ACG-PTP 'adid' SQL注入漏洞

BUGTRAQ ID: 31005 CNCAN ID：CNCAN-2008090502 ACG-PTP是一款基于PHP的WEB应用程序。 ACG-PTP不正确处理用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，可能获得敏感信息或操作数据库。 问题由于'index.php'脚本对用户提交给'adid'参数缺少过滤，构建恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息或操作数据库。 DiscountedScripts ACG-PTP 1.0.6 目前没有解决方案提供：...

ACG-PTP 1.0.6 (adid) Remote SQL Injection Vulnerability

No description provided by source. || | | ACG-PTP 1.0.6 adid Remote SQL Injection Vulnerability | | |---------------------Hussin X----------------------| | | Author: Hussin X | | Home : WwW.Hussin-X.CoM | www.tryag.cc/cc | | email: darkangelg85atYahooDoTcom | | | | | | | script...

CVE-2008-3944

SQL injection vulnerability in index.php in ACG-PTP 1.0.6 allows remote attackers to execute arbitrary SQL commands via the adid parameter in an adorder action...

CVE-2008-3944

SQL injection vulnerability in index.php in ACG-PTP 1.0.6 allows remote attackers to execute arbitrary SQL commands via the adid parameter in an adorder action...

ACG-PTP 1.0.6 - 'adid' SQL Injection

|| | | ACG-PTP 1.0.6 adid Remote SQL Injection Vulnerability | | |---------------------Hussin X----------------------| | | Author: Hussin X | | Home : WwW.Hussin-X.CoM | www.tryag.cc/cc | | email: darkangelg85atYahooDoTcom | | | | | | | script...

ACG-PTP 1.0.6 (adid) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ======================================================= ACG-PTP 1.0.6 adid Remote SQL Injection Vulnerability ======================================================= || | | ACG-PTP 1.0.6 adid Remote SQL Injection Vulnerability | |...

CVE-2008-3782

Multiple cross-site scripting XSS vulnerabilities in admin/index.php in ACG-PTP 1.0.6 allow remote authenticated administrators to inject arbitrary web script or HTML via the 1 Category name field under Advertisement Packages, the 2 Reason field under Credit/Debit Users, and the 3 FAQ question an...