6812 matches found
CVE-2009-3420
CVE-2009-3420: XSS in Miniweb’s Publisher module 2.0 (index.php) via begin parameter and PATH_INFO. Affected: Publisher module 2.0 for Miniweb; vulnerability allows remote injection of script/HTML; CVSS v2 base score 4.3 (Medium) with partial integrity impact. Exploitation details: remote attacke...
CVE-2009-3419
CVE-2009-3419 describes an SQL injection in the Miniweb Publisher module 2.0, via index.php and the historymonth parameter. Affected software: Miniweb Publisher module 2.0 (index.php). Root cause: unsafely handled input in historymonth leading to SQL command execution. Impact: remote attackers co...
CVE-2009-3420: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in index.php in the Publisher module 2.0 for Miniweb allow remote attackers to inject arbitrary web script or HTML via the 1 begin parameter and the 2 PATHINFO...
CVE-2009-3419: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in index.php in the Publisher module 2.0 for Miniweb allows remote attackers to execute arbitrary SQL commands via the historymonth parameter...
CVE-2009-3315
SQL injection vulnerability in admin/index.php in NeLogic Nephp Publisher Enterprise 3.5.9 and 4.5 allows remote attackers to execute arbitrary SQL commands via the Username field...
Sql injection
SQL injection vulnerability in admin/index.php in NeLogic Nephp Publisher Enterprise 3.5.9 and 4.5 allows remote attackers to execute arbitrary SQL commands via the Username field...
CVE-2009-3315
The affected software is NeLogic Nephp Publisher Enterprise (versions 3.5.9 and 4.5). The vulnerability is a SQL injection in admin/index.php via the Username field, caused by improper handling of input in the web application. This allows remote attackers to execute arbitrary SQL commands, with t...
CVE-2009-3315
SQL injection vulnerability in admin/index.php in NeLogic Nephp Publisher Enterprise 3.5.9 and 4.5 allows remote attackers to execute arbitrary SQL commands via the Username field...
CVE-2009-3315: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in admin/index.php in NeLogic Nephp Publisher Enterprise 3.5.9 and 4.5 allows remote attackers to execute arbitrary SQL commands via the Username field...
Nephp Publisher Enterprise 4.5 (Auth Bypass) SQL Injection Vulnerability
No description provided by source. NEPHP publisher SQLi login bypass By learn3r hacker from Nepal [email protected] Affected version: v 3.5.9 or may be lower... Username: validusername' eg. Administrator/ Password: learn3r or whatever Or Username: ' or 1='1' password: learn3r or whatever...
Nephp Publisher Enterprise 4.5 SQL Injection
NEPHP publisher SQLi login bypass By learn3r hacker from Nepal [email protected] Affected version: v 3.5.9 or may be lower... Username: validusername' eg. Administrator/ Password: learn3r or whatever Or Username: ' or 1='1' password: learn3r or whatever Live Demo:...
Nephp Publisher Enterprise 4.5 - Authentication Bypass
Nephp Publisher Enterprise 4.5 - Authentication Bypass NEPHP publisher SQLi login bypass By learn3r hacker from Nepal [email protected] Affected version: v 3.5.9 or may be lower... Username: validusername' eg. Administrator/ Password: learn3r or whatever Or Username: ' or 1='1' password:...
Nephp Publisher Enterprise 4.5 (Auth Bypass) SQL Injection Vulnerability
Exploit for unknown platform in category web applications ======================================================================== Nephp Publisher Enterprise 4.5 Auth Bypass SQL Injection Vulnerability ======================================================================== NEPHP publisher SQLi...
Nephp Publisher Enterprise 4.5 - Authentication Bypass
NEPHP publisher SQLi login bypass By learn3r hacker from Nepal [email protected] Affected version: v 3.5.9 or may be lower... Username: validusername' eg. Administrator/ Password: learn3r or whatever Or Username: ' or 1='1' password: learn3r or whatever Live Demo:...
CVE-2008-7075
Multiple SQL injection vulnerabilities in Kalptaru Infotech Ltd. Star Articles 6.0 allow remote attackers to inject arbitrary SQL commands via 1 the subcatid parameter to article.list.php; or the artid parameter to 2 article.print.php, 3 article.comments.php, 4 article.publisher.php, or 5...
Miniweb 2.0 Module Publisher - Blind SQL Injection Cross-Site Scripting
Miniweb 2.0 Module Publisher - Blind SQL Injection Cross-Site Scripting -----------------------------I AM MUSLIM !!------------------------------ ============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN TH...
Miniweb 2.0 Module Publisher - Blind SQL Injection / Cross-Site Scripting
-----------------------------I AM MUSLIM !!------------------------------ ============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || ||...
Miniweb 2.0 Publisher XSS
-----------------------------I AM MUSLIM !!------------------------------ ============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || ||...
Miniweb 2.0 Publisher SQL Injection / XSS
-----------------------------I AM MUSLIM !!------------------------------ ============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || ||...
