PHPWebThings 1.4 - msgforum SQL Injection

PHPWebThings 1.4 - msgforum SQL Injection ?php ---phpwebth14xpl.php 10.47 16/11/2005 PHPWebThings 1.4 "msg" and "forum" SQL injection / Administrative credentials disclosure and remote commands execution coded by rgod site: http://rgod.altervista.org based on http://secunia.com/advisories/17410/,...

PHPWebThings 1.4 - 'msg'/'forum' SQL Injection

?php ---phpwebth14xpl.php 10.47 16/11/2005 PHPWebThings 1.4 "msg" and "forum" SQL injection / Administrative credentials disclosure and remote commands execution coded by rgod site: http://rgod.altervista.org based on http://secunia.com/advisories/17410/, but here we have a more chritical injecti...

CVE-2005-3584: Undefined Security Weakness

Cross-site scripting XSS vulnerability in forum.php in PhpWebThings 1.4.4 allows remote attackers to inject arbitrary web script or HTML via the forum parameter...

phpWebThings144-2.txt

Vulnerable: phpWebThings 1.4.4 website : http://phpwebthings.org The bug in download.php ThE Exploit : http://www.target.com/download.php?file=|SQL ThE Error: You have an error in your SQL syntax. Check the manual that corresponds to your MySQL server version for the right syntax to use near 'ord...

phpWebThings download.php file Parameter SQL Injection

Binary data 3290.prm...

PHPWebThings 1.4 - download.php?File SQL Injection

PHPWebThings 1.4 - download.php?File SQL Injection source: https://www.securityfocus.com/bid/15399/info phpWebThings is prone to an SQL injection vulnerability. This is an input validation issue related to data that will be used in SQL queries, allowing a remote user to influence the structure an...

PHPWebThings 1.4 - 'download.php?File' SQL Injection

source: https://www.securityfocus.com/bid/15399/info phpWebThings is prone to an SQL injection vulnerability. This is an input validation issue related to data that will be used in SQL queries, allowing a remote user to influence the structure and logic of a query. It is likely that the issue cou...

phpWebThings144.txt

Vulnerable: phpWebThings 1.4.4 http://phpwebthings.org The bug reside in : forum.php Exploit : http://xxx.com/forum.php?forum=XSS http://xxx.com/forum.php?forum=SQL Example : XSS http://xxx.com/forum.php?forum='alertdocument.cookie SQL For Passowrd http://xxx.com/forum.php?forum=-1 union select...

phpWebThings Multiple Scripts SQL Injection

The remote host is running the phpWebThings application framework. The version of phpWebThings installed on the remote host does not properly sanitize user input in the 'forum' and 'msg' parameters of 'forum.php' script before using it in database queries. An attacker can exploit this vulnerabili...

[SA17410] phpWebThings "forum" SQL Injection Vulnerability

TITLE: phpWebThings "forum" SQL Injection Vulnerability SECUNIA ADVISORY ID: SA17410 VERIFY ADVISORY: http://secunia.com/advisories/17410/ CRITICAL: Moderately critical IMPACT: Manipulation of data WHERE: From remote SOFTWARE: phpWebThings 0.x http://secunia.com/product/6047/ phpWebThings 1.x...

PHPWebThings 0.4.4 - forum.php Cross-Site Scripting

PHPWebThings 0.4.4 - forum.php Cross-Site Scripting source: https://www.securityfocus.com/bid/15276/info phpWebThings is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue t...

PHPWebThings 0.4.4 - 'forum.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/15276/info phpWebThings is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the browser...