Butterfly Organizer Multiple SQL Injection and Cross-Site Scripting Vulnerabilities

Butterfly Organizer is prone to multiple cross-site scripting and an SQL-injection vulnerability because the application fails to sufficiently sanitize user-supplied input. Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application...

Sql injection

SQL injection vulnerability in view.php in Butterfly Organizer 2.0.1 allows remote attackers to execute arbitrary SQL commands via the mytable parameter. NOTE: the id vector is covered by another CVE name...

CVE-2008-6328

SQL injection vulnerability in view.php in Butterfly Organizer 2.0.0 and 2.0.1 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-6311

SQL injection vulnerability in view.php in Butterfly Organizer 2.0.1 allows remote attackers to execute arbitrary SQL commands via the mytable parameter. NOTE: the id vector is covered by another CVE name...

Sql injection

SQL injection vulnerability in view.php in Butterfly Organizer 2.0.0 and 2.0.1 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-6311

SQL injection vulnerability in view.php in Butterfly Organizer 2.0.1 allows remote attackers to execute arbitrary SQL commands via the mytable parameter. NOTE: the id vector is covered by another CVE name...

CVE-2008-6311

The vulnerability CVE-2008-6311 affects Butterfly Organizer 2.0.1 via the view.php file, where the mytable parameter is vulnerable to SQL injection. This allows remote attackers to execute arbitrary SQL commands, with the impact described as enabling database operations beyond intended access. Th...

CVE-2008-6328

Butterfly Organizer is affected by CVE-2008-6328: an SQL injection in view.php via the id parameter could allow remote execution of arbitrary SQL commands. Affected versions include 2.0.0 and 2.0.1. OpenVAS details also describe additional input-sanitization vulnerabilities (XSS) in the same prod...

CVE-2008-6328

SQL injection vulnerability in view.php in Butterfly Organizer 2.0.0 and 2.0.1 allows remote attackers to execute arbitrary SQL commands via the id parameter...

Groone's GLink Organizer SQL Injection

Groone's GLink Organizer index.php SQL Injection Vulnerability Author: nuclear download: http://www.groonesworld.com/programs/glinks/glinks.zip vuln: http://localhost/path/index.php?cat=-1 union select 1,@@version,3 %23 greetz Mi4night, cAs, zYzTeM, THEMAN, Pepe, I-O-W-A,Digitalfortress, DiGitalX...

Groone's GLink Organizer (index.php cat) SQL Injection Vulnerability

No description provided by source. Groone's GLink Organizer index.php SQL Injection Vulnerability Author: nuclear download: http://www.groonesworld.com/programs/glinks/glinks.zip vuln: http://localhost/path/index.php?cat=-1 union select 1,@@version,3 %23 greetz Mi4night, cAs, zYzTeM, THEMAN, Pepe...

Groones GLink ORGanizer - index.php?cat SQL Injection

Groones GLink ORGanizer - index.php?cat SQL Injection Groone's GLink Organizer index.php SQL Injection Vulnerability Author: nuclear download: http://www.groonesworld.com/programs/glinks/glinks.zip vuln: http://localhost/path/index.php?cat=-1 union select 1,@@version,3 %23 greetz Mi4night, cAs,...

Groone's GLink ORGanizer - 'index.php?cat' SQL Injection

Groone's GLink Organizer index.php SQL Injection Vulnerability Author: nuclear download: http://www.groonesworld.com/programs/glinks/glinks.zip vuln: http://localhost/path/index.php?cat=-1 union select 1,@@version,3 %23 greetz Mi4night, cAs, zYzTeM, THEMAN, Pepe, I-O-W-A,Digitalfortress, DiGitalX...

Butterfly Organizer 2.0.1 (view.php id) SQL Injection Vulnerability

No description provided by source. 0x01 Informations: Name : Butterfly Organizer 2.0.1 Sql Injection Download : http://www.hotscripts.com/jump.php?listingid=72677&jumptype=1 Vulnerability : Remote Sql Injection Author : Osirys Contact : osirysatlivedotit Notes : Proud to be Italian : Same bug of...

Butterfly ORGanizer 2.0.1 - id SQL Injection

Butterfly ORGanizer 2.0.1 - id SQL Injection 0x01 Informations: Name : Butterfly Organizer 2.0.1 Sql Injection Download : http://www.hotscripts.com/jump.php?listingid=72677&jumptype=1 Vulnerability : Remote Sql Injection Author : Osirys Contact : osirysatlivedotit Notes : Proud to be Italian : Sa...

Butterfly Organizer 2.0.1 SQL Injection

0x01 Informations: Name : Butterfly Organizer 2.0.1 Sql Injection Download : http://www.hotscripts.com/jump.php?listingid=72677&jumptype=1 Vulnerability : Remote Sql Injection Author : Osirys Contact : osirysatlivedotit Notes : Proud to be Italian : Same bug of the previous version:...

Butterfly Organizer 2.0.1 (view.php id) SQL Injection Vulnerability

Exploit for unknown platform in category web applications =================================================================== Butterfly Organizer 2.0.1 view.php id SQL Injection Vulnerability =================================================================== 0x01 Informations: Name : Butterfly...

Butterfly ORGanizer 2.0.1 - 'id' SQL Injection

0x01 Informations: Name : Butterfly Organizer 2.0.1 Sql Injection Download : http://www.hotscripts.com/jump.php?listingid=72677&jumptype=1 Vulnerability : Remote Sql Injection Author : Osirys Contact : osirysatlivedotit Notes : Proud to be Italian : Same bug of the previous version:...

Butterfly Organizer 2.0.0 (SQL/XSS) Multiple Remote Vulnerabilities

No description provided by source. ====================================================================== Butterfly Organizer 2.0.0 SQL/XSS Multiple Remote Vulnerabilities ====================================================================== ,--^----------,--------,-----,-------^--, | |||||||||...

Butterfly Organizer 2.0.0 Arbitrary Delete (Category/Account) Exploit

No description provided by source. !/usr/bin/perl -w Butterfly Organizer 2.0.0 = Arbitrary Delete Category/Account poc for del Ctegory : http://localhost/organizer/category-delete.php?tablehere=NAME OF CATEGORY&isjsconfirmed=1 poc for del Account : http://localhost/organizer//delete.php?id=id of...