KBase Express SQL inj. vuln.

KBase Express SQL inj. vuln. Vuln. dicovered by : r0t Date: 29 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/kbase-express-sql-inj-vuln.html Vendor:http://www.sensationdesigns.com/products/scripts/kbaseexpress/ affected version: 1.0.0 and prior Product Description: KBase Express ...

CVE-2005-3838

The CVE-2005-3838 issue affects IsolSoft Support Center 2.2 and earlier. Multiple SQL injection vulnerabilities exist in search.php, exploitable via the parameters (1) lorder, (2) Priority, (3) Status, (4) Category, (5) searchvalue, and (6) field to execute arbitrary SQL commands remotely. The pr...

CVE-2005-3834

Cross-site scripting XSS vulnerability in search.php in Tunez 1.21 and earlier allows remote attackers to inject arbitrary web script or HTML via the searchFor parameter...

CVE-2005-3834

CVE-2005-3834 : An XSS vulnerability exists in Tunez (versions 1.21 and earlier) in search.php, exploitable via the searchFor parameter. Remote attackers can inject arbitrary web script or HTML. Affected software/component: Tunez 1.21 and earlier; vulnerable parameter: searchFor in search.php. Im...

CVE-2005-3814

CVE-2005-3814 affects SmartPPC Pro with multiple XSS flaws accessible through the username parameter in directory.php, frames.php, and search.php. The PT-2005-4562 entry confirms the vulnerabilities, noting no specific affected versions and indicating that a fix/version with patches is not listed...

Amazon Shop 5.0.0 XSS vuln.

Amazon Shop 5.0.0 XSS vuln. Vuln. dicovered by : r0t Date: 26 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/amazon-shop-500-xss-vuln.html Vendor:http://www.ghostscripter.com/amazonshop.php affected version:5.0.0 and prior Product description: With Amazon Shop you can run your ver...

IsolSoft Support Center SQL inj.

IsolSoft Support Center SQL inj. Vuln. dicovered by : r0t Date: 24 nov. 2005 Orginal advsiory:http://pridels.blogspot.com/2005/11/isolsoft-support-center-sql-inj.html Vendor:http://www.isolsoft.com/ affected version:Support Center v2.2 and prior Vuln. Desciption: Input passed to the "field"...

Top Auction Multiple SQL Vuln.

Top Auction Multiple SQL Vuln. Vuln. dicovered by : r0t Date 23 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/top-auction-multiple-sql-vuln.html Vendor:http://www.phplabs.com/ Product link:http://www.phplabs.com/scripts.php?script=Top20Auction affected version: Top Auction last...

[waraxe-2005-SA#043] - Sql injection in Phorum 5.0.20 and earlier

================================================================================ waraxe-2005-SA043 ================================================================================ Sql injection in Phorum 5.0.20 and earlier...

CVE-2005-3418

Multiple cross-site scripting XSS vulnerabilities in phpBB 2.0.17 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 errormsg parameter to usercpregister.php, 2 forwardpage parameter to login.php, and 3 listcat parameter to search.php, which are not initialized as...

CVE-2005-3418

Multiple cross-site scripting XSS vulnerabilities in phpBB 2.0.17 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 errormsg parameter to usercpregister.php, 2 forwardpage parameter to login.php, and 3 listcat parameter to search.php, which are not initialized as...

CVE-2004-2511

Multiple cross-site scripting XSS vulnerabilities in DCP-Portal 5.3.2 and earlier allow remote attackers to inject arbitrary web script or HTML via 1 the year, 2 month, and 3 day parameters in calendar.php; 4 the cid and 5 url parameters in index.php; 6 the cid parameter in annoucement.php; 7 the...

PunBB < 1.2.9 search.php old_searches Parameter SQL Injection

Binary data 3260.prm...

PunBB search.php old_searches Parameter SQL Injection

The version of PunBB installed on the remote host fails to sanitize user-supplied input to the 'oldsearches' parameter of the 'search.php' script before using it in database queries. Provided PHP's 'registerglobals' setting is enabled, an attacker may be able to exploit this issue to delete...

[KAPDA::#6] Punbb SQL Injection Vulnerability

KAPDA::6 Punbb SQL Injection Vulnerability Punbb search.php SQL Injection Vulnerability KAPDA New advisory Vulnerable products : Punbb V 1.2.8 and 1.2.7 are tested,Hopefully all other versions Vendor: http://www.punbb.org/ Vulnerability: Sql injection About Punbb -------------------- PunBB is a...

MyBloggie 2.1.3 - Search.PHP SQL Injection Vulnerability

MyBloggie 2.1.3 Search.PHP SQL Injection Vulnerability. Webapps exploit for php platform source: http://www.securityfocus.com/bid/15017/info myBloggie is prone to an SQL injection vulnerability. This is due to a lack of sanitization of user-supplied input before passing it on to SQL queries...

CVE-2005-3045

CVE-2005-3045 affects My Little Forum 1.5 and 1.6 beta, where the vulnerability resides in the search.php component. The underlying issue is a SQL injection via the phrase field, allowing remote attackers to alter the database by injecting arbitrary SQL commands. Documents consistently describe t...

CVE-2005-2839

Multiple cross-site scripting XSS vulnerabilities in MAXdev MD-Pro 1.0.72 allow remote attackers to inject arbitrary web script or HTML via 1 dl-search.php or 2 wl-search.php...

CVE-2005-2697

SQL injection vulnerability in search.php for MyBulletinBoard MyBB 1.00 Release Candidate 1 through 4 allows remote attackers to execute arbitrary SQL commands via the uid parameter. NOTE: this issue might overlap CVE-2005-0282...

mybbSQLinject.txt

Hello The Injected File : search.php Discovered by: HACKERS PAL & Devil-00 & ABDUCTER Injected Versions :- Powered by MyBulletinBoard 1.00 Release Candidate 4 Powered by MyBulletinBoard 1.00 Release Candidate 3 Powered by MyBulletinBoard 1.00 Release Candidate 2 Powered by MyBulletinBoard 1.00...