202 matches found
Sql injection
SQL injection vulnerability in forum.php in Prozilla Forum allows remote attackers to execute arbitrary SQL commands via the forum parameter...
CVE-2008-1788
SQL injection vulnerability in directory.php in Prozilla Entertainers 1.1 and earlier allows remote attackers to execute arbitrary SQL commands via the cat parameter. NOTE: some of these details are obtained from third party information...
CVE-2008-1788
SQL injection vulnerability in directory.php in Prozilla Entertainers 1.1 and earlier allows remote attackers to execute arbitrary SQL commands via the cat parameter. NOTE: some of these details are obtained from third party information...
CVE-2008-1789
CVE-2008-1789 affects Prozilla Forum (forum.php) and is caused by an SQL injection vulnerability in the forum parameter. The issue allows remote attackers to execute arbitrary SQL commands, per the description. Connected sources confirm the vulnerability details in Prozilla Forum, but no remediat...
CVE-2008-1788
CVE-2008-1788 describes an SQL injection in the file directory.php of Prozilla Entertainers 1.1 and earlier. The vulnerability arises when processing the cat parameter, allowing remote attackers to execute arbitrary SQL commands. Affected component: directory.php in Prozilla Entertainers; root ca...
CVE-2008-1789
SQL injection vulnerability in forum.php in Prozilla Forum allows remote attackers to execute arbitrary SQL commands via the forum parameter...
Design/Logic Flaw
Prozilla Reviews 1.0 allows remote attackers to delete arbitrary users via a modified UserID parameter in a direct request to siteadmin/DeleteUser.php...
Design/Logic Flaw
Prozilla Topsites 1.0 allows remote attackers to perform administrative actions via a direct request to 1 addu.php, 2 editu.php, and 3 uidx.php in siteadmin/...
CVE-2008-1784
Prozilla Topsites 1.0 allows remote attackers to perform administrative actions via a direct request to 1 addu.php, 2 editu.php, and 3 uidx.php in siteadmin/...
CVE-2008-1785
delete.php in Prozilla Top 100 1.2 allows remote authenticated users to delete statistics and accounts of arbitrary users via a modified s parameter...
CVE-2008-1783
Prozilla Reviews 1.0 allows remote attackers to delete arbitrary users via a modified UserID parameter in a direct request to siteadmin/DeleteUser.php...
Code injection
delete.php in Prozilla Top 100 1.2 allows remote authenticated users to delete statistics and accounts of arbitrary users via a modified s parameter...
CVE-2008-1784
Prozilla Topsites 1.0 is affected. Remote attackers can perform administrative actions via direct requests to siteadmin/ addu.php, editu.php, and uidx.php. CVSSv2 base score 7.5 (HIGH) with network/vector/low complexity, no authentication. Connected sources confirm vulnerability details without a...
CVE-2008-1785
The CVE-2008-1785 issue affects Prozilla Top 100 1.2, where delete.php can be abused by remote authenticated users to delete statistics and accounts of arbitrary users via a modified s parameter. Root cause appears to be parameter manipulation in delete.php, enabling unauthorized destructive acti...
CVE-2008-1783
Prozilla Reviews 1.0 is affected by CVE-2008-1783. A remote attacker can delete arbitrary users by supplying a modified UserID parameter in a direct request to siteadmin/DeleteUser.php. The NVD lists a base score of 6.4 (MEDIUM) with network access and low attack complexity; confidentiality is no...
CVE-2008-1785
delete.php in Prozilla Top 100 1.2 allows remote authenticated users to delete statistics and accounts of arbitrary users via a modified s parameter...
CVE-2008-1783
Prozilla Reviews 1.0 allows remote attackers to delete arbitrary users via a modified UserID parameter in a direct request to siteadmin/DeleteUser.php...
CVE-2008-1784
Prozilla Topsites 1.0 allows remote attackers to perform administrative actions via a direct request to 1 addu.php, 2 editu.php, and 3 uidx.php in siteadmin/...
CVE-2008-1784: Undefined Security Weakness
Prozilla Topsites 1.0 allows remote attackers to perform administrative actions via a direct request to 1 addu.php, 2 editu.php, and 3 uidx.php in siteadmin/...
CVE-2008-1783: Undefined Security Weakness
Prozilla Reviews 1.0 allows remote attackers to delete arbitrary users via a modified UserID parameter in a direct request to siteadmin/DeleteUser.php...