598 matches found
Sql injection
Adobe Dreamweaver 8 before 8.0.2 and MX 2004 can generate code that allows SQL injection attacks in the 1 ColdFusion, 2 PHP mySQL, 3 ASP, 4 ASP.NET, and 5 JSP server models...
CVE-2006-2042
Adobe Dreamweaver 8 before 8.0.2 and MX 2004 can generate code that allows SQL injection attacks in the 1 ColdFusion, 2 PHP mySQL, 3 ASP, 4 ASP.NET, and 5 JSP server models...
CVE-2006-2042
Adobe Dreamweaver 8 before 8.0.2 and MX 2004 can generate code that allows SQL injection attacks in the 1 ColdFusion, 2 PHP mySQL, 3 ASP, 4 ASP.NET, and 5 JSP server models...
CVE-2006-2042: Undefined Security Weakness
Adobe Dreamweaver 8 before 8.0.2 and MX 2004 can generate code that allows SQL injection attacks in the 1 ColdFusion, 2 PHP mySQL, 3 ASP, 4 ASP.NET, and 5 JSP server models...
Clansys 1.1 (showid) - SQL Injection
Internet Security | |---==============================================================---| title: clansys 1.1 remote sql injection release: 2006-04-10 author: snatcher snatcher at gmx.ch country: switzerland |+| application: clansys 1.1 description: a php / mysql based clan content management...
XBrite Members 1.1 - id SQL Injection
XBrite Members 1.1 - id SQL Injection "Powered By XBrite Mem...
Claroline <= 1.7.4 (scormExport.inc.php) Remote Code Execution Exploit
Exploit for unknown platform in category web applications ====================================================================== Claroline works with registerglobals = On & allowurlfopen = On\r\n\r\n"; echo "dork: "Powered by Claroline" -demo\r\n\r\n"; if $argc5 echo "Usage: php ".$argv0." host...
CVE-2006-0692
Multiple SQL injection vulnerabilities in Carey Briggs PHP/MYSQL Timesheet 1 and 2 allow remote attackers to execute arbitrary SQL commands via the 1 yr, 2 month, 3 day, and 4 job parameters in a index.php and b changehrs.php...
CVE-2006-0692
Multiple SQL injection vulnerabilities in Carey Briggs PHP/MYSQL Timesheet 1 and 2 allow remote attackers to execute arbitrary SQL commands via the 1 yr, 2 month, 3 day, and 4 job parameters in a index.php and b changehrs.php...
CVE-2006-0692: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in Carey Briggs PHP/MYSQL Timesheet 1 and 2 allow remote attackers to execute arbitrary SQL commands via the 1 yr, 2 month, 3 day, and 4 job parameters in a index.php and b changehrs.php...
Direct News SQL inj.
Direct News SQL inj. Vuln. discovered by : r0t Date: 17 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/direct-news-sql-inj.html vendor: http://www.direct-news.net affected version: 4.9 and prior Product Description: Direct News 4.9 is an easy-to-use CMS based on php-mysql. Its rea...
phpYellowTM Pro Edition SQL inj. vuln.
phpYellowTM Pro Edition SQL inj. vuln. Vuln. dicovered by : r0t Date: 3 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/phpyellowtm-pro-edition-sql-inj-vuln.html Vendor:http://phpyellow.com/ affected version: phpYellowTM Pro Edition 5.33 and phpYellowTM Lite Edition 5.33 Product...
Free ClickBank Search Engine SQL inj. vuln.
Free ClickBank Search Engine SQL inj. vuln. Vuln. dicovered by : r0t Date: 1 dec. 2005 Orginal advisory:http://pridels.blogspot.com/2005/12/free-clickbank-search-engine-sql-inj.html Vendor:http://phpfreebies.com/free-clickbank-search-engine-script.php affected version:1.0 and prior Product...
WowBB 1.65 vuln.
WowBB 1.65 vuln. Vuln. dicovered by : r0t Date: 26 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/wowbb-165-sql-vuln.html Vendor:http://www.wowbb.com affected version: 1.65 and prior Product description: WowBB is PHP/MySQL powered forum software that offers innovative features suc...
VUBB Forum SQL and XSS vuln.
VUBB Forum SQL and XSS vuln. Vuln. dicovered by : r0t Date: 23 nov. 2005 Orginal advsiory:http://pridels.blogspot.com/2005/11/vubb-forum-sql-and-xss-vuln.html Vendor:http://www.vubb.com/ affected version: alpha rc1 Product description: Free PHP/MySQL forum/bulletin board system. The only...
phpwcms.txt
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Author: Stefan Lochbihler Date: 14. November 2005 Software: PHPWCMS Version: 1.2.5-DEV URL: http://www.phpwcms.de Attack: Directory traversal vulnerability,CSS about: phpwcms is an Open Source web content management system. It is optimized for fast an...
PHPWCMS - Directory traversal vulnerability,CSS attack
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Author: Stefan Lochbihler Date: 14. November 2005 Software: PHPWCMS Version: 1.2.5-DEV URL: http://www.phpwcms.de Attack: Directory traversal vulnerability,CSS about: phpwcms is an Open Source web content management system. It is optimized for fast an...
PHPCalendar (and some more codegrrl.com products) arbitrary code execution
PHPCalendar and some more codegrrl.com products arbitrary code execution ========================================================================== Software: PHPCalendar, PHPClique, PHPFanBase, PHPCurrently, PHPQuotes Severity: Arbitrary code execution Risk: High Author: Robin Verton...
My Little Forum XSS Vulnerability
The remote host is running SPDX-FileCopyrightText: 2003 Noam Rathaus Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only From: David S. Ferreira [email protected] Subject: My Little...
VUBB XSS & path disclosure Vulnerabilities
KAPDA::10 - VUBB XSS & path disclosure vulnerabilities KAPDA New advisory Vendor: http://www.vubb.com Version: vubb alpha rc1 Bug: XSS & path disclosure Exploitation: Remote with browser Discussion: -------------------- VuBB is a Free PHP/MySQL forum/bulletin board system. Vulnerability:...