Lucene search
+L

43 matches found

Exploit DB
Exploit DB
•added 2008/03/12 12:00 a.m.•43 views

QuickTalk Forum 1.6 - Blind SQL Injection

QuickTalk Forum / ----------------------------------------------------------------------------------------------- - QuickTalk Forum Blind SQL Injection Exploit qtfindsearchov.php - - Info --------------------------------------------------------------------------------------- - Author: t0pP8uZz &...

6.8CVSS5.8AI score0.00914EPSS
SaveExploits2
zdt
zdt
•added 2008/03/12 12:00 a.m.•36 views

QuickTalk Forum <= 1.6 Remote Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ========================================================= QuickTalk Forum QuickTalk Forum / ----------------------------------------------------------------------------------------------- - QuickTalk Forum Blind SQL Injection Exploit...

7.1AI score
SaveExploits0
Prion
Prion
•added 2007/07/03 8:30 p.m.•29 views

Sql injection

Multiple SQL injection vulnerabilities in QuickTicket 1.2 build:20070621 and QuickTalk Forum 1.3 allow remote attackers to execute arbitrary SQL commands via the 1 t and 2 f parameters in a qtiindpost.php and b qtiindpostprt.php; 3 dir and 4 order parameters in qtiindmember.php; 5 id parameter in...

7.5CVSS9.3AI score0.04833EPSS
SaveExploits1References13Affected Software2
NVD
NVD
•added 2007/07/03 8:30 p.m.•20 views

CVE-2007-3538

SQL injection vulnerability in qtgmsgview.php in QuickTalk guestbook 1.2 allows remote attackers to execute arbitrary SQL commands via the id parameter...

7.5CVSS8.4AI score0.01063EPSS
SaveExploits0References4
Prion
Prion
•added 2007/07/03 8:30 p.m.•19 views

Sql injection

SQL injection vulnerability in qtgmsgview.php in QuickTalk guestbook 1.2 allows remote attackers to execute arbitrary SQL commands via the id parameter...

7.5CVSS9.1AI score0.01063EPSS
SaveExploits0References4Affected Software1
NVD
NVD
•added 2007/07/03 8:30 p.m.•31 views

CVE-2007-3539

Multiple SQL injection vulnerabilities in QuickTicket 1.2 build:20070621 and QuickTalk Forum 1.3 allow remote attackers to execute arbitrary SQL commands via the 1 t and 2 f parameters in a qtiindpost.php and b qtiindpostprt.php; 3 dir and 4 order parameters in qtiindmember.php; 5 id parameter in...

7.5CVSS8.5AI score0.04833EPSS
SaveExploits1References13
Cvelist
Cvelist
•added 2007/07/03 8:00 p.m.•33 views

CVE-2007-3538

SQL injection vulnerability in qtgmsgview.php in QuickTalk guestbook 1.2 allows remote attackers to execute arbitrary SQL commands via the id parameter...

8.4AI score0.01063EPSS
SaveExploits0References4
CVE
CVE
•added 2007/07/03 8:00 p.m.•72 views

CVE-2007-3539

Multiple SQL injection vulnerabilities in QuickTicket 1.2 (build:20070621) and QuickTalk Forum 1.3 allow remote attackers to execute arbitrary SQL via parameter misuse in several pages: (1) t and (2) f in qti_ind_post.php and qti_ind_post_prt.php; (3) dir and (4) order in qti_ind_member.php; (5) ...

7.5CVSS8.5AI score0.04833EPSS
SaveExploits1References13Affected Software2
CVE
CVE
•added 2007/07/03 8:00 p.m.•83 views

CVE-2007-3538

The CVE-2007-3538 issue affects QuickTalk guestbook 1.2, specifically the qtg_msg_view.php component. The root cause is improper handling of the id parameter, enabling SQL injection. This allows remote attackers to execute arbitrary SQL commands within the database. The provided sources (NVD and ...

7.5CVSS8.4AI score0.01063EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
•added 2007/07/03 8:00 p.m.•44 views

CVE-2007-3539

Multiple SQL injection vulnerabilities in QuickTicket 1.2 build:20070621 and QuickTalk Forum 1.3 allow remote attackers to execute arbitrary SQL commands via the 1 t and 2 f parameters in a qtiindpost.php and b qtiindpostprt.php; 3 dir and 4 order parameters in qtiindmember.php; 5 id parameter in...

8.5AI score0.04833EPSS
SaveExploits1References13
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2007/07/03 12:00 a.m.•3 views

CVE-2007-3539: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in QuickTicket 1.2 build:20070621 and QuickTalk Forum 1.3 allow remote attackers to execute arbitrary SQL commands via the 1 t and 2 f parameters in a qtiindpost.php and b qtiindpostprt.php; 3 dir and 4 order parameters in qtiindmember.php; 5 id parameter in...

7.5CVSS6.4AI score0.04833EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2007/07/03 12:00 a.m.•3 views

CVE-2007-3538: Undefined Security Weakness

SQL injection vulnerability in qtgmsgview.php in QuickTalk guestbook 1.2 allows remote attackers to execute arbitrary SQL commands via the id parameter...

7.5CVSS6.4AI score0.01063EPSS
SaveExploits0References1
NVD
NVD
•added 2007/07/02 7:30 p.m.•21 views

CVE-2007-3505

Multiple directory traversal vulnerabilities in QuickTalk forum 1.3 allow remote attackers to include and execute arbitrary local files via a .. dot dot sequence in the lang parameter to 1 qtfcheckname.php, 2 qtfjbirth.php, or 3 qtfjexists.php...

6.4CVSS7.3AI score0.07939EPSS
SaveExploits1References8
Prion
Prion
•added 2007/07/02 7:30 p.m.•34 views

Directory traversal

Multiple directory traversal vulnerabilities in QuickTalk forum 1.3 allow remote attackers to include and execute arbitrary local files via a .. dot dot sequence in the lang parameter to 1 qtfcheckname.php, 2 qtfjbirth.php, or 3 qtfjexists.php...

6.4CVSS7.8AI score0.07939EPSS
SaveExploits1References8Affected Software1
Cvelist
Cvelist
•added 2007/07/02 7:00 p.m.•32 views

CVE-2007-3505

Multiple directory traversal vulnerabilities in QuickTalk forum 1.3 allow remote attackers to include and execute arbitrary local files via a .. dot dot sequence in the lang parameter to 1 qtfcheckname.php, 2 qtfjbirth.php, or 3 qtfjexists.php...

7.3AI score0.07939EPSS
SaveExploits1References8
CVE
CVE
•added 2007/07/02 7:00 p.m.•66 views

CVE-2007-3505

CVE-2007-3505 involves multiple directory traversal flaws in QuickTalk forum 1.3 that allow remote attackers to include and execute arbitrary local files via a .. sequence in the lang parameter of qtf_checkname.php, qtf_j_birth.php, or qtf_j_exists.php. The affected component is the QuickTalk for...

6.4CVSS7.3AI score0.07939EPSS
SaveExploits1References8Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2007/07/02 12:00 a.m.•2 views

CVE-2007-3505: Undefined Security Weakness

Multiple directory traversal vulnerabilities in QuickTalk forum 1.3 allow remote attackers to include and execute arbitrary local files via a .. dot dot sequence in the lang parameter to 1 qtfcheckname.php, 2 qtfjbirth.php, or 3 qtfjexists.php...

6.4CVSS6.3AI score0.07939EPSS
SaveExploits1References1
Packet Storm
Packet Storm
•added 2007/06/28 12:00 a.m.•31 views

quicktalk-lfi.txt

QuickTalk forum v1.3 Local File Inclusion download: http://www.qt-cute.org/download/qtf13.zip found by: katatafish [email protected] vulncode: $strLang = $GET"lang"; include"language/$strLang/qtflangreg.inc"; exploits:...

7.4AI score
SaveExploits0
seebug.org
seebug.org
•added 2007/06/28 12:00 a.m.•21 views

QuickTalk forum 1.3 (lang) Local File Inclusion Vulnerabilities

No description provided by source. QuickTalk forum v1.3 Local File Inclusion download: http://www.qt-cute.org/download/qtf13.zip found by: katatafish [email protected] vulncode: $strLang = $GET"lang"; include"language/$strLang/qtflangreg.inc"; exploits:...

7.1AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2007/06/27 12:00 a.m.•32 views

QuickTalk forum 1.3 - 'lang' Local File Inclusion

QuickTalk forum v1.3 Local File Inclusion download: http://www.qt-cute.org/download/qtf13.zip found by: katatafish [email protected] vulncode: $strLang = $GET"lang"; include"language/$strLang/qtflangreg.inc"; exploits:...

6.4CVSS5.8AI score0.07939EPSS
SaveExploits1
Rows per page
Query Builder