dreamlive Auktionshaus script - 'news.php?id' SQL Injection

----------------------------Information------------------------------------------------ +Name : dreamlive Auktionshaus script news.php id SQL Injection +Autor : Easy Laster +Date : 12.03.2010 +Script : dreamlive Auktionshaus script +Language :PHP +Discovered by Easy Laster +Security Group...

Auktionshaus 3.0.0.1 - news.php?id SQL Injection

Auktionshaus 3.0.0.1 - news.php?id SQL Injection ----------------------------Information------------------------------------------------ +Name : Auktionshaus 3.0.0.1 news.php id SQL Injection +Autor : Easy Laster +Price : 59.95€ +Language :PHP +Discovered by Easy Laster +Security Group...

site2u cms news.php SQL注射漏洞

0x50sec.org发现site2u系统的news.php文件没有对用户输入的id变量进行检查就执行了SQL查询，导致MySQL注射漏洞 http://www.0×50sec.org/news.php?id=10 and 1=1 所有版本 对$id参数进行检查、过滤 http://www.0×50sec.org/news.php?id=10 and 1=1...

DZ Erotik Auktionshaus 4.rgo - 'news.php' SQL Injection

----------------------------Information------------------------------------------------ +Discovered by Easy Laster +Security Group 4004-Security-Project +Greetz to Team-Internet ,Underground Agents +And all Friends of Cyberlive : R!p,Eddy14,Silent Vapor,Nolok, Kiba,-tmh-,Dr...

Sql injection

SQL injection vulnerability in news.php in Auktionshaus Gelb 3.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

SQL injection vulnerability in news.php in Php Auktion Pro allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2010-0723

SQL injection vulnerability in news.php in Ero Auktion 2.0 and 2010 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2010-0720

SQL injection vulnerability in news.php in Erotik Auktionshaus allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2010-0722

SQL injection vulnerability in news.php in Php Auktion Pro allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

SQL injection vulnerability in news.php in Erotik Auktionshaus allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2010-0722

SQL injection vulnerability in news.php in Php Auktion Pro allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2010-0720

SQL injection vulnerability in news.php in Erotik Auktionshaus allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2010-0721

CVE-2010-0721 describes a SQL injection in news.php of the Auktionshaus Gelb 3.0 web app, exploitable via the id parameter. According to NVD, the vulnerability has a base score of 7.5 (HIGH), with NETWORK attack vector, LOW complexity, and no authentication required, potentially impacting confide...

CVE-2010-0723

CVE-2010-0723 is a SQL injection vulnerability in news.php of Ero Auktion 2.0 and 2010. The vulnerability is triggered via the id parameter, allowing remote attackers to execute arbitrary SQL commands. The NVD entry assigns a base score of 7.5 (HIGH) with network attack vector and low complexity,...

CVE-2010-0722

The CVE-2010-0722 entry affects Php Auktion Pro: a SQL injection in news.php where the id parameter allows remote execution of arbitrary SQL. The issue is documented in NVD with a CVSS v2 base score of 7.5 (HIGH, NETWORK attack vector, LOW complexity, no authentication). The vulnerability impact ...

CVE-2010-0720

CVE-2010-0720 describes an SQL injection in Erotik Auktionshaus's news.php where the vulnerable input is the id parameter. Remote attackers can cause arbitrary SQL commands to be executed. Affected component: news.php (.ID parameter). Root cause: improper input handling in the id parameter. Impac...

CVE-2010-0721: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in news.php in Auktionshaus Gelb 3.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2010-0722: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in news.php in Php Auktion Pro allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2010-0723: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in news.php in Ero Auktion 2.0 and 2010 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2010-0720: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in news.php in Erotik Auktionshaus allows remote attackers to execute arbitrary SQL commands via the id parameter...