U-Mail Webmail 4.91 - edit.php Arbitrary File Write

U-Mail Webmail 4.91 - edit.php Arbitrary File Write U-Mail Webmail Arbitrary File Write Vulnerability ================================================== Vulnerable: U-Mail 4.91 Vendors: www.comingchina.com Category: Input Validation Error Impact: An attacker can write arbitrary data to new files...

websvn-xssfhce.txt

WebSVN alertdocument.cookie; A url like the one above would display a JavaScript alert window containing the cookie data of any set cookies for the domain. File Handling Issues: There are some file handling issues in the RSS functionality used by WebSVN. The issue is caused by the following bit o...

CVE-2008-4091

SQL injection vulnerability in index.php in Web Directory Script 1.5.3 allows remote attackers to execute arbitrary SQL commands via the site parameter in an open action...

Sql injection

SQL injection vulnerability in index.php in Web Directory Script 1.5.3 allows remote attackers to execute arbitrary SQL commands via the site parameter in an open action...

CVE-2008-4091

SQL injection vulnerability in index.php in Web Directory Script 1.5.3 allows remote attackers to execute arbitrary SQL commands via the site parameter in an open action...

CVE-2008-4091

CVE-2008-4091 describes an SQL injection vulnerability in the web directory script’s index.php (version 1.5.3). The issue allows remote attackers to inject arbitrary SQL via the site parameter in an open action, enabling potentially unauthorized database queries. The available documents confirm t...

CVE-2008-4091: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in Web Directory Script 1.5.3 allows remote attackers to execute arbitrary SQL commands via the site parameter in an open action...

SourceWorkshop Web directory script 'index.php' SQL注入漏洞

BUGTRAQ ID: 30941 CNCAN ID：CNCAN-2008090204 SourceWorkshop Web directory script是一款基于PHP的WEB应用程序。 SourceWorkshop Web directory script不正确处理用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，可能获得敏感信息或操作数据库。 问题由于'index.php'脚本对用户提交给WEB参数缺少过滤，构建恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息或操作数据库。 Sourceworkshop Web directory script 1.5....

FreeBSD Ports: squid

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Web Directory Script 1.5.3 (site) SQL Injection Vulnerability

No description provided by source. || | | Web directory script v1.5.3 site Remote SQL Injection Vulnerability | | |---------------------Hussin X----------------------| | | Author: Hussin X | | Home : WwW.Hussin-X.CoM | www.tryag.cc/cc | | email: darkangelg85atYahooDoTcom | | | | | | | script :...

Web Directory Script 1.5.3 - site SQL Injection

Web Directory Script 1.5.3 - site SQL Injection || | | Web directory script v1.5.3 site Remote SQL Injection Vulnerability | | |---------------------Hussin X----------------------| | | Author: Hussin X | | Home : WwW.Hussin-X.CoM | www.tryag.cc/cc | | email: darkangelg85atYahooDoTcom | | | | | | ...

Web Directory Script 1.5.3 (site) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================= Web Directory Script 1.5.3 site SQL Injection Vulnerability ============================================================= || | | Web directory script v1.5.3 site Remote SQL...

Web Directory Script 1.5.3 - 'site' SQL Injection

|| | | Web directory script v1.5.3 site Remote SQL Injection Vulnerability | | |---------------------Hussin X----------------------| | | Author: Hussin X | | Home : WwW.Hussin-X.CoM | www.tryag.cc/cc | | email: darkangelg85atYahooDoTcom | | | | | | | script :...

webdirscript-sql.txt

|| | | Web directory script v1.5.3 site Remote SQL Injection Vulnerability | | |---------------------Hussin X----------------------| | | Author: Hussin X | | Home : WwW.Hussin-X.CoM | www.tryag.cc/cc | | email: darkangelg85atYahooDoTcom | | | | | | | script :...

Sql injection

SQL injection vulnerability in listingview.php in Web Directory Script 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the name parameter...

CVE-2008-3787

SQL injection vulnerability in listingview.php in Web Directory Script 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the name parameter...

CVE-2008-3787

SQL injection vulnerability in listingview.php in Web Directory Script 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the name parameter...

CVE-2008-3787

Summary: CVE-2008-3787 affects Web Directory Script ≤ 2.0. It exposes a vulnerability in listing_view.php where the name parameter can be used for SQL injection, allowing remote attackers to execute arbitrary SQL commands. The CVSS v2 base score is 7.5 (HIGH) with network access, low attack compl...

wds-sql.txt

Web Directory Script = 2.0 SQL Injection Vulnerability Author: !DoktOR! Contact: coder5attopmail.kz Home Page: www.antichat.ru Date found: 23.08.08 Product: Web Directory Script Version: 2.0 Download script: http://rapidshare.com/files/121448809/W3bDirScr2-nullscript.net.rar Password:...

Web Directory Script <= 2.0 (name) SQL Injection Vulnerability

No description provided by source. Web Directory Script = 2.0 SQL Injection Vulnerability Author: !DoktOR! Contact: coder5attopmail.kz Home Page: www.antichat.ru Date found: 23.08.08 Product: Web Directory Script Version: 2.0 Download script:...