Sql injection

SQL injection vulnerability in picspre.asp in Gallery MX 2.0.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter...

CVE-2008-6379

SQL injection vulnerability in picspre.asp in Gallery MX 2.0.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter...

CVE-2008-6379

CVE-2008-6379 is a SQL injection vulnerability in Gallery MX 2.0.0, affecting the pics_pre.asp endpoint and allowing remote attackers to execute arbitrary SQL commands via the ID parameter. The issue is documented in multiple sources (NVD, CVE lists) with a CVSS v2 base score of 7.5 (High) and ne...

CVE-2008-6378

This CVE (CVE-2008-6378) affects Calendar Mx Professional 2.0.0 and arises from a SQL injection in calendar_Eventupdate.asp where the ID parameter is not properly sanitized. Remote attackers can execute arbitrary SQL commands via that parameter. The vulnerability is rated CVSSv2 base score 7.5 (H...

CVE-2008-6379

SQL injection vulnerability in picspre.asp in Gallery MX 2.0.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter...

calendarmx-sql.txt

----------------------------بسم الله الرحمن الرحيم------------------------------ Tybe:calendarEventupdate.asp ID Blind SQL Injection Vulnerability Vendor: www.mxmania.net Software: Calendar Mx Professional author: я3d D3v!L Date: 28.11.2008 Home: www.ahacker.biz contact: N/A...

gallerymx-sql.txt

----------------------------بسم الله الرحمن الرحيم------------------------------ Tybe:picspre.asp ID Blind SQL Injection Vulnerability Vendor: www.mxmania.net/ Software: Gallery MX author: я3d D3v!L Date: 28.11.2008 Home: www.ahacker.biz contact: N/A...

Gallery MX 2.0.0 - Blind SQL Injection

----------------------------بسم الله الرحمن الرحيم------------------------------ Tybe:picspre.asp ID Blind SQL Injection Vulnerability Vendor: www.mxmania.net/ Software: Gallery MX author: я3d D3v!L Date: 28.11.2008 Home: www.ahacker.biz contact: N/A...

Gallery MX 2.0.0 (pics_pre.asp ID) Blind SQL Injection Vulnerability

Exploit for unknown platform in category web applications ==================================================================== Gallery MX 2.0.0 picspre.asp ID Blind SQL Injection Vulnerability ==================================================================== Tybe:picspre.asp ID Blind SQL...

Calendar MX Professional 2.0.0 - Blind SQL Injection

Calendar MX Professional 2.0.0 - Blind SQL Injection ----------------------------بسم الله الرحمن الرحيم------------------------------ Tybe:calendarEventupdate.asp ID Blind SQL Injection Vulnerability Vendor: www.mxmania.net Software: Calendar Mx Professional author: я3d D3v!L...

Gallery MX 2.0.0 (pics_pre.asp ID) Blind SQL Injection Vulnerability

No description provided by source. ----------------------------بسم الله الرحمن الرحيم------------------------------ Tybe:picspre.asp ID Blind SQL Injection Vulnerability Vendor: www.mxmania.net/ Software: Gallery MX author: я3d D3v!L Date: 28.11.2008 Home: www.ahacker.biz...

Calendar MX Professional 2.0.0 Blind SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================ Calendar MX Professional 2.0.0 Blind SQL Injection Vulnerability ================================================================ Tybe:calendarEventupdate.asp ID Blind SQL...

Gallery MX 2.0.0 - Blind SQL Injection

Gallery MX 2.0.0 - Blind SQL Injection ----------------------------بسم الله الرحمن الرحيم------------------------------ Tybe:picspre.asp ID Blind SQL Injection Vulnerability Vendor: www.mxmania.net/ Software: Gallery MX author: я3d D3v!L Date: 28.11.2008 Home: www.ahacker.biz...

Calendar MX Professional 2.0.0 - Blind SQL Injection

----------------------------بسم الله الرحمن الرحيم------------------------------ Tybe:calendarEventupdate.asp ID Blind SQL Injection Vulnerability Vendor: www.mxmania.net Software: Calendar Mx Professional author: я3d D3v!L Date: 28.11.2008 Home: www.ahacker.biz contact: N/A...

CVE-2008-2477

CVE-2008-2477 describes a SQL injection vulnerability in the MX-System/MxBB Portal 2.7.3, specifically in index.php where the vulnerable input is the page parameter. The underlying issue is improper handling of user-supplied input in constructing SQL queries, enabling remote attackers to execute ...

MX-System 2.7.3 (index.php page) Remote SQL Injection Vulnerability

No description provided by source. Name : MX-System 2.7.3 index.php page Remote SQL Injection Vulnerability Author : cOndemned Dork : intext:Powered by MX-System 2.7.3 Greetz : ZaBeaTy, str0ke, doctor, Avantura /3 PoC :...

MX-System 2.7.3 - index.php SQL Injection

MX-System 2.7.3 - index.php SQL Injection Name : MX-System 2.7.3 index.php page Remote SQL Injection Vulnerability Author : cOndemned Dork : intext:Powered by MX-System 2.7.3 Greetz : ZaBeaTy, str0ke, doctor, Avantura /3 PoC :...

MX-System 2.7.3 - 'index.php' SQL Injection

Name : MX-System 2.7.3 index.php page Remote SQL Injection Vulnerability Author : cOndemned Dork : intext:Powered by MX-System 2.7.3 Greetz : ZaBeaTy, str0ke, doctor, Avantura /3 PoC : http://target/path/index.php?page=-1+union+select+1,2,3,4,5,concatwschar58,version,user,now/...

mxsystem-sql.txt

Name : MX-System 2.7.3 index.php page Remote SQL Injection Vulnerability Author : cOndemned Dork : intext:Powered by MX-System 2.7.3 Greetz : ZaBeaTy, str0ke, doctor, Avantura /3 PoC : http://target/path/index.php?page=-1+union+select+1,2,3,4,5,concatwschar58,version,user,now/...

MX-System 2.7.3 (index.php page) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications =================================================================== MX-System 2.7.3 index.php page Remote SQL Injection Vulnerability =================================================================== Name : MX-System 2.7.3 index.php page...