CVE-2007-3685

CVE-2007-3685 affects the Unobtrusive Ajax Star Rating Bar (rpc.php). The issue is a cross-site scripting (XSS) flaw that allows an attacker to inject arbitrary script/HTML via the q parameter in rpc.php, for versions before 1.2.0. The vulnerability is described across multiple sources as XSS in ...

CVE-2007-3684

Affected software: Unobtrusive Ajax Star Rating Bar before 1.2.0. Root cause: SQL injection in the (1) q and (2) t parameters in (a) db.php and (b) rpc.php. Impact: remote attackers can execute arbitrary SQL commands. Mitigation: upgrade to version 1.2.0 or later (apply patch).

CVE-2007-3684: Undefined Security Weakness

Multiple SQL injection vulnerabilities in Unobtrusive Ajax Star Rating Bar before 1.2.0 allow remote attackers to execute arbitrary SQL commands via the 1 q and 2 t parameters in a db.php and b rpc.php...

CVE-2007-3686: Undefined Security Weakness

CRLF injection vulnerability in db.php in Unobtrusive Ajax Star Rating Bar before 1.2.0 allows remote attackers to inject arbitrary HTTP headers and data via CRLF sequences in the HTTPREFERER parameter...

CVE-2007-3685: Undefined Security Weakness

Cross-site scripting XSS vulnerability in rpc.php in Unobtrusive Ajax Star Rating Bar before 1.2.0 allows remote attackers to inject arbitrary web script or HTML via the q parameter...

CVE-2007-2898: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in includes/rating.php in 2z Project 0.9.5 allows remote attackers to execute arbitrary SQL commands via the rating parameter to index.php...

Unfixed Redirect vulnerability at www.ceal.k12.tr

Security researcher Narcoticxs, has submitted on 04/10/2007 a Redirect vulnerability affecting www.ceal.k12.tr, which at the time of submission ranked 2258617 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/10/2007. It is currently unfixed. ...

Sql injection

SQL injection vulnerability in viewcomments.php in ScriptMagix Photo Rating 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the phid parameter...

CVE-2007-1619

SQL injection vulnerability in viewcomments.php in ScriptMagix Photo Rating 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the phid parameter...

CVE-2007-1619

SQL injection vulnerability in viewcomments.php in ScriptMagix Photo Rating 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the phid parameter...

CVE-2007-1619

CVE-2007-1619 affects ScriptMagix Photo Rating 2.0 and earlier, with a vulnerability in viewcomments.php that allows remote attackers to inject SQL via the phid parameter. The underlying flaw is an SQL injection in the handling of phid, enabling arbitrary SQL commands (impacting confidentiality, ...

CVE-2007-1619: Undefined Security Weakness

SQL injection vulnerability in viewcomments.php in ScriptMagix Photo Rating 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the phid parameter...

ScriptMagix Photo Rating ViewComments.PHP SQL注入漏洞

ScriptMagix Photo Rating是一款基于PHP的WEB应用程序。 ScriptMagix Photo Rating不正确过滤用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，可获得敏感信息。 问题是'ViewComments.PHP'脚本对用户提交的WEB参数缺少过滤，提交恶意SQL代码作为参数数据，可导致更改原来的SQL逻辑，获得敏感信息。 ScriptMagix Photo Rating 2.0 目前没有解决方案提供： http://www.scriptmagix.com/index.php?cmd=2&id=4 !/usr/bin/perl Script...

ScriptMagix Photo Rating <= 2.0 Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl Script Name: ScriptMagix Photo Rating = 2.0 viewcomments.php Remote Blind SQL Injection Exploit Coded by : ajann Author : ajann Contact : : S.Page : http://www.scriptmagix.com $$ : 75$ .. : ajann,Turkey use IO::Socket; if@ARGV 1 print "...

ScriptMagix Photo Rating <= 2.0 Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ============================================================ ScriptMagix Photo Rating : "; $dir = ; chop $dir; if $dir = /exit/ print "-- Exploit FailedYou Are Exited \n"; exit; if $dir = /// else print "-- Exploit FailedNo DIR \n"; exit;...

ScriptMagix Photo Rating 2.0 - SQL Injection

ScriptMagix Photo Rating 2.0 - SQL Injection !/usr/bin/perl Script Name: ScriptMagix Photo Rating : "; $dir = ; chop $dir; if $dir = /exit/ print "-- Exploit FailedYou Are Exited \n"; exit; if $dir = /// else print "-- Exploit FailedNo DIR \n"; exit; $target =...

CVE-2007-0386

Unspecified vulnerability in the rating section in PostNuke 0.764 has unknown impact and attack vectors, related to "an interesting bug."...

Design/Logic Flaw

Unspecified vulnerability in the rating section in PostNuke 0.764 has unknown impact and attack vectors, related to "an interesting bug."...

CVE-2007-0386

Unspecified vulnerability in the rating section in PostNuke 0.764 has unknown impact and attack vectors, related to "an interesting bug."...

CVE-2007-0386

Technical details for CVE-2007-0386 are not provided in the supplied documents; the records only state an unspecified vulnerability in PostNuke 0.764 with unknown impact. Monitor for updates.