CVE-2008-4901

SQL injection vulnerability in admin/admin.php in Article Publisher Pro 1.5 allows remote attackers to execute arbitrary SQL commands via the username parameter...

CVE-2008-4901

The CVE-2008-4901 entry documents a SQL injection in Article Publisher Pro 1.5. Affected component: admin/admin.php, parameter username. Root cause is improper handling of user-supplied input enabling arbitrary SQL execution by remote attackers. Impact is partial confidentiality, integrity, and a...

CVE-2008-4902: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in contactauthor.php in Article Publisher Pro 1.5 allows remote attackers to execute arbitrary SQL commands via the userid parameter...

CVE-2008-4904: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the "Manage pages" feature admin/pages in Typo 5.1.3 and earlier allows remote authenticated users with "blog publisher" rights to execute arbitrary SQL commands via the searchpublishedat parameter...

CVE-2008-4901: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in admin/admin.php in Article Publisher Pro 1.5 allows remote attackers to execute arbitrary SQL commands via the username parameter...

Article Publisher PRO 1.5 Insecure Cookie Handling Vulnerability

No description provided by source. Article Publisher PRO Insecure Cookie Handling Vulnerability version: 1.5 ---------------------------------------------------------- Discovered By: ZoRLu Date: 01.11.2008 Home: www.z0rlu.blogspot.com contact: [email protected] N0T: YALNIZLIK, YiTiRDi ANLAMINI...

articlepro-sql.txt

Kira has decide be back after halloween Discovered by : Mountassif Moad Type Gap : Blind Sql Injection Script : Article Publisher Pro : http://www.phparticlescript.com/ Greetz : Allah , All my freind P0c : http://localhost/contactauthor.php?userid=1+and+1=1 true...

articlepublisher-sql.txt

/ / \ / / / / / / / / / / / /\ / / / / / / / / / / / / / / \ / // // / / / / // // / // / / / / / / / // / / / / / / //, / // //,/// // // /,// // // // Discovered by : Hakxer Type Gap : Bybass Login Script : Article Publisher Pro : http://www.phparticlescript.com/ Greetz : Allah ,...

Article Publisher PRO (userid) Remote SQL Injection Exploit

No description provided by source. Kira has decide be back after halloween Discovered by : Mountassif Moad Type Gap : Blind Sql Injection Script : Article Publisher Pro : http://www.phparticlescript.com/ Greetz : Allah , All my freind P0c : http://localhost/contactauthor.php?userid=1+and+1=1 true...

Article Publisher PRO 1.5 (SQL Injection) Auth Bypass Vulnerability

No description provided by source. / / \ / / / / / / / / / / / /\ / / / / / / / / / / / / / / \ / // // / / / / // // / // / / / / / / / // / / / / / / //, / // //,/// // // /,// // // // Discovered by : Hakxer Type Gap : Bybass Login Script : Article Publisher Pro :...

Article Publisher PRO 1.5 Insecure Cookie Handling Vulnerability

Exploit for unknown platform in category web applications ================================================================ Article Publisher PRO 1.5 Insecure Cookie Handling Vulnerability ================================================================ Article Publisher PRO Insecure Cookie Handli...

Graugon PHP Article Publisher Pro 1.5 - Insecure Cookie Handling

Article Publisher PRO Insecure Cookie Handling Vulnerability version: 1.5 ---------------------------------------------------------- Discovered By: ZoRLu Date: 01.11.2008 Home: www.z0rlu.blogspot.com contact: [email protected] N0T: YALNIZLIK, YiTiRDi ANLAMINI YALNIZLIGIMDA : N0T: a.q kpss :...

Article Publisher PRO 1.5 - Authentication Bypass

Article Publisher PRO 1.5 - Authentication Bypass / / \ / / / / / / / / / / / /\ / / / / / / / / / / / / / / \ / // // / / / / // // / // / / / / / / / // / / / / / / //, / // //,/// // // /,// // // // Discovered by : Hakxer Type Gap : Bybass Login Script : Article Publisher Pro :...

Article Publisher PRO - userid SQL Injection

Article Publisher PRO - userid SQL Injection Kira has decide be back after halloween Discovered by : Mountassif Moad Type Gap : Blind Sql Injection Script : Article Publisher Pro : http://www.phparticlescript.com/ Greetz : Allah , All my freind P0c :...

Article Publisher PRO 1.5 (SQL Injection) Auth Bypass Vulnerability

Exploit for unknown platform in category web applications =================================================================== Article Publisher PRO 1.5 SQL Injection Auth Bypass Vulnerability =================================================================== Discovered by : Hakxer Type Gap :...

Article Publisher PRO (userid) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications =========================================================== Article Publisher PRO userid Remote SQL Injection Exploit =========================================================== Kira has decide be back after halloween Discovered by :...

Article Publisher PRO - 'userid' SQL Injection

Kira has decide be back after halloween Discovered by : Mountassif Moad Type Gap : Blind Sql Injection Script : Article Publisher Pro : http://www.phparticlescript.com/ Greetz : Allah , All my freind P0c : http://localhost/contactauthor.php?userid=1+and+1=1 true...

Article Publisher PRO 1.5 - Authentication Bypass

/ / \ / / / / / / / / / / / /\ / / / / / / / / / / / / / / \ / // // / / / / // // / // / / / / / / / // / / / / / / //, / // //,/// // // /,// // // // Discovered by : Hakxer Type Gap : Bybass Login Script : Article Publisher Pro : http://www.phparticlescript.com/ Greetz : Allah ,...

Gentoo Security Advisory GLSA 200502-14 (mod_python)

The remote host is missing updates announced in advisory GLSA 200502-14. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Microsoft Word无序列表处理远程内存破坏漏洞

BUGTRAQ ID: 29769 CNCAN ID：CNCAN-2008061908 Microsoft Word是一款流行的文字处理程序。 Microsoft Word无序列表处理存在内存破坏问题，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击，可能以应用程序权限执行任意指令。 目前没有详细漏洞细节提供。 Microsoft Word 2003 SP3 Microsoft Word 2003 SP2 + Microsoft Office 2003 SP1 + Microsoft Office 2003 SP1 + Microsoft Office 2003 0 + Microsof...