CVE-2008-1653

CVE-2008-1653 describes a directory traversal vulnerability in the web app Sava’s Link Manager 2.0 . The flaw occurs in index.php , allowing remote attackers to include and execute arbitrary local files by manipulating the q parameter (directory traversal sequences). This is consistently reported...

CVE-2008-1644

The vulnerability is in Sava’s Link Manager 2.0, specifically in viewlinks.php. It is a SQL injection flaw exploitable via the category parameter, enabling remote attackers to execute arbitrary SQL commands. The description does not provide patch or remediation details, and no exploitation status...

CVE-2008-1653: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in Sava's Link Manager 2.0 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the q parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third part...

CVE-2008-1644: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in viewlinks.php in Sava's Link Manager 2.0 allows remote attackers to execute arbitrary SQL commands via the category parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

JiRos Link Manager 1.0 - 'viewlinks.asp?categoryId' SQL Injection

source: https://www.securityfocus.com/bid/21226/info JiRos Links Manager is prone to multiple input-validation vulnerabilities, including SQL- and HTML-injection issues, because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to steal...

WordPress 1.2.x SQL Injection Advisory

Module: wp-admin/link-manager.php Bug Type: SQL-Injection Example: http://wordpress-site.org/wp-admin/link-manager.php?linkid=3133720UNION20SELECT20ID 20as20linkid,userlogin20AS20linkurl,userpass20AS20linkname,NU LL,NULL,NULL, NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL20FROM20wpusers20WHERE...