XSS vulnerabilities in index.php in HB-NS 1.1.6 allow remote attackers to inject arbitrary web script or HTML via the 1 postername, 2 posteremail, 3 posterhomepage, or 4 message parameter...
Sql injection
Multiple SQL injection vulnerabilities in index.php in HB-NS 1.1.6 allow remote attackers to execute arbitrary SQL commands via the 1 topic or 2 id parameter...
CVE-2006-2145
In the provided documents, CVE-2006-2145 affects HB-NS 1.1.6 and relates to multiple SQL injection flaws in index.php that allow remote attackers to execute arbitrary SQL commands via the (1) topic or (2) id parameter. The NVD entry lists a CVSS v2 base score of 6.4 (Medium) with network attack v...
CVE-2006-2146
HB-NS (Harold Bakker’s NewsScript) 1.1.6 contains multiple cross-site scripting (XSS) vulnerabilities in index.php. The CVE-2006-2146 entry states remote attackers can inject arbitrary script/HTML via the (1) poster_name, (2) poster_email, (3) poster_homepage, or (4) message parameters. The NVD e...
CVE-2006-2146
Multiple cross-site scripting XSS vulnerabilities in index.php in HB-NS 1.1.6 allow remote attackers to inject arbitrary web script or HTML via the 1 postername, 2 posteremail, 3 posterhomepage, or 4 message parameter...