CVE-2008-3749

CVE-2008-3749 describes an SQL injection vulnerability in tr.php of the YourFreeWorld Banner Management Script. The flaw allows remote attackers to execute arbitrary SQL commands by supplying manipulated input in the id parameter, leading to potential partial to complete data exposure or modifica...

CVE-2008-3749: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in tr.php in YourFreeWorld Banner Management Script allows remote attackers to execute arbitrary SQL commands via the id parameter...

bms-sql.txt

|| | | Banner Management Script tr.php id Remote SQL Injection Vulnerability | | |---------------------S.W.A.T.----------------------| | | Author: S.W.A.T. | | Home : www.svvat.ir | | email: svvateamatYahooDoTcom | | | | | | | script : http://www.yourfreeworld.com/script/bannermanagementscript.ph...

Banner Management Script (tr.php id) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ======================================================================= Banner Management Script tr.php id Remote SQL Injection Vulnerability ======================================================================= || | | Banner Management...

Banner Management Script - 'id' SQL Injection

|| | | Banner Management Script tr.php id Remote SQL Injection Vulnerability | | |---------------------S.W.A.T.----------------------| | | Author: S.W.A.T. | | Home : www.svvat.ir | | email: svvateamatYahooDoTcom | | | | | | | script : http://www.yourfreeworld.com/script/bannermanagementscript.ph...

autobuse-angel.txt

Hi, This weekend I decided to play around with a couple of network management tools on securityfocus.com; Angel http://www.paganini.net/angel/, and Autobuse http://www.picante.com/gtaylor/download/. Unfortunately, upon review of the source, I noticed a bad trend. Both tools handle temporary files...