portail13.txt

svadvisory5 ------------------------------------------------------------- Title: SQL injections in PortailPHP | The program: PortailPHP v 1.3 | Homepage: http://www.portailphp.com/ ------------ Has found: CENSORED | 14.05.05 | ------------------------------------------------------------- The...

CVE-2005-2486

CVE-2005-2486 : SQL injection in PortailPHP’s mod_forum/read_message.php, exploitable via the id parameter to index.php with affiche="Forum-read_mess". Root cause: unsanitized input leading to arbitrary SQL execution. Impact: remote attackers could run arbitrary SQL commands. No remediation detai...

CVE-2005-2486

SQL injection vulnerability in modforum/readmessage.php in PortailPHP allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php with the affiche parameter set to "Forum-readmess", a different vulnerability than CVE-2005-1701...

CVE-2005-2486

SQL injection vulnerability in modforum/readmessage.php in PortailPHP allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php with the affiche parameter set to "Forum-readmess", a different vulnerability than CVE-2005-1701...

CVE-2005-2486: Undefined Security Weakness

SQL injection vulnerability in modforum/readmessage.php in PortailPHP allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php with the affiche parameter set to "Forum-readmess", a different vulnerability than CVE-2005-1701...

PortailPHP.txt

Class: Input Validation Error CVE: CVE-MAP-NOMATCH Remote: Yes Local: yes Credit: ABDUCTER --- [email protected] OR [email protected] Vulnerable: PortailPHP 2.4 and all version info :- PortailPHP POWERFUL FORUM AND formal site http://www.portailphp.com/ there is sql in index.php...

SQL IN PortailPHP

Class: Input Validation Error CVE: CVE-MAP-NOMATCH Remote: Yes Local: yes Credit: ABDUCTER --- [email protected] OR [email protected] Vulnerable: PortailPHP 2.4 and all version info :- PortailPHP POWERFUL FORUM AND formal site http://www.portailphp.com/ there is sql in index.php...

CVE-2005-1701

SQL injection vulnerability in PortailPHP 1.3 allows remote attackers to execute arbitrary SQL commands via the id parameter to the 1 News, 2 File, 3 Liens, or 4 Faq modules...

CVE-2005-1701

SQL injection vulnerability in PortailPHP 1.3 allows remote attackers to execute arbitrary SQL commands via the id parameter to the 1 News, 2 File, 3 Liens, or 4 Faq modules...

CVE-2005-1701

CVE-2005-1701 affects PortailPHP 1.3 and is a SQL injection vulnerability exploitable via the id parameter to the News, File, Liens, or Faq modules. The issue allows remote attackers to execute arbitrary SQL commands, as stated in the CVE entry. The connected records corroborate the same vulnerab...

CVE-2005-1701: Undefined Security Weakness

SQL injection vulnerability in PortailPHP 1.3 allows remote attackers to execute arbitrary SQL commands via the id parameter to the 1 News, 2 File, 3 Liens, or 4 Faq modules...

PortailPHP 1.3 - ID SQL Injection

PortailPHP 1.3 - ID SQL Injection source: https://www.securityfocus.com/bid/13708/info PortailPHP is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could...

PortailPHP 1.3 - 'ID' SQL Injection

source: https://www.securityfocus.com/bid/13708/info PortailPHP is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a compromise of the...

SQL инъекции в PortailPHP

svadvisory5 -------------------------------------------------------------+ Title: SQL инъекции в PortailPHP | Программа: PortailPHP v 1.3 | Homepage: http://www.portailphp.com/ +------------+ Нашел: CENSORED | 14.05.05 | -------------------------------------------------------------+ Описание...

CVE-2002-2277

SQL injection vulnerability in modsearch/index.php in PortailPHP 0.99 allows remote attackers to execute arbitrary SQL commands via the 1 $rech, 2 $BDTabdocs, 3 $BDTabfile, 4 $BDTabliens, 5 $BDTabfaq, or 6 $chemin variables...

CVE-2002-2278

Cross-site scripting XSS vulnerability in modsearch/index.php in PortailPHP 0.99 allows remote attackers to inject arbitrary web script or HTML via the 1 $AppTheme, 2 $RubSearch, 3 $RubNews, 4 $RubFile, 5 $RubLiens, or 6 $RubFaq variables...

Query: BID 6273: PortailPhp SQL Injection Vulnerability.

Hi, Posting on vuln-dev too since this has a generic PHP-MySQL SQL Injection Vuln question as well. I was working on this vulnerability. I came across the following advisory on SecurityFocus-BugTraq: http://online.securityfocus.com/archive/1/301572 I find that Php's mysqlquery only allows one SQL...

Security Patch for PortailPHP 0.99

PRODUCT : PORTAILPHP http://www.yoopla.net/portailphp/ A nice PHP CMS PROBLEM : XSS SQL INJECTION in /modsearch/index.php read it for more details : SOLUTION : Download patch from http://www.phpsecure.org or manually add this lines at beginning of /modsearch/index.php : / XSS AND SQL HOLES PATCHE...