CVE-2007-3881

SQL injection vulnerability in index.php in Pictures Rating Picture Rating allows remote attackers to execute arbitrary SQL commands via the msgid parameter...

CVE-2007-3881

CVE-2007-3881 describes an SQL injection in index.php of Pictures Rating (Picture Rating). The vulnerability is exploitable via the msgid parameter, allowing remote attackers to execute arbitrary SQL commands. The associated metrics show a high base score (7.5, NETWORK attack vector, no authentic...

CVE-2007-3881

SQL injection vulnerability in index.php in Pictures Rating Picture Rating allows remote attackers to execute arbitrary SQL commands via the msgid parameter...

Pictures Rating - index.php?msgid SQL Injection

Pictures Rating - index.php?msgid SQL Injection --==+================================================================================+==-- --==+ Pictures Rating SQL Injection Vulnerbility +==-- --==+================================================================================+==-- AUTHOR:...

Pictures Rating (index.php msgid) Remote SQL Injection Vulnerbility

Exploit for unknown platform in category web applications =================================================================== Pictures Rating index.php msgid Remote SQL Injection Vulnerbility ===================================================================...

Crlf injection

CRLF injection vulnerability in db.php in Unobtrusive Ajax Star Rating Bar before 1.2.0 allows remote attackers to inject arbitrary HTTP headers and data via CRLF sequences in the HTTPREFERER parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in rpc.php in Unobtrusive Ajax Star Rating Bar before 1.2.0 allows remote attackers to inject arbitrary web script or HTML via the q parameter...

CVE-2007-3686

CRLF injection vulnerability in db.php in Unobtrusive Ajax Star Rating Bar before 1.2.0 allows remote attackers to inject arbitrary HTTP headers and data via CRLF sequences in the HTTPREFERER parameter...

CVE-2007-3684

Multiple SQL injection vulnerabilities in Unobtrusive Ajax Star Rating Bar before 1.2.0 allow remote attackers to execute arbitrary SQL commands via the 1 q and 2 t parameters in a db.php and b rpc.php...

CVE-2007-3685

Cross-site scripting XSS vulnerability in rpc.php in Unobtrusive Ajax Star Rating Bar before 1.2.0 allows remote attackers to inject arbitrary web script or HTML via the q parameter...

CVE-2007-3685

CVE-2007-3685 affects the Unobtrusive Ajax Star Rating Bar (rpc.php). The issue is a cross-site scripting (XSS) flaw that allows an attacker to inject arbitrary script/HTML via the q parameter in rpc.php, for versions before 1.2.0. The vulnerability is described across multiple sources as XSS in ...

CVE-2007-3684

Affected software: Unobtrusive Ajax Star Rating Bar before 1.2.0. Root cause: SQL injection in the (1) q and (2) t parameters in (a) db.php and (b) rpc.php. Impact: remote attackers can execute arbitrary SQL commands. Mitigation: upgrade to version 1.2.0 or later (apply patch).

CVE-2007-3686

The CVE-2007-3686 entry describes a CRLF injection vulnerability in the Unobtrusive Ajax Star Rating Bar prior to 1.2.0. The flaw occurs in db.php and allows remote attackers to inject arbitrary HTTP headers and data via CRLF sequences in the HTTP_REFERER parameter. Public references corroborate ...

Unfixed Redirect vulnerability at www.ceal.k12.tr

Security researcher Narcoticxs, has submitted on 04/10/2007 a Redirect vulnerability affecting www.ceal.k12.tr, which at the time of submission ranked 2258617 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/10/2007. It is currently unfixed. ...

CVE-2007-1619

SQL injection vulnerability in viewcomments.php in ScriptMagix Photo Rating 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the phid parameter...

Sql injection

SQL injection vulnerability in viewcomments.php in ScriptMagix Photo Rating 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the phid parameter...

CVE-2007-1619

CVE-2007-1619 affects ScriptMagix Photo Rating 2.0 and earlier, with a vulnerability in viewcomments.php that allows remote attackers to inject SQL via the phid parameter. The underlying flaw is an SQL injection in the handling of phid, enabling arbitrary SQL commands (impacting confidentiality, ...

CVE-2007-1619

SQL injection vulnerability in viewcomments.php in ScriptMagix Photo Rating 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the phid parameter...

ScriptMagix Photo Rating ViewComments.PHP SQL注入漏洞

ScriptMagix Photo Rating是一款基于PHP的WEB应用程序。 ScriptMagix Photo Rating不正确过滤用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，可获得敏感信息。 问题是'ViewComments.PHP'脚本对用户提交的WEB参数缺少过滤，提交恶意SQL代码作为参数数据，可导致更改原来的SQL逻辑，获得敏感信息。 ScriptMagix Photo Rating 2.0 目前没有解决方案提供： http://www.scriptmagix.com/index.php?cmd=2&id=4 !/usr/bin/perl Script...

ScriptMagix Photo Rating <= 2.0 Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl Script Name: ScriptMagix Photo Rating = 2.0 viewcomments.php Remote Blind SQL Injection Exploit Coded by : ajann Author : ajann Contact : : S.Page : http://www.scriptmagix.com $$ : 75$ .. : ajann,Turkey use IO::Socket; if@ARGV 1 print "...