Announcing the Windows Bounty Program

Windows 10 represents the best and newest in our strong commitment to security with world-class mitigations. One of Microsoft’s longstanding strategies toward improving software security involves investing in defensive technologies that make it difficult and costly for attackers to find, exploit...

ACG News 1.0 index.php Multiple SQL Injection Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/25466/info ACG News is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in SQL queries. Exploiting these issues could allow an attacker to...

CVE-2008-4144

SQL injection vulnerability in index.php in ACG-ScriptShop E-Gold Script Shop allows remote attackers to execute arbitrary SQL commands via the cid parameter in a showcat action...

Sql injection

SQL injection vulnerability in index.php in ACG-ScriptShop E-Gold Script Shop allows remote attackers to execute arbitrary SQL commands via the cid parameter in a showcat action...

CVE-2008-4144

SQL injection vulnerability in index.php in ACG-ScriptShop E-Gold Script Shop allows remote attackers to execute arbitrary SQL commands via the cid parameter in a showcat action...

CVE-2008-4144

The CVE-2008-4144 entry documents a SQL injection in the ACG-ScriptShop E-Gold Script Shop, specifically in index.php's showcat action via the cid parameter. The underlying issue is a vulnerable input (cid) used in SQL queries, allowing remote attackers to execute arbitrary SQL commands. The affe...

CVE-2008-4144: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in ACG-ScriptShop E-Gold Script Shop allows remote attackers to execute arbitrary SQL commands via the cid parameter in a showcat action...

ACG-PTP 1.0.6 (adid) Remote SQL Injection Vulnerability

No description provided by source. || | | ACG-PTP 1.0.6 adid Remote SQL Injection Vulnerability | | |---------------------Hussin X----------------------| | | Author: Hussin X | | Home : WwW.Hussin-X.CoM | www.tryag.cc/cc | | email: darkangelg85atYahooDoTcom | | | | | | | script...

ACG-ScriptShop E-Gold Script Shop 'cid' SQL注入漏洞

BUGTRAQ ID: 31015 CNCAN ID：CNCAN-2008090501 ACG-ScriptShop E-Gold Script Shop是一款基于PHP的WEB应用程序。 ACG-ScriptShop E-Gold Script Shop不正确处理用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，可能获得敏感信息或操作数据库。 问题由于脚本对用户提交给'cid'参数缺少过滤，构建恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息或操作数据库。 DiscountedScripts ACG-ScriptShop E-Gold Script Shop...

ACG-ScriptShop (cid) Remote SQL Injection Vulnerability

No description provided by source. || | |ACG-ScriptShop cid Remote SQL Injection Vulnerability | | |---------------------Hussin X----------------------| | | Author: Hussin X | | Home : www.tryag.cc/cc | | email: darkangelg85atYahooDoTcom | | | | | | | script...

ACG-PTP 'adid' SQL注入漏洞

BUGTRAQ ID: 31005 CNCAN ID：CNCAN-2008090502 ACG-PTP是一款基于PHP的WEB应用程序。 ACG-PTP不正确处理用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，可能获得敏感信息或操作数据库。 问题由于'index.php'脚本对用户提交给'adid'参数缺少过滤，构建恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息或操作数据库。 DiscountedScripts ACG-PTP 1.0.6 目前没有解决方案提供：...

CVE-2008-3944

SQL injection vulnerability in index.php in ACG-PTP 1.0.6 allows remote attackers to execute arbitrary SQL commands via the adid parameter in an adorder action...

Sql injection

SQL injection vulnerability in index.php in ACG-PTP 1.0.6 allows remote attackers to execute arbitrary SQL commands via the adid parameter in an adorder action...

CVE-2008-3944

SQL injection vulnerability in index.php in ACG-PTP 1.0.6 allows remote attackers to execute arbitrary SQL commands via the adid parameter in an adorder action...

CVE-2008-3944

The CVE-2008-3944 entry describes a SQL injection vulnerability in the ACG-PTP 1.0.6 application, specifically in index.php where the adid parameter used in an adorder action can be exploited by a remote attacker to execute arbitrary SQL commands. The issue is tied to unsanitized input in adid, e...

CVE-2008-3944: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in ACG-PTP 1.0.6 allows remote attackers to execute arbitrary SQL commands via the adid parameter in an adorder action...

ACG-ScriptShop - cid SQL Injection

ACG-ScriptShop - cid SQL Injection || | |ACG-ScriptShop cid Remote SQL Injection Vulnerability | | |---------------------Hussin X----------------------| | | Author: Hussin X | | Home : www.tryag.cc/cc | | email: darkangelg85atYahooDoTcom | | | | | | | script...

ACG-PTP 1.0.6 (adid) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ======================================================= ACG-PTP 1.0.6 adid Remote SQL Injection Vulnerability ======================================================= || | | ACG-PTP 1.0.6 adid Remote SQL Injection Vulnerability | |...

ACG-PTP 1.0.6 - 'adid' SQL Injection

|| | | ACG-PTP 1.0.6 adid Remote SQL Injection Vulnerability | | |---------------------Hussin X----------------------| | | Author: Hussin X | | Home : WwW.Hussin-X.CoM | www.tryag.cc/cc | | email: darkangelg85atYahooDoTcom | | | | | | | script...

ACG-ScriptShop - 'cid' SQL Injection

|| | |ACG-ScriptShop cid Remote SQL Injection Vulnerability | | |---------------------Hussin X----------------------| | | Author: Hussin X | | Home : www.tryag.cc/cc | | email: darkangelg85atYahooDoTcom | | | | | | | script :http://discountedscripts.com/productinfo.php?productsid=67 | | DorK :...