CVE-2008-6596: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in admin/index.php in PHCDownload 1.1 allows remote attackers to execute arbitrary SQL commands via the hash parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2008-6597: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in upload/install/index.php in PHCDownload 1.1 allows remote attackers to inject arbitrary web script or HTML via the step parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

PHCDownload 1.1.0 Vulnerabilities

A file content management and manipulation system unlike any other available on the market today, with unique innovations, tools, and design, customising and producing your database is made easy. PHCDownload has been designed for integration into existing websites with its highly customisable...

PHCDownload 1.1 - adminindex.php?hash SQL Injection

PHCDownload 1.1 - adminindex.php?hash SQL Injection source: https://www.securityfocus.com/bid/28922/info PHCDownload is prone to an SQL-injection and a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute...

PHCDownload 1.1 - uploadinstallindex.php?step Cross-Site Scripting

PHCDownload 1.1 - uploadinstallindex.php?step Cross-Site Scripting source: https://www.securityfocus.com/bid/28922/info PHCDownload is prone to an SQL-injection and a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage these issue...

PHCDownload 1.1 - '/admin/index.php?hash' SQL Injection

source: https://www.securityfocus.com/bid/28922/info PHCDownload is prone to an SQL-injection and a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspectin...

PHCDownload 1.1 - '/upload/install/index.php?step' Cross-Site Scripting

source: https://www.securityfocus.com/bid/28922/info PHCDownload is prone to an SQL-injection and a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspectin...

Sql injection

SQL injection vulnerability in search.php in PHCDownload 1.1.0 allows remote attackers to execute arbitrary SQL commands via the string parameter...

CVE-2007-6670

SQL injection vulnerability in search.php in PHCDownload 1.1.0 allows remote attackers to execute arbitrary SQL commands via the string parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in search.php in PHCDownload 1.1.0 allows remote attackers to inject arbitrary web script or HTML via the string parameter...

CVE-2007-6669

Cross-site scripting XSS vulnerability in search.php in PHCDownload 1.1.0 allows remote attackers to inject arbitrary web script or HTML via the string parameter...

CVE-2007-6670

SQL injection vulnerability in search.php in PHCDownload 1.1.0 allows remote attackers to execute arbitrary SQL commands via the string parameter...

CVE-2007-6669

Cross-site scripting XSS vulnerability in search.php in PHCDownload 1.1.0 allows remote attackers to inject arbitrary web script or HTML via the string parameter...

CVE-2007-6669

Cross-site scripting XSS vulnerability in search.php in PHCDownload 1.1.0 allows remote attackers to inject arbitrary web script or HTML via the string parameter...

CVE-2007-6670

CVE-2007-6670 corresponds to a SQL injection in PHCDownload 1.1.0. The vulnerable element is search.php, where the string parameter is unsafely used in SQL queries, enabling remote attackers to execute arbitrary SQL commands. This affects PHCDownload 1.1.0 as described in multiple sources. The do...

CVE-2007-6669

CVE-2007-6669 describes a Cross-site Scripting (XSS) vulnerability in the search.php component of PHCDownload 1.1.0 . The issue allows remote attackers to inject arbitrary web script or HTML by supplying the attacker-controlled string parameter, enabling potential user session or browser context ...

CVE-2007-6670

SQL injection vulnerability in search.php in PHCDownload 1.1.0 allows remote attackers to execute arbitrary SQL commands via the string parameter...

CVE-2007-6669: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in search.php in PHCDownload 1.1.0 allows remote attackers to inject arbitrary web script or HTML via the string parameter...

CVE-2007-6670: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in search.php in PHCDownload 1.1.0 allows remote attackers to execute arbitrary SQL commands via the string parameter...

phcdownload-xss.txt

XSS Flaw & posible SQL injection in PHCDownload vendor url: http://www.phpcredo.com/ Advisore: http://lostmon.blogspot.com/2007/12/ xss-flaw-posible-sql-injection-in.html vendor notify:YES exploit available: YES New XSS Flaw & posible SQL injection in search.php PHCDownload contains a flaw that...