CVE-2008-6739

CVE-2008-6739 affects Todd Woolums ASP Download management script 1.03. The issue is that setupdownload.asp does not require authentication, allowing a remote attacker to obtain administrator privileges via a direct request. The documented impact is elevation to administrator access, with exploit...

CVE-2008-4743

CVE-2008-4743 is an SQL injection vulnerability in QuidaScript’s FAQ Management Script, specifically in index.php where the catid parameter is used unsafely. The affected component is the index.php handler within the QuidaScript FAQ Management Script, with the underlying cause being improper hand...

FAQ Management Script (catid) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================ FAQ Management Script catid Remote SQL Injection Vulnerability ================================================================ || | | FAQ Management catid Remote SQL Injecti...

FAQ Management Script - catid SQL Injection

FAQ Management Script - catid SQL Injection || | | FAQ Management catid Remote SQL Injection Vulnerability | | |-------------------- Hussin X -------------------| | | Author: Hussin X | | Home : WwW.IQ-ty.CoM | | email: darkangelg85atYahooDoTcom | | | | | | | | script :...

CVE-2008-3749

CVE-2008-3749 describes an SQL injection vulnerability in tr.php of the YourFreeWorld Banner Management Script. The flaw allows remote attackers to execute arbitrary SQL commands by supplying manipulated input in the id parameter, leading to potential partial to complete data exposure or modifica...

bms-sql.txt

|| | | Banner Management Script tr.php id Remote SQL Injection Vulnerability | | |---------------------S.W.A.T.----------------------| | | Author: S.W.A.T. | | Home : www.svvat.ir | | email: svvateamatYahooDoTcom | | | | | | | script : http://www.yourfreeworld.com/script/bannermanagementscript.ph...

Banner Management Script (tr.php id) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ======================================================================= Banner Management Script tr.php id Remote SQL Injection Vulnerability ======================================================================= || | | Banner Management...

Banner Management Script - 'id' SQL Injection

|| | | Banner Management Script tr.php id Remote SQL Injection Vulnerability | | |---------------------S.W.A.T.----------------------| | | Author: S.W.A.T. | | Home : www.svvat.ir | | email: svvateamatYahooDoTcom | | | | | | | script : http://www.yourfreeworld.com/script/bannermanagementscript.ph...

autobuse-angel.txt

Hi, This weekend I decided to play around with a couple of network management tools on securityfocus.com; Angel http://www.paganini.net/angel/, and Autobuse http://www.picante.com/gtaylor/download/. Unfortunately, upon review of the source, I noticed a bad trend. Both tools handle temporary files...