SQL-injection and XSS in photokorn gallery

Advisory: SQL-injection and XSS in photokorn gallery Home Page: http://www.telekorn.com Уязвимость/Vulnerability: SQL-injection Уязвимый скрипт/Vulnerable script: search.php http://www.stockvault.net/gallery/search.php?action=search&type=detail&where=keywords'&keyword=dotted Раскрытие установочно...

Sql injection

Multiple SQL injection vulnerabilities in DSDownload 1.0, with magicquotesgpc disabled, allow remote attackers to execute arbitrary SQL commands via the 1 key and 2 category parameters to a search.php and b downloads.php...

ofsatr 2.6 search for vulnerabilities simple analysis-vulnerability warning-the black bar safety net

Information source: cool-off heaven Article author: lanker See online have a similar tool, but the analysis of the articles but did not find, listen to small black say hackers Handbook, unfortunately even without the magazine, so you capture and then look at the code, generally analysis a bit. Th...

CVE-2006-1232: Undefined Security Weakness

Multiple SQL injection vulnerabilities in DSDownload 1.0, with magicquotesgpc disabled, allow remote attackers to execute arbitrary SQL commands via the 1 key and 2 category parameters to a search.php and b downloads.php...

MyBB search.php 'forums' Parameter SQLi

The version of MyBB running on the remote host is affected by a SQL injection vulnerability due to improper sanitization of user-supplied input to the 'forums' parameter of the search.php script. A remote attacker can exploit this issue to manipulate SQL queries, resulting in the disclosure of...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in sBlog 0.7.2 allow remote attackers to inject arbitrary web script or HTML via the 1 keyword parameter to search.php or 2 username parameter to commentsdo.php...

CVE-2006-1135: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in sBlog 0.7.2 allow remote attackers to inject arbitrary web script or HTML via the 1 keyword parameter to search.php or 2 username parameter to commentsdo.php...

sBlog 0.7.2 - search.php?keyword POST Method Cross-Site Scripting

sBlog 0.7.2 - search.php?keyword POST Method Cross-Site Scripting source: https://www.securityfocus.com/bid/17044/info sBlog is prone to HTML-injection vulnerabilities. The application fails to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-suppli...

Sql injection

Multiple SQL injection vulnerabilities in Gregarius 0.5.2 allow remote attackers to execute arbitrary SQL commands via the 1 folder parameter to feed.php or 2 rssquery parameter to search.php...

CVE-2006-1042

CVE-2006-1042 affects Gregarius 0.5.2. The vulnerability is a SQL injection in the web UI, exploitable via the 1) folder parameter to feed.php or 2) rss_query parameter to search.php, enabling remote attackers to execute arbitrary SQL commands. The provided sources describe multiple SQL injection...

CVE-2006-1041: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in Gregarius 0.5.2 allow remote attackers to inject arbitrary web script or HTML via the 1 rssquery parameter to search.php or 2 tag parameter to tags.php...

CVE-2006-1065: Undefined Security Weakness

SQL injection vulnerability in search.php in MyBulletinBoard MyBB 1.04 allows remote attackers to execute arbitrary SQL commands via the forums parameter...

CVE-2006-1042: Undefined Security Weakness

Multiple SQL injection vulnerabilities in Gregarius 0.5.2 allow remote attackers to execute arbitrary SQL commands via the 1 folder parameter to feed.php or 2 rssquery parameter to search.php...

MyBB-104SQL.txt

MyBB 1.0.4 New SQL Injection D3vil-0x1 File :- search.php 580 to 592 / START / if$mybb-input'forums' != "all" if!isarray$mybb-input'forums' input'forums' = arrayintval$mybb-input'forums'; foreach$mybb-input'forums' as $forum if!$searchin$forum $query = $db-query"SELECT f.fid FROM...

Advisory-18.txt

/ -------------------------------------------------------- Neo Security Team NST® - Advisory 18 - 03/03/06 -------------------------------------------------------- Program: phpBB Homepage: http://www.phpbb.com Vulnerable Versions: All phpBB versions Risk: High Risk!! Impact: Multiple DoS...

phpBB <= 2.0.19 Multiple DoS vulnerabilities

/ -------------------------------------------------------- Neo Security Team NST® - Advisory 18 - 03/03/06 -------------------------------------------------------- Program: phpBB Homepage: http://www.phpbb.com Vulnerable Versions: All phpBB versions Risk: High Risk!! Impact: Multiple DoS...

MyBB 1.0.4 New SQL Injection

MyBB 1.0.4 New SQL Injection D3vil-0x1 File :- search.php 580 to 592 / START / if$mybb-input'forums' != "all" if!isarray$mybb-input'forums' -- We Break It By forums=-1 $mybb-input'forums' = arrayintval$mybb-input'forums'; foreach$mybb-input'forums' as $forum if!$searchin$forum $query =...

Sql injection

SQL injection vulnerability in search.php in webSPELL 4.01.00 and earlier allows remote attackers to inject arbitrary SQL commands via the titleop parameter...

CVE-2006-0728

SQL injection vulnerability in search.php in webSPELL 4.01.00 and earlier allows remote attackers to inject arbitrary SQL commands via the titleop parameter...

CVE-2006-0728

CVE-2006-0728 affects webSPELL (search.php) 4.01.00 and earlier. The vulnerability is an SQL injection via the title_op parameter, allowing remote attackers to inject arbitrary SQL commands. Impact is listed as partial confidentiality, integrity, and availability with a high base score. No remedi...