EUVD-2008-3590

Malware in sbrugna...

EUVD-2017-7392

Malware in sbrugna...

ZeeBuddy SQL Injection Vulnerability

ZeeBuddy is a social networking system based on PHP and MySQL. A SQL injection vulnerability exists in ZeeBuddy version 2x. A remote attacker can exploit this vulnerability by sending the 'groupid' parameter to the admin/editadgroup.php file to inject SQL commands to access or modify database dat...

ZeeBuddy 2x - groupid SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: ZeeBuddy 2x - SQL Injection Vendor Homepage: http://www.zeescripts.com/ Software Link: http://www.zeebuddy.com/ Demo: http://www.zeebuddy.com/demo/ Version: 2x Category: Webapps Tested on: WiN7x64/KaLiLinuXx64 CVE: CVE-2017-1597...

ZeeBuddy 2x - groupid SQL Injection

ZeeBuddy 2x - groupid SQL Injection Exploit Title: ZeeBuddy 2x - SQL Injection Dork: N/A Date: 30.10.2017 Vendor Homepage: http://www.zeescripts.com/ Software Link: http://www.zeebuddy.com/ Demo: http://www.zeebuddy.com/demo/ Version: 2x Category: Webapps Tested on: WiN7x64/KaLiLinuXx64 CVE:...

ZeeBuddy 2x - 'groupid' SQL Injection

Exploit Title: ZeeBuddy 2x - SQL Injection Dork: N/A Date: 30.10.2017 Vendor Homepage: http://www.zeescripts.com/ Software Link: http://www.zeebuddy.com/ Demo: http://www.zeebuddy.com/demo/ Version: 2x Category: Webapps Tested on: WiN7x64/KaLiLinuXx64 CVE: CVE-2017-15976 Exploit Author: Ihsan...

CVE-2017-15976

ZeeBuddy 2x allows SQL Injection via the admin/editadgroup.php groupid parameter, a different vulnerability than CVE-2008-3604...

CVE-2017-15976

ZeeBuddy 2x allows SQL Injection via the admin/editadgroup.php groupid parameter, a different vulnerability than CVE-2008-3604...

Sql injection

ZeeBuddy 2x allows SQL Injection via the admin/editadgroup.php groupid parameter, a different vulnerability than CVE-2008-3604...

CVE-2017-15976

CVE-2017-15976 affects ZeeBuddy 2x and is a SQL injection vulnerability accessible via the GET parameter groupid in admin/editadgroup.php. The issue arises from unsanitized user input in this parameter, enabling an attacker to inject SQL commands, potentially altering or extracting data. Public r...

CVE-2017-15976

ZeeBuddy 2x allows SQL Injection via the admin/editadgroup.php groupid parameter, a different vulnerability than CVE-2008-3604...

CVE-2017-15976: Improper Neutralization of Special Elements used in an SQL Command

ZeeBuddy 2x allows SQL Injection via the admin/editadgroup.php groupid parameter, a different vulnerability than CVE-2008-3604...

PT-2017-14330

Name of the Vulnerable Software and Affected Versions ZeeBuddy versions 2.x Description The issue allows SQL Injection via the groupid parameter in the "admin/editadgroup.php" API endpoint. Recommendations For ZeeBuddy version 2.x, avoid using the groupid parameter in the affected API endpoint...

ZeeBuddy 2x SQL Injection

Exploit Title: ZeeBuddy 2x - SQL Injection Dork: N/A Date: 29.09.2017 Vendor Homepage: http://www.zeescripts.com/ Software Link: http://www.zeebuddy.com/ Demo: http://www.zeebuddy.com/demo/ Version: 2x Category: Webapps Tested on: WiN7x64/KaLiLinuXx64 CVE: N/A Exploit Author: Ihsan Sencan Author...

zeebuddy-sql.txt

|| | | ZeeBuddy v2.1adid Remote SQL Injection Vulnerability | | |---------------------Hussin X----------------------| | | Author: Hussin X | | Home : www.tryag.cc/cc | | email: darkangelg85atYahooDoTcom | | | | | | | script : http://www.zeescripts.com | || Exploit:...

Sql injection

SQL injection vulnerability in bannerclick.php in ZeeBuddy 2.1 allows remote attackers to execute arbitrary SQL commands via the adid parameter...

CVE-2008-3604

SQL injection vulnerability in bannerclick.php in ZeeBuddy 2.1 allows remote attackers to execute arbitrary SQL commands via the adid parameter...

CVE-2008-3604

The vulnerability is CVE-2008-3604: an SQL injection in ZeeBuddy 2.1’s bannerclick.php, exploitable via the adid parameter. This is a parameter-based injection that could allow remote attackers to execute arbitrary SQL commands. Public metrics indicate a high/critical impact profile (CVSS v2 base...

CVE-2008-3604: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in bannerclick.php in ZeeBuddy 2.1 allows remote attackers to execute arbitrary SQL commands via the adid parameter...

ZeeScripts ZeeBuddy 'bannerclick.php' SQL注入漏洞

BUGTRAQ ID:30628 CNCAN ID：CNCAN-2008081204 ZeeScripts ZeeBuddy是一款基于PHP的WEB应用程序。 ZeeScripts ZeeBuddy不正确处理用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，获得敏感信息或操作数据库。 问题是由于'bannerclick.php'脚本不正确过滤"adid"参数，构建恶意SQL查询作为参数数据，可更改原来的SQL逻辑，可获得敏感信息或操作数据库。 ZeeScripts ZeeBuddy 2.1 目前没有解决方案提供：...