Directory traversal

Directory traversal vulnerability in EKINdesigns MySQL Quick Admin 1.5.5 allows remote attackers to read and execute arbitrary files via a .. dot dot in the lang parameter to actions.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

CVE-2008-4454

CVE-2008-4454 concerns EKINdesigns MySQL Quick Admin 1.5.5. The connected sources confirm a directory traversal vulnerability where remote attackers can read and potentially execute arbitrary files by injecting a .. (dot dot) in the lang parameter to actions.php. This is a server-side path traver...

CVE-2008-4455

CVE-2008-4455: A directory traversal vulnerability in EKINdesigns MySQL Quick Admin 1.5.5 and earlier affects the index.php script. When magic_quotes_gpc is disabled, an attacker can cause the language cookie to include a .. sequence, enabling reading and execution of arbitrary files. The conditi...

CVE-2008-4454

Directory traversal vulnerability in EKINdesigns MySQL Quick Admin 1.5.5 allows remote attackers to read and execute arbitrary files via a .. dot dot in the lang parameter to actions.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

CVE-2008-4455

Directory traversal vulnerability in index.php in EKINdesigns MySQL Quick Admin 1.5.5 and earlier, when magicquotesgpc is disabled, allows remote attackers to read and execute arbitrary files via a .. dot dot in the language cookie...

CVE-2008-4455: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in EKINdesigns MySQL Quick Admin 1.5.5 and earlier, when magicquotesgpc is disabled, allows remote attackers to read and execute arbitrary files via a .. dot dot in the language cookie...

CVE-2008-4454: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in EKINdesigns MySQL Quick Admin 1.5.5 allows remote attackers to read and execute arbitrary files via a .. dot dot in the lang parameter to actions.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

MySQL Quick Admin <= 1.5.5 (COOKIE) Local File Inclusion Vulnerability

No description provided by source. MySQL Quick Admin = 1.5.5 COOKIE Local File Inclusion Vulnerability url: http://www.mysqlquickadmin.com/ Author: JosS mail: sys-projectathotmaildotcom site: http://spanish-hackers.com team: Spanish Hackers Team - SHT This was written for educational purpose. Use...

MySQL Quick Admin <= 1.5.5 (COOKIE) Local File Inclusion Vulnerability

Exploit for unknown platform in category web applications ====================================================================== MySQL Quick Admin = 1.5.5 COOKIE Local File Inclusion Vulnerability ====================================================================== MySQL Quick Admin = 1.5.5...

MySQL Quick Admin 1.5.5 - cookie Local File Inclusion

MySQL Quick Admin 1.5.5 - cookie Local File Inclusion MySQL Quick Admin = 1.5.5 COOKIE Local File Inclusion Vulnerability url: http://www.mysqlquickadmin.com/ Author: JosS mail: sys-projectathotmaildotcom site: http://spanish-hackers.com team: Spanish Hackers Team - SHT This was written for...

mysqlquick-lfi.txt

MySQL Quick Admin = 1.5.5 COOKIE Local File Inclusion Vulnerability url: http://www.mysqlquickadmin.com/ Author: JosS mail: sys-projectathotmaildotcom site: http://spanish-hackers.com team: Spanish Hackers Team - SHT This was written for educational purpose. Use it at your own risk. Author will b...

MySQL Quick Admin 1.5.5 - 'cookie' Local File Inclusion

MySQL Quick Admin = 1.5.5 COOKIE Local File Inclusion Vulnerability url: http://www.mysqlquickadmin.com/ Author: JosS mail: sys-projectathotmaildotcom site: http://spanish-hackers.com team: Spanish Hackers Team - SHT This was written for educational purpose. Use it at your own risk. Author will b...

PT-2008-5439

Name of the Vulnerable Software and Affected Versions Quick.Cart version 3.1 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML. This is achieved via the query string in the admin.php file. Recommendations For Quick.Cart version...

Quick Cart 3.1 - 'admin.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/31216/info Quick.Cart is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context...

CVE-2008-3765

SQL injection vulnerability in code.php in Quick Poll Script allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

SQL injection vulnerability in code.php in Quick Poll Script allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-3765

SQL injection vulnerability in code.php in Quick Poll Script allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-3765

The CVE-2008-3765 entry describes an SQL injection in the Quick Poll Script, specifically in code.php, exploitable via the id parameter. The vulnerability allows remote attackers to potentially execute arbitrary SQL commands. The NVD CVSSv2 score is 7.5 (HIGH) with network attack vector and low a...

CVE-2008-3765: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in code.php in Quick Poll Script allows remote attackers to execute arbitrary SQL commands via the id parameter...

quickpoll-sql.txt

|| | | Quick Poll code.php id Remote SQL Injection Vulnerability | | |---------------------Hussin X----------------------| | | Author: Hussin X | | Home : www.tryag.cc/cc | | email: darkangelg85atYahooDoTcom | | | | | | | script :http://discountedscripts.com/productinfo.php?productsid=69 | ||...