EUVD-2008-4328

Malware in sbrugna...

EUVD-2008-2668

Malware in sbrugna...

Powie pNews 2.11 - (SQL Injection / XSS) Remote Vulnerabilities

Exploit for php platform in category web applications Exploit Title: Powie pNews 2.11 - SQL Injection / XSS Remote Vulnerabilities Date: 26/6/2012 Author: GoLdM Vendor or Software Link: http://powie.de/ Version: 2.11 Category:: SQL Injection / XSS Google dork: intext:"-- pNews 2.11 © Thomas...

CVE-2008-4347

CVE-2008-4347 affects Powie pNews 2.03 (component: newskom.php). The vulnerability is a SQL injection via the newsid parameter, enabling remote attackers to execute arbitrary SQL commands. NVD lists a CVSS2 base score of 7.5 (HIGH) with network attack vector, low attack complexity, and no authent...

CVE-2008-4347

SQL injection vulnerability in newskom.php in Powie pNews 2.03 allows remote attackers to execute arbitrary SQL commands via the newsid parameter...

CVE-2008-4347: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in newskom.php in Powie pNews 2.03 allows remote attackers to execute arbitrary SQL commands via the newsid parameter...

CVE-2008-2673

SQL injection vulnerability in index.php in Powie pNews 2.08 and 2.10, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the shownews parameter...

Sql injection

SQL injection vulnerability in index.php in Powie pNews 2.08 and 2.10, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the shownews parameter...

CVE-2008-2673

SQL injection vulnerability in index.php in Powie pNews 2.08 and 2.10, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the shownews parameter...

CVE-2008-2673

CVE-2008-2673 describes a SQL injection vulnerability in the Powie pNews web app, affecting versions 2.08 and 2.10. When magic_quotes_gpc is disabled, the parameter shownews is vulnerable to arbitrary SQL execution by remote attackers. The vulnerability is documented with explicit affected compon...

CVE-2008-2673: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in Powie pNews 2.08 and 2.10, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the shownews parameter...