CVE-2008-5561

SQL injection vulnerability in Netref 4.0 allows remote attackers to execute arbitrary SQL commands via the id parameter to 1 ficheproduct.php and 2 presentation.php...

Sql injection

SQL injection vulnerability in Netref 4.0 allows remote attackers to execute arbitrary SQL commands via the id parameter to 1 ficheproduct.php and 2 presentation.php...

CVE-2008-5561

SQL injection vulnerability in Netref 4.0 allows remote attackers to execute arbitrary SQL commands via the id parameter to 1 ficheproduct.php and 2 presentation.php...

CVE-2008-5561

The connected documents confirm CVE-2008-5561 as a SQL injection vulnerability in Netref 4.0. The issue affects the application’s fiche_product.php and presentation.php endpoints, where an unsafely handled id parameter enables remote attackers to execute arbitrary SQL commands. Root cause cited i...

CVE-2008-5561: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Netref 4.0 allows remote attackers to execute arbitrary SQL commands via the id parameter to 1 ficheproduct.php and 2 presentation.php...

Netref 4.0 Multiple Remote SQL Injection Vulnerabilities

No description provided by source. SuB-ZeRo Dz-hackers Netref 4.0 Remote SQL Injection Vulnerability ----------------------------------------------------------------------------------------------------------- +Discovred by : SuB-ZeRo +Vendor URL : www.netref.net +downloader :...

Netref 4.0 SQL Injection

SuB-ZeRo Dz-hackers Netref 4.0 Remote SQL Injection Vulnerability ----------------------------------------------------------------------------------------------------------- +Discovred by : SuB-ZeRo +Vendor URL : www.netref.net +downloader : http://www.phpscripts-fr.net/scripts/download.php?id=62...

Netref 4.0 - Multiple SQL Injections

Netref 4.0 - Multiple SQL Injections SuB-ZeRo Dz-hackers Netref 4.0 Remote SQL Injection Vulnerability ----------------------------------------------------------------------------------------------------------- +Discovred by : SuB-ZeRo +Vendor URL : www.netref.net +downloader :...

Netref 4.0 Multiple Remote SQL Injection Vulnerabilities

Exploit for unknown platform in category web applications ======================================================== Netref 4.0 Multiple Remote SQL Injection Vulnerabilities ======================================================== Netref 4.0 Remote SQL Injection Vulnerability...

Netref 4.0 - Multiple SQL Injections

SuB-ZeRo Dz-hackers Netref 4.0 Remote SQL Injection Vulnerability ----------------------------------------------------------------------------------------------------------- +Discovred by : SuB-ZeRo +Vendor URL : www.netref.net +downloader : http://www.phpscripts-fr.net/scripts/download.php?id=62...

CVE-2006-5618

Directory traversal vulnerability in script/catforaff.php in Netref 4 allows remote attackers to read arbitrary files via a .. dot dot sequence in the addirect parameter...

CVE-2006-5618

Directory traversal vulnerability in script/catforaff.php in Netref 4 allows remote attackers to read arbitrary files via a .. dot dot sequence in the addirect parameter...

CVE-2006-5618

CVE-2006-5618 is a Directory traversal vulnerability in Netref 4 affecting the file script/cat_for_aff.php, exploitable via a .. sequence in the ad_direct parameter to read arbitrary files. The NVD summary confirms the vulnerability class and impact (partial confidentiality impact) with a network...

CVE-2006-5618: Undefined Security Weakness

Directory traversal vulnerability in script/catforaff.php in Netref 4 allows remote attackers to read arbitrary files via a .. dot dot sequence in the addirect parameter...

Netref 4 (cat_for_aff.php) Source Code Disclosure Exploit

No description provided by source. % Response.Buffer = True % % On Error Resume Next % % Server.ScriptTimeout = 100 % % '=============================================================================================== ' =option.php Reader 'Script Name: Netref 4 catforaff.php Source Code Disclosure...

Netref 4 (cat_for_aff.php) Source Code Disclosure Exploit

Exploit for unknown platform in category web applications ========================================================= Netref 4 catforaff.php Source Code Disclosure Exploit ========================================================= option.php Reader 'Script Name: Netref 4 catforaff.php Source Code...

Netref 4 - 'cat_for_aff.php' Source Code Disclosure

option.php Reader 'Script Name: Netref 4 catforaff.php Source Code Disclosure 'Coded by : ajann 'Author : ajann 'Contact : : 'ExploitName: exploit4.asp 'Note : exploit file name =exploit4.asp 'Note : http://target/path/script/catforaff.php?addirect=../etc/passwd |etc... 'Using : Write Target afte...

Netref 3.0 - 'index.php' SQL Injection

source: https://www.securityfocus.com/bid/15862/info Netref is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the application, access or modi...

Netref 3.0 - index.php SQL Injection

Netref 3.0 - index.php SQL Injection source: https://www.securityfocus.com/bid/15862/info Netref is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to...

CVE-2005-4198

SQL injection vulnerability in index.php in Netref 3.0 allows remote attackers to execute arbitrary SQL commands via the cat parameter. NOTE: the provenance of this issue is unknown; the details were obtained solely from third party sources...