Sql injection

SQL injection vulnerability in directory.php in Prozilla Adult Directory allows remote attackers to execute arbitrary SQL commands via the catid parameter in a list action. NOTE: the original report indicated that this was the "photo" SourceForge project aka Maan Bsat Photo Collection, but that w...

CVE-2007-4056

SQL injection vulnerability in directory.php in Prozilla Adult Directory allows remote attackers to execute arbitrary SQL commands via the catid parameter in a list action. NOTE: the original report indicated that this was the "photo" SourceForge project aka Maan Bsat Photo Collection, but that w...

CVE-2007-4056

SQL injection vulnerability in directory.php in Prozilla Adult Directory allows remote attackers to execute arbitrary SQL commands via the catid parameter in a list action. NOTE: the original report indicated that this was the "photo" SourceForge project aka Maan Bsat Photo Collection, but that w...

CVE-2007-4056

CVE-2007-4056 affects Prozilla Adult Directory (directory.php). The vulnerability is an SQL injection in the list action via the cat_id parameter, enabling remote attackers to execute arbitrary SQL commands. The connected documents confirm the vulnerable component and root cause but do not provid...

CVE-2007-4056: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in directory.php in Prozilla Adult Directory allows remote attackers to execute arbitrary SQL commands via the catid parameter in a list action. NOTE: the original report indicated that this was the "photo" SourceForge project aka Maan Bsat Photo Collection, but that w...

CVE-2007-3809

Multiple SQL injection vulnerabilities in Prozilla Directory Script allow remote attackers to execute arbitrary SQL commands via the catid parameter in a list action to directory.php, and other unspecified vectors...

Sql injection

Multiple SQL injection vulnerabilities in Prozilla Directory Script allow remote attackers to execute arbitrary SQL commands via the catid parameter in a list action to directory.php, and other unspecified vectors...

CVE-2007-3809

Multiple SQL injection vulnerabilities in Prozilla Directory Script allow remote attackers to execute arbitrary SQL commands via the catid parameter in a list action to directory.php, and other unspecified vectors...

CVE-2007-3809: Undefined Security Weakness

Multiple SQL injection vulnerabilities in Prozilla Directory Script allow remote attackers to execute arbitrary SQL commands via the catid parameter in a list action to directory.php, and other unspecified vectors...

prozilla-sql.txt

--==+================================================================================+==-- --==+ Prozilla Directory Script SQL Injection Vulnerbility +==-- --==+================================================================================+==-- AUTHOR: t0pP8uZz & xprog SITE:...

CVE-2007-3809

CVE-2007-3809 concerns multiple SQL injection vulnerabilities in Prozilla Directory Script. The affected component is the Prozilla Directory Script, with vulnerable input in the cat_id parameter of a list action to directory.php and other vectors, enabling remote attackers to execute arbitrary SQ...

Prozilla Directory Script (directory.php cat_id) SQL Injection Vulnerbility

No description provided by source. --==+================================================================================+==-- --==+ Prozilla Directory Script SQL Injection Vulnerbility +==-- --==+================================================================================+==-- AUTHOR: t0pP8uZ...

Prozilla Directory Script (directory.php cat_id) SQL Injection Vulnerbility

Exploit for unknown platform in category web applications =========================================================================== Prozilla Directory Script directory.php catid SQL Injection Vulnerbility ===========================================================================...

Prozilla Directory Script - Directory.php?cat_id SQL Injection

Prozilla Directory Script - Directory.php?catid SQL Injection --==+================================================================================+==-- --==+ Prozilla Directory Script SQL Injection Vulnerbility +==--...

Prozilla Directory Script - 'Directory.php?cat_id' SQL Injection

--==+================================================================================+==-- --==+ Prozilla Directory Script SQL Injection Vulnerbility +==-- --==+================================================================================+==-- AUTHOR: t0pP8uZz & xprog SITE:...

CVE-2005-2961

Buffer overflow in the getstringahref function for ProZilla 1.3.7.4 and possibly earlier, with the -ftpsearch option enabled, allows remote servers to execute arbitrary code via a search response with a crafted string in the HREF field of an tag...

CVE-2005-2961

CVE-2005-2961 affects ProZilla (notably 1.3.7.4 and possibly earlier) via a buffer overflow in get_string_ahref when -ftpsearch is enabled, allowing remote servers to execute arbitrary code through a crafted HREF in an A tag. Public records in NVD and Debian DSAs indicate a remote code execution ...

CVE-2005-2961

Buffer overflow in the getstringahref function for ProZilla 1.3.7.4 and possibly earlier, with the -ftpsearch option enabled, allows remote servers to execute arbitrary code via a search response with a crafted string in the HREF field of an tag...

Debian DSA-834-1 : prozilla - buffer overflow

Tavis Ormandy discovered a buffer overflow in prozilla, a multi-threaded download accelerator, which may be exploited to execute arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory...

CVE-2005-2961: Undefined Security Weakness

Buffer overflow in the getstringahref function for ProZilla 1.3.7.4 and possibly earlier, with the -ftpsearch option enabled, allows remote servers to execute arbitrary code via a search response with a crafted string in the HREF field of an tag...