281 matches found
ccms40-sql.txt
Author: !DoktOR! Date found: 21.08.08 Product: CCMS Gaming Portal Version: 4.0 The price: $55 URL: customcms.net Vulnerability Class: SQL injection print.php Vuln code: $q = mysqlquery"SELECT from ccmsnewscomments WHERE wid='$id'"; magicquotesgpc = Off http://localhost/installdir/ Exploit:...
CustomCMS 4.0 (CCMS) print.php Remote SQL Injection Vulnerability
Exploit for unknown platform in category web applications ================================================================= CustomCMS 4.0 CCMS print.php Remote SQL Injection Vulnerability =================================================================...
CustomCMS 4.0 - print.php SQL Injection
CustomCMS 4.0 - print.php SQL Injection Author: !DoktOR! Date found: 21.08.08 Product: CCMS Gaming Portal Version: 4.0 The price: $55 URL: customcms.net Vulnerability Class: SQL injection print.php Vuln code: $q = mysqlquery"SELECT from ccmsnewscomments WHERE wid='$id'"; magicquotesgpc = Off...
CustomCMS 4.0 - 'print.php' SQL Injection
Author: !DoktOR! Date found: 21.08.08 Product: CCMS Gaming Portal Version: 4.0 The price: $55 URL: customcms.net Vulnerability Class: SQL injection print.php Vuln code: $q = mysqlquery"SELECT from ccmsnewscomments WHERE wid='$id'"; magicquotesgpc = Off http://localhost/installdir/ Exploit:...
XOOPS Dictionary Module print.php id Parameter SQL Injection
The version of the Dictionary module for XOOPS installed on the remote host fails to sanitize user-supplied input to the 'id' parameter of the 'print.php' script before using it in a database query. Regardless of PHP's 'magicquotesgpc' setting, an attacker may be able to exploit this issue to...
network-sql.txt
network print.php SQL Injectionrecipeid AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 MAiL : [email protected] DORK 1 : allinurl:"print.php?recipeid" admin login=siteadmin EXPLOIT :...
evision-sql.txt
--------------------------------------------------------------------------------------------------------------------------- | | / | | | | | | | / / / || \ '| / | ' / - | / \ V V / - ' \ / - || | \/,|/| /| |||||///|./ |,|...
Sql injection
SQL injection vulnerability in print.php in the myTopics module for XOOPS allows remote attackers to execute arbitrary SQL commands via the articleid parameter...
CVE-2008-0847
SQL injection vulnerability in print.php in the myTopics module for XOOPS allows remote attackers to execute arbitrary SQL commands via the articleid parameter...
CVE-2008-0847
SQL injection vulnerability in print.php in the myTopics module for XOOPS allows remote attackers to execute arbitrary SQL commands via the articleid parameter...
CVE-2008-0847: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in print.php in the myTopics module for XOOPS allows remote attackers to execute arbitrary SQL commands via the articleid parameter...
CVE-2008-0856: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in e-Vision CMS 2.02 allow remote attackers to execute arbitrary SQL commands via the id parameter to 1 iframe.php and 2 print.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
XOOPS Module myTopics (articleid) Remote SQL Injection Vulnerability
No description provided by source. XOOPS Module myTopics-print SQL Injectionarticleid AUTHOR : S@BUN HOME 1 : http://www.milw0rm.com/author/1334 MA陌L : [email protected] DORK 1 : allinurl: "/modules/myTopics/" you can add expliot after mytopics EXPLOIT :...
XOOPS Module myTopics-print SQL Injection(articleid)
XOOPS Module myTopics-print SQL Injectionarticleid AUTHOR : S@BUN HOME 1 : http://www.milw0rm.com/author/1334 MAL : [email protected] DORK 1 : allinurl: "/modules/myTopics/" you can add expliot after mytopics example /modules/myTopics/ exploit EXPLOIT :...
XOOPS Module myTopics - articleId SQL Injection
XOOPS Module myTopics - articleId SQL Injection XOOPS Module myTopics-print SQL Injectionarticleid AUTHOR : S@BUN HOME 1 : http://www.milw0rm.com/author/1334 MAİL : [email protected] DORK 1 : allinurl: "/modules/myTopics/" you can add expliot after mytopics EXPLOIT :...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in ph03y3nk just another flat file JAF CMS 4.0 RC2 allow remote attackers to inject arbitrary web script or HTML via the 1 show parameter to index.php and the 2 print parameter to print.php. NOTE: the provenance of this information is unknown; the...
CVE-2007-6142
Multiple cross-site scripting XSS vulnerabilities in ph03y3nk just another flat file JAF CMS 4.0 RC2 allow remote attackers to inject arbitrary web script or HTML via the 1 show parameter to index.php and the 2 print parameter to print.php. NOTE: the provenance of this information is unknown; the...
CVE-2007-6142
Multiple cross-site scripting XSS vulnerabilities in ph03y3nk just another flat file JAF CMS 4.0 RC2 allow remote attackers to inject arbitrary web script or HTML via the 1 show parameter to index.php and the 2 print parameter to print.php. NOTE: the provenance of this information is unknown; the...
CVE-2007-6142: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in ph03y3nk just another flat file JAF CMS 4.0 RC2 allow remote attackers to inject arbitrary web script or HTML via the 1 show parameter to index.php and the 2 print parameter to print.php. NOTE: the provenance of this information is unknown; the...