Vt-Forum Lite 1.3 - vf_info.asp?StrMes Cross-Site Scripting

Vt-Forum Lite 1.3 - vfinfo.asp?StrMes Cross-Site Scripting source: https://www.securityfocus.com/bid/21428/info Vt-Forum Lite is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrar...

Vt-Forum Lite 1.3 - 'vf_newtopic.asp' IFRAME Element Cross-Site Scripting

source: https://www.securityfocus.com/bid/21428/info Vt-Forum Lite is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting use...

CVE-2006-6237

SQL injection vulnerability in the decodecookie function in thread.php in Woltlab Burning Board Lite 1.0.2 allows remote attackers to execute arbitrary SQL commands via the threadvisit Cookie parameter...

CVE-2006-6237

SQL injection vulnerability in the decodecookie function in thread.php in Woltlab Burning Board Lite 1.0.2 allows remote attackers to execute arbitrary SQL commands via the threadvisit Cookie parameter...

CVE-2006-6237

SQL injection vulnerability in the decodecookie function in thread.php in Woltlab Burning Board Lite 1.0.2 allows remote attackers to execute arbitrary SQL commands via the threadvisit Cookie parameter...

CVE-2006-6237

The CVE-2006-6237 entry describes a SQL injection in Woltlab Burning Board Lite 1.0.2, via the decode_cookie function in thread.php. An attacker can send a crafted threadvisit Cookie parameter to trigger arbitrary SQL execution, with remote, unauthenticated access. The available documents confirm...

Link Exchange Lite SQL 注入漏洞

Link Exchange Lite是一款基于ASP的WEB应用程序。 Link Exchange Lite不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞进行sql注入攻击，获得敏感信息。 问题是由于'categories.asp'脚本对用户提交的WEB参数缺少过滤，提交恶意sql查询作为参数数据，可更改原来的sql逻辑，获得敏感信息。 Softacid Link Exchange Lite 1.0 http://softacid.net/ http://www.example.com/categories.asp?catID=SQL Injection...

CVE-2006-6132

Multiple SQL injection vulnerabilities in Link Exchange Lite allow remote attackers to execute arbitrary SQL commands via 1 the search engine field to search.asp and 2 psearch parameter to linkslist.asp...

CVE-2006-6132

CVE-2006-6132 describes multiple SQL injection vulnerabilities in Link Exchange Lite. The affected components are the search functionality (the search engine field in search.asp) and the psearch parameter in linkslist.asp. The underlying issue allows remote attackers to execute arbitrary SQL comm...

CVE-2006-6132

Multiple SQL injection vulnerabilities in Link Exchange Lite allow remote attackers to execute arbitrary SQL commands via 1 the search engine field to search.asp and 2 psearch parameter to linkslist.asp...

PT-2006-6768 · Unknown · Link Exchange Lite

Name of the Vulnerable Software and Affected Versions: Link Exchange Lite affected versions not specified Description: The issue concerns SQL injection vulnerabilities that allow remote attackers to execute arbitrary SQL commands. This can be achieved via two methods: - the search engine field to...

WoltLab Burning Board Lite thread.php decode_cookie Function threadvisit Cookie Parameter SQL Injection

The remote version of Burning Board Lite fails to sanitize user- supplied cookie input before using it in the 'decodecookie' function in a database query. Regardless of PHP settings, an unauthenticated attacker may be able to leverage this issue to uncover sensitive information such as password...

lel-sql.txt

vendor site: http://softacid.net/ product:Link Exchange Lite bug: injection sql risk : high injection sql post : /search.asp post your sql query into the search engine field injection sql get: /linkslist.asp?psearch='sql laurent gaffié & benjamin mossé http://s-a-p.ca/ contact: [email protected]...

WoltLab Burning Board Lite wbb_userid Parameter PHP Unset SQL Injection

The remote version of Burning Board Lite fails to sanitize input to the 'wbbuserid' parameter before using it in a database query. Provided PHP's 'registerglobals' setting is enabled and 'magicquotesgpc' setting is disabled, an unauthenticated attacker may be able to leverage this issue to uncove...

Woltlab Burning Board Lite 1.0.2 decode_cookie() SQL Injection Exploit

No description provided by source. ?php printr' -------------------------------------------------------------------------------- Woltlab Burning Board Lite 1.0.2 decodecookie sql injection exploit by rgod [email protected] site: http://retrogod.altervista.org dork: "Powered by Burning Board Lite...

Wolflab Burning Board Lite 1.0.2 two sql injections

Wolflab Burning Board Lite 1.0.2 decodecookie sql injection exploit: http://retrogod.altervista.org/wbblite102sqlmqgbypass.html Wolflab Burning Board Lite 1.0.2 ZendHashDelKeyOrIndex / / blind sql injection exploit: http://retrogod.altervista.org/wbblite102sql.html...

Woltlab Burning Board Lite 1.0.2 decode_cookie() SQL Injection Exploit

Exploit for unknown platform in category web applications ====================================================================== Woltlab Burning Board Lite 1.0.2 decodecookie SQL Injection Exploit ====================================================================== ?php printr'...

Woltlab Burning Board Lite 1.0.2 - decode_cookie() SQL Injection

Woltlab Burning Board Lite 1.0.2 - decodecookie SQL Injection 126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" ".dechexord$string$i; els...

Woltlab Burning Board Lite 1.0.2 - 'decode_cookie()' SQL Injection

126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" ".dechexord$string$i; else $exa.=" 0".dechexord$string$i; $cont++;if $cont=...

Woltlab Burning Board Lite 1.0.2 - Blind SQL Injection

Woltlab Burning Board Lite 1.0.2 - Blind SQL Injection ?php printr' -------------------------------------------------------------------------------- Woltlab Burning Board Lite 1.0.2 ZendHashDelKeyOrIndex / / blind sql injection exploit by rgod [email protected] site: http://retrogod.altervista.org...