MKPortal Contact module XSS Vulnerability

========================================= MKPortal Contact module XSS Vulnerability ========================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' /' / /' 0 0 /, // ,/ / 1 1 // /' / // /' / /' 0 0 / / / / / / 1 1 / / 0 0 ////// // // //...

Sql injection

SQL injection vulnerability in mail.php in PHPenpals 1.1 and earlier allows remote attackers to execute arbitrary SQL commands via the ID parameter. NOTE: the profile.php vector is already covered by CVE-2006-0074...

CVE-2009-1814

CVE-2009-1814 describes an SQL injection in mail.php of PHPenpals (v1.1 and earlier) allowing remote SQL command execution via the ID parameter. Consequences and patch details are not provided here beyond noting that the profile.php vector is covered by CVE-2006-0074; the connected records indica...

CVE-2009-1814

SQL injection vulnerability in mail.php in PHPenpals 1.1 and earlier allows remote attackers to execute arbitrary SQL commands via the ID parameter. NOTE: the profile.php vector is already covered by CVE-2006-0074...

CVE-2009-0340

CVE-2009-0340 affects Simple PHP Newsletter 1.5. Multiple directory traversal vulnerabilities allow remote attackers to read arbitrary files via a ".." in the olang parameter to (1) mail.php and (2) mailbar.php. Root cause: improper validation of the olang parameter enables path traversal. Impact...

Simple PHP Newsletter 1.5 Local File Inclusion

--:local file include:-- --------------------------------- script:Simple PHP Newsletter 1.5 ---------------------------------------------- download from:http://quirm.net/download/23/ ---------------------------------------------- ............................................... vul:/mail.php line...

Simple PHP Newsletter 1.5 (olang) Local File Inclusion Vulnerabilities

No description provided by source. --:local file include:-- --------------------------------- script:Simple PHP Newsletter 1.5 ---------------------------------------------- download from:http://quirm.net/download/23/ ----------------------------------------------...

Simple PHP NewsLetter 1.5 - Local File Inclusion

--:local file include:-- --------------------------------- script:Simple PHP Newsletter 1.5 ---------------------------------------------- download from:http://quirm.net/download/23/ ---------------------------------------------- ............................................... vul:/mail.php line...

Sql injection

Multiple SQL injection vulnerabilities in E-Uploader Pro 1.0 aka Uploader PRO, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 id parameter to a img.php, b file.php, c mail.php, d thumb.php, e zip.php, and f zipit.php, and 2 the view parameter t...

Sql injection

SQL injection vulnerability in members/mail.php in E-topbiz Online Dating 3 1.0 allows remote authenticated users to execute arbitrary SQL commands via the mailid parameter in a veiw action...

CVE-2008-3490

SQL injection vulnerability in members/mail.php in E-topbiz Online Dating 3 1.0 allows remote authenticated users to execute arbitrary SQL commands via the mailid parameter in a veiw action...

CVE-2008-0422

SQL injection vulnerability in mail.php in boastMachine aka bMachine 3.1 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

SQL injection vulnerability in mail.php in boastMachine aka bMachine 3.1 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-0422

CVE-2008-0422 describes a SQL injection in boastMachine (aka bMachine)

boastMachine <= 3.1 (mail.php id) SQL Injection Vulnerability

No description provided by source. ...:::::boastMachine =3.1 SQL Injection Vulnerbility ::::.... Virangar Security Team www.virangar.org www.virangar.net -------- Discoverd By :virangar security teamhadihadi special tnx to:MR.nosrati,black.shadowes,MR.hesy,Zahra & all virangar members & all hacke...

BoastMachine 3.1 - mail.php id SQL Injection

BoastMachine 3.1 - mail.php id SQL Injection ...:::::boastMachine =3.1 SQL Injection Vulnerbility ::::.... Virangar Security Team www.virangar.org www.virangar.net -------- Discoverd By :virangar security teamhadihadi special tnx to:MR.nosrati,black.shadowes,MR.hesy,Zahra & all virangar members &...

boastMachine <= 3.1 (mail.php id) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================= boastMachine = 3.1 mail.php id SQL Injection Vulnerability ============================================================= ...:::::boastMachine =3.1 SQL Injection Vulnerbility...

BoastMachine 3.1 - 'mail.php' id SQL Injection

...:::::boastMachine =3.1 SQL Injection Vulnerbility ::::.... Virangar Security Team www.virangar.org www.virangar.net -------- Discoverd By :virangar security teamhadihadi special tnx to:MR.nosrati,black.shadowes,MR.hesy,Zahra & all virangar members & all hackerz greetz:to my best friend in the...

CVE-2006-5926

CVE-2006-5926 affects Vallheru prior to 1.0.7, where mail.php is vulnerable to SQL injection via the (1) id or (2) to parameters. The issue allows remote attackers to execute arbitrary SQL commands. The description and references indicate this is a database query parameter abuse in the affected s...

CVE-2006-5926

Multiple SQL injection vulnerabilities in mail.php in Vallheru before 1.0.7 allow remote attackers to execute arbitrary SQL commands via the 1 id or 2 to parameters. NOTE: some of these details are obtained from third party information...