Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in WB News 2.0.1, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the configinstalldir parameter to 1 search.php, 2 archive.php, 3 comments.php, and 4 news.php; 5 News.php, 6 SendFriend.php, 7...

Easyedit CMS - news.php?intPageID SQL Injection

Easyedit CMS - news.php?intPageID SQL Injection source: https://www.securityfocus.com/bid/32369/info Easyedit is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an...

phpx-sql.txt

action = $GET'action'; 12. $this-newsid = $GET'newsid'; 13. 14. global $userinfo; 15. global $core; 16. 17. $this-core = $core; 18. 19. $this-userinfo = $userinfo; 20. 21. 22. 23. 24. if !$this-userinfo DIE"HACK ATTEMPT"; 25. if $this-userinfonews != 1 DIE"NO ACCESS TO THIS MODULE"; 26. 27...

CVE-2008-4703

SQL injection vulnerability in news.php in BosDev BosNews 4.0 allows remote attackers to execute arbitrary SQL commands via the article parameter...

CVE-2008-4703: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in news.php in BosDev BosNews 4.0 allows remote attackers to execute arbitrary SQL commands via the article parameter...

CVE-2008-4590: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Stash 1.0.3 allow remote attackers to execute arbitrary SQL commands via 1 the username parameter to admin/login.php and 2 the post parameter to admin/news.php...

IranMC Arad Center - SQL Injection

|| | | Arad Center news.php id Remote SQL Injection Vulnerability | | |-------------------- Hussin X -------------------| | | Author: Hussin X | | Home : WwW.IQ-ty.CoM | | email: darkangelg85atYahooDoTcom | | | | | | script : http://www.iranmc.com/shop.php | | DorK : "Designed & Developed by N.E....

IranMC Arad Center - SQL Injection

IranMC Arad Center - SQL Injection || | | Arad Center news.php id Remote SQL Injection Vulnerability | | |-------------------- Hussin X -------------------| | | Author: Hussin X | | Home : WwW.IQ-ty.CoM | | email: darkangelg85atYahooDoTcom | | | | | | script : http://www.iranmc.com/shop.php | |...

CVE-2008-4349: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in news.php in s0nic Paranews 3.4 allow remote attackers to inject arbitrary web script or HTML via the 1 id or 2 page parameter in a details action...

paranews-xss.txt

Author : Xylitol Contact : n/a Vendor : s0nic www.monxoom.de Version: 3.4 D0rks : Powered by Paranews 3.4 Public release vulnz: 10/09/08 Impact: low Stop lammer 1. Description: Auf den Namen »ParaNews« habe ich mein Newsscript getauft, welches zur Pflege eines Newsbereich in einer Website gedacht...

1024 CMS <= 1.4.4 Multiple Remote/Local File Inclusion Vulnerabilities

No description provided by source. Digital Security Research Group DSecRG Advisory DSECRG-08-027 Application: 1024 CMS Versions Affected: 1.4.3, 1.4.4 RFC Vendor URL: http://www.1024cms.com/...

Sql injection

SQL injection vulnerability in news.php in Advanced Webhost Billing System AWBS 2.3.3 through 2.7.1, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the viewnews parameter...

CVE-2008-2903

The CVE-2008-2903 entry concerns a SQL injection in Advanced Webhost Billing System (AWBS) versions 2.3.3 through 2.7.1. The vulnerable component is news.php, exploitable via the viewnews parameter when magic_quotes_gpc is disabled. The effect is arbitrary SQL execution by a remote attacker, with...

CVE-2008-2903

SQL injection vulnerability in news.php in Advanced Webhost Billing System AWBS 2.3.3 through 2.7.1, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the viewnews parameter...

CVE-2008-2903: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in news.php in Advanced Webhost Billing System AWBS 2.3.3 through 2.7.1, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the viewnews parameter...

CVE-2008-2893

SQL injection vulnerability in news.php in AJ Square aj-hyip aka AJ HYIP Acme allows remote attackers to execute arbitrary SQL commands via the id parameter, a different vector than CVE-2008-2532...

Sql injection

SQL injection vulnerability in news.php in AJ Square aj-hyip aka AJ HYIP Acme allows remote attackers to execute arbitrary SQL commands via the id parameter, a different vector than CVE-2008-2532...

CVE-2008-2893

CVE-2008-2893 and CVE-2008-2532 describe SQL injection flaws in AJ Square AJ HYIP (aj-hyip). Affected software: AJ HYIP/AJ Square scripts (components cited include news.php and forum/topic_detail.php). Vulnerability: unsafely constructed SQL queries via the id parameter, enabling remote attackers...

CVE-2008-2893

SQL injection vulnerability in news.php in AJ Square aj-hyip aka AJ HYIP Acme allows remote attackers to execute arbitrary SQL commands via the id parameter, a different vector than CVE-2008-2532...

CVE-2008-2893: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in news.php in AJ Square aj-hyip aka AJ HYIP Acme allows remote attackers to execute arbitrary SQL commands via the id parameter, a different vector than CVE-2008-2532...