EUVD-2007-4053

Malware in sbrugna...

EUVD-2008-6149

Malware in sbrugna...

EUVD-2007-4147

Malware in sbrugna...

IndexScript <= 2.8 (show_cat.php cat_id) SQL Injection Vulnerability

No description provided by source. Site: http://indexscript.com Found By: xssvgamer Google Dork: allintext: This site is powered by IndexScript exploit: http://www.example.com/showcat.php?catid=-1 UNION ALL SELECT login,password FROM dirlogin / Blind SQL injection in indexscript.. Vul Code: $sql ...

CVE-2008-6179

SQL injection vulnerability in sugcat.php in IndexScript 3.0 allows remote attackers to execute arbitrary SQL commands via the parentid parameter, a different vector than CVE-2007-4069...

Sql injection

SQL injection vulnerability in sugcat.php in IndexScript 3.0 allows remote attackers to execute arbitrary SQL commands via the parentid parameter, a different vector than CVE-2007-4069...

CVE-2008-6179

CVE-2008-6179 describes an SQL injection in sug_cat.php of IndexScript 3.0. The root cause is improper handling of the parent_id parameter, enabling remote attackers to inject arbitrary SQL. This is a different vector from CVE-2007-4069. The connected PRION/NVD entries confirm the same vulnerabil...

CVE-2008-6179: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in sugcat.php in IndexScript 3.0 allows remote attackers to execute arbitrary SQL commands via the parentid parameter, a different vector than CVE-2007-4069...

IndexScript 3.0 - parent_id SQL Injection

IndexScript 3.0 - parentid SQL Injection ------------------------------------------------------------------------------------------------------------- IndexScript v 3.0 sugcat.php?parentid - SQL injection Vulnerability http://www.indexscript.com/download.php IndexScript is a feature-rich and yet...

IndexScript 3.0 - 'parent_id' SQL Injection

------------------------------------------------------------------------------------------------------------- IndexScript v 3.0 sugcat.php?parentid - SQL injection Vulnerability http://www.indexscript.com/download.php IndexScript is a feature-rich and yet easy-to-use directory script that you can...

IndexScript 3.0 (sug_cat.php parent_id) SQL Injection Vulnerability

No description provided by source. ------------------------------------------------------------------------------------------------------------- IndexScript v 3.0 sugcat.php?parentid - SQL injection Vulnerability http://www.indexscript.com/download.php IndexScript is a feature-rich and yet...

IndexScript 3.0 (sug_cat.php parent_id) SQL Injection Vulnerability

Exploit for unknown platform in category web applications =================================================================== IndexScript 3.0 sugcat.php parentid SQL Injection Vulnerability ===================================================================...

indexscript30-sql.txt

------------------------------------------------------------------------------------------------------------- IndexScript v 3.0 sugcat.php?parentid - SQL injection Vulnerability http://www.indexscript.com/download.php IndexScript is a feature-rich and yet easy-to-use directory script that you can...

Sql injection

Multiple SQL injection vulnerabilities in IndexScript 2.7 and 2.8 before 20070726 allow remote attackers to execute arbitrary SQL commands via the 1 catid, 2 startid, 3 rowparentid, and 4 rowcatid parameters to unspecified components, related to use of these parameters within include/utils.php...

CVE-2007-4163

Multiple SQL injection vulnerabilities in IndexScript 2.7 and 2.8 before 20070726 allow remote attackers to execute arbitrary SQL commands via the 1 catid, 2 startid, 3 rowparentid, and 4 rowcatid parameters to unspecified components, related to use of these parameters within include/utils.php...

CVE-2007-4163

Multiple SQL injection vulnerabilities in IndexScript 2.7 and 2.8 before 20070726 allow remote attackers to execute arbitrary SQL commands via the 1 catid, 2 startid, 3 rowparentid, and 4 rowcatid parameters to unspecified components, related to use of these parameters within include/utils.php...

CVE-2007-4163

CVE-2007-4163: Concrete SQL injection vulnerabilities in IndexScript 2.7 and 2.8 (before 20070726) allow remote attackers to execute arbitrary SQL via (1) cat_id, (2) start_id, (3) row[parent_id], and (4) row[cat_id] parameters used in include/utils.php. The show_cat.php cat_id vector is noted as...

CVE-2007-4163: Undefined Security Weakness

Multiple SQL injection vulnerabilities in IndexScript 2.7 and 2.8 before 20070726 allow remote attackers to execute arbitrary SQL commands via the 1 catid, 2 startid, 3 rowparentid, and 4 rowcatid parameters to unspecified components, related to use of these parameters within include/utils.php...

CVE-2007-4069

SQL injection vulnerability in showcat.php in IndexScript 2.8 and earlier allows remote attackers to execute arbitrary SQL commands via the catid parameter...

Sql injection

SQL injection vulnerability in showcat.php in IndexScript 2.8 and earlier allows remote attackers to execute arbitrary SQL commands via the catid parameter...