Forum Template 1.0 - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Forum Template v1.0 for ASPRunnerPro/PHPRunner/ASPRunner.NET. - SQL Injection Google Dork: N/A Date: 07.04.2017 Vendor Homepage: https://xlinesoft.com/ Software: https://xlinesoft.com/marketplace/productsview.php?editid1=9 Demo:...

Forum Template 1.0 - SQL Injection

Forum Template 1.0 - SQL Injection Exploit Title: Forum Template v1.0 for ASPRunnerPro/PHPRunner/ASPRunner.NET. - SQL Injection Google Dork: N/A Date: 07.04.2017 Vendor Homepage: https://xlinesoft.com/ Software: https://xlinesoft.com/marketplace/productsview.php?editid1=9 Demo:...

Survey Template 1.1 - masterkey1 Parameter SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Survey Template v1.1 for ASPRunnerPro,PHPRunner. - SQL Injection Google Dork: N/A Date: 07.04.2017 Vendor Homepage: https://xlinesoft.com/ Software: https://xlinesoft.com/marketplace/productsview.php?editid1=3 Demo:...

Invoice Template - hash Parameter SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Invoice Template v1.0 for PHPRunner/ASPRunnerPro/ASPRunner.NET. - SQL Injection Google Dork: N/A Date: 07.04.2017 Vendor Homepage: https://xlinesoft.com/ Software: https://xlinesoft.com/invoice Demo:...

Forum Template 1.0 - SQL Injection

Exploit Title: Forum Template v1.0 for ASPRunnerPro/PHPRunner/ASPRunner.NET. - SQL Injection Google Dork: N/A Date: 07.04.2017 Vendor Homepage: https://xlinesoft.com/ Software: https://xlinesoft.com/marketplace/productsview.php?editid1=9 Demo: https://xlinesoft.com/livedemo/forum/ Version: 1.0...

Document Management Template - hash Parameter SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Document Management Template v1.0 for PHPRunner 8.x,ASPRunnerPro 9.x,ASPRunner.NET 8.x or better.- SQL Injection Google Dork: N/A Date: 07.04.2017 Vendor Homepage: https://xlinesoft.com/ Software: https://xlinesoft.com/docmanage...

Document Management Template - hash SQL Injection

Document Management Template - hash SQL Injection Exploit Title: Document Management Template v1.0 for PHPRunner 8.x,ASPRunnerPro 9.x,ASPRunner.NET 8.x or better.- SQL Injection Google Dork: N/A Date: 07.04.2017 Vendor Homepage: https://xlinesoft.com/ Software: https://xlinesoft.com/docmanager...

Survey Template 1.1 - 'masterkey1' SQL Injection

Exploit Title: Survey Template v1.1 for ASPRunnerPro,PHPRunner. - SQL Injection Google Dork: N/A Date: 07.04.2017 Vendor Homepage: https://xlinesoft.com/ Software: https://xlinesoft.com/marketplace/productsview.php?editid1=3 Demo: https://xlinesoft.com/livedemo/survey/ Version: 1.1 Tested on: Win...

Shopping Cart Template - 'item' SQL Injection

Exploit Title: Shopping Cart Template v1.0 for ASPRunnerPro/PHPRunner. - SQL Injection Google Dork: N/A Date: 07.04.2017 Vendor Homepage: https://xlinesoft.com/ Software: https://xlinesoft.com/templates/shoppingcart/index.htm Demo: https://xlinesoft.com/livedemo/shopcart/ Version: 1.0 Tested on:...

PHPRunner SearchField参数SQL注入漏洞

BUGTRAQ ID: 34146 CVECAN ID: CVE-2009-0963,CVE-2009-0964 PHPRunner是一款PHP网页制作工具，可以生成读写MySql数据库的PHP网页。 PHPRunner的orderslist.php和userslist.php模块中没有正确地验证对SearchField参数所传送的输入便在SQL查询中使用，远程攻击者可以通过提交恶意查询请求执行SQL注入攻击，完全入侵数据库系统。 0 XLineSoft PHPRunner 4.2 厂商补丁： XLineSoft ---------...

CVE-2009-0964

UserViewlist.php in PHPRunner 4.2, and possibly earlier, stores passwords in cleartext in the database, which allows attackers to gain privileges. NOTE: this can be leveraged with a separate SQL injection vulnerability to obtain passwords remotely without authentication...

CVE-2009-0963

Multiple SQL injection vulnerabilities in PHPRunner 4.2, and possibly earlier, allow remote attackers to execute arbitrary SQL commands via the SearchField parameter to 1 UserViewlist.php, 2 orderslist.php, 3 userslist.php, and 4 Administratorlist.php...

Sql injection

Multiple SQL injection vulnerabilities in PHPRunner 4.2, and possibly earlier, allow remote attackers to execute arbitrary SQL commands via the SearchField parameter to 1 UserViewlist.php, 2 orderslist.php, 3 userslist.php, and 4 Administratorlist.php...

Sql injection

UserViewlist.php in PHPRunner 4.2, and possibly earlier, stores passwords in cleartext in the database, which allows attackers to gain privileges. NOTE: this can be leveraged with a separate SQL injection vulnerability to obtain passwords remotely without authentication...

CVE-2009-0963

Multiple SQL injection vulnerabilities in PHPRunner 4.2, and possibly earlier, allow remote attackers to execute arbitrary SQL commands via the SearchField parameter to 1 UserViewlist.php, 2 orderslist.php, 3 userslist.php, and 4 Administratorlist.php...

CVE-2009-0964

PHPRunner 4.2 (and possibly earlier) stores passwords in cleartext in the database, enabling privilege escalation. The CVE description notes that this can be exploited in combination with a separate SQL injection vulnerability to obtain passwords remotely without authentication. Connected sources...

CVE-2009-0964

UserViewlist.php in PHPRunner 4.2, and possibly earlier, stores passwords in cleartext in the database, which allows attackers to gain privileges. NOTE: this can be leveraged with a separate SQL injection vulnerability to obtain passwords remotely without authentication...

CVE-2009-0963

PHPRunner 4.2 is affected by multiple SQL injection vulnerabilities in the SearchField parameter affecting UserView_list.php, orders_list.php, users_list.php, and Administrator_list.php. The root cause is improper validation/handling of input in the SearchField parameter, enabling remote attacker...

PHPRunner 4.2 (SearchOption) Blind SQL Injection Vulnerability

No description provided by source. www.BugReport.ir AmnPardaz Security Research Team Title: PHPRunner SQL Injection Vendor: http://www.xlinesoft.com Vulnerable Version: 4.2 prior versions also may be affected Exploitation: Remote with browser Original Advisory: http://www.bugreport.ir/index63.htm...

PT-2009-3546 · Xlinesoft · Phprunner

Name of the Vulnerable Software and Affected Versions: PHPRunner versions 4.2 and earlier Description: The issue allows attackers to gain privileges due to the storage of passwords in cleartext in the database. This can be exploited remotely without authentication when combined with a separate SQ...