92 matches found
CVE-2005-4218
SQL injection vulnerability in forum.php in PHPWebThings 1.4 allows remote attackers to execute arbitrary SQL commands via the msg parameter, a different vulnerability than CVE-2005-3585...
CVE-2005-4226
The connected sources confirm CVE-2005-4226 affects phpWebThings 1.4 with multiple SQL injection vectors. Specifically, unsanitized input in download.php (ref), forum.php (direction, msg, sforum, reason, subname, toform), forum_edit.php (msg, forum), forum_write.php (msg, forum), guestbook.php (t...
CVE-2005-4218
PHPWebThings 1.4 is affected by a SQL injection in forum.php via the msg parameter. The root cause is improper input sanitization in the forum.php handler, enabling an attacker to modify or exfiltrate data through crafted SQL. OpenVAS note indicates that remote attackers could potentially access ...
CVE-2005-4226: Undefined Security Weakness
Multiple "potential" SQL injection vulnerabilities in phpWebThings 1.4 Patched might allow remote attackers to execute arbitrary SQL commands via 1 the ref parameter in download.php, 2 the direction, msg, sforum, reason, subname, and toform parameters in forum.php, 3 the msg and forum parameters ...
CVE-2005-4218: Undefined Security Weakness
SQL injection vulnerability in forum.php in PHPWebThings 1.4 allows remote attackers to execute arbitrary SQL commands via the msg parameter, a different vulnerability than CVE-2005-3585...
CVE-2005-3676
The CVE-2005-3676 entry affects PhpWebThings 1.4.4, where a vulnerability in download.php allows SQL injection via the file parameter. This enables remote attackers to execute arbitrary SQL commands, with not-fully-specified impact details beyond the NVD summary. The connected documents confirm t...
CVE-2005-3676: Undefined Security Weakness
SQL injection vulnerability in download.php in PhpWebThings 1.4.4 allows remote attackers to execute arbitrary SQL commands via the file parameter...
CVE-2005-3585
SQL injection vulnerability in forum.php in PhpWebThings 1.4.4 allows remote attackers to execute arbitrary SQL commands via the forum parameter...
CVE-2005-3584
Cross-site scripting XSS vulnerability in forum.php in PhpWebThings 1.4.4 allows remote attackers to inject arbitrary web script or HTML via the forum parameter...
CVE-2005-3585
The connected OpenVAS entries confirm a concrete SQL injection in PhpWebThings 1.4.x through forum.php (parameter: forum). Exploitation could allow remote attackers to view usernames/password hashes and potentially gain administrative access; root cause is improper input sanitization in the forum...
CVE-2005-3584
Cross-site scripting XSS vulnerability in forum.php in PhpWebThings 1.4.4 allows remote attackers to inject arbitrary web script or HTML via the forum parameter...
CVE-2005-3585
SQL injection vulnerability in forum.php in PhpWebThings 1.4.4 allows remote attackers to execute arbitrary SQL commands via the forum parameter...
CVE-2005-3584
CVE-2005-3584 is a cross-site scripting (XSS) vulnerability in PhpWebThings 1.4.4, exploitable through forum.php via the forum parameter. The underlying issue is insufficient input sanitization for that parameter, enabling remote attackers to inject arbitrary web script or HTML. The connected doc...
PHPWebThings <= 1.4 (forum) SQL Injection Exploit
Exploit for unknown platform in category web applications ================================================= PHPWebThings / && print "+ MD5 hash of password is: $1\n"; print "- Unable to retrieve hash of password\n" if!$1; 0day.today 2018-04-08...
PHPWebThings <= 1.4 (msg/forum) SQL Injection Exploit
No description provided by source. ?php ---phpwebth14xpl.php 10.47 16/11/2005 PHPWebThings 1.4 "msg" and "forum" SQL injection / Administrative credentials disclosure and remote commands execution coded by rgod site: http://rgod.altervista.org based on http://secunia.com/advisories/17410/, but he...
PHPWebThings <= 1.4 (msg/forum) SQL Injection Exploit
Exploit for unknown platform in category web applications ===================================================== PHPWebThings = 1.4 msg/forum SQL Injection Exploit ===================================================== ?php ---phpwebth14xpl.php 10.47 16/11/2005 PHPWebThings 1.4 "msg" and "forum" SQ...
CVE-2005-3585: Undefined Security Weakness
SQL injection vulnerability in forum.php in PhpWebThings 1.4.4 allows remote attackers to execute arbitrary SQL commands via the forum parameter...
PHPWebThings 1.4 - 'forum' SQL Injection
!/bin/bin/perl ----------------------------------------------------- - SQL injection in phpwebthing v 1.4.4 - Founder by Qptan & Exploting by AhLam - www.leZe.Com Only For Geek Hacker's - coded by AhLaM A.1.M|at|hotmail.com - http://www.lezr.com/vb/showthread.php?t=6557...
PHPWebThings <= 1.4 (forum) SQL Injection Exploit
No description provided by source. !/bin/bin/perl ----------------------------------------------------- - SQL injection in phpwebthing v 1.4.4 - Founder by Qptan & Exploting by AhLam - www.leZe.Com Only For Geek Hacker's - coded by AhLaM A.1.M|at|hotmail.com -...
PHPWebThings 1.4 - forum SQL Injection
PHPWebThings 1.4 - forum SQL Injection !/bin/bin/perl ----------------------------------------------------- - SQL injection in phpwebthing v 1.4.4 - Founder by Qptan & Exploting by AhLam - www.leZe.Com Only For Geek Hacker's - coded by AhLaM A.1.M|at|hotmail.com -...