Sql injection

SQL injection vulnerability in activate.php in TutorialCMS aka Photoshop Tutorials 1.02, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the userName parameter...

CVE-2008-0254: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in activate.php in TutorialCMS aka Photoshop Tutorials 1.02, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the userName parameter...

TutorialCMS 1.02 (userName) Remote SQL Injection Vulnerability

No description provided by source. !/usr/bin/env python coding: utf-8 from pocsuite.net import req from pocsuite.poc import POCBase, Output from pocsuite.utils import register import re class TestPOCPOCBase: vulID = 'SSV-7841' vul ID version = '1' author = 'hh' vulDate = '2008-01-12' createDate =...

tutorialcms102-sql.txt

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- TutorialCMS 1.02 Remote SQL Injection Vulnerability -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- bug found by ka0x contact: ka0x01atgmail.com D.O.M TEAM 2008 we are: ka0x, an0de, xarnuz from spain download...

TutorialCMS 1.02 - Username SQL Injection

TutorialCMS 1.02 - Username SQL Injection -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- TutorialCMS 1.02 Remote SQL Injection Vulnerability -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- bug found by ka0x contact: ka0x01atgmail.com D.O.M TEAM 2008 we are: ka0x, an0de, xarnuz from...

CVE-2006-6360

The CVE-2006-6360 vulnerability affects PHP Upload Center 2.0: activate.php accepts a footerpage parameter that can be controlled by an attacker to include a remote PHP file, enabling arbitrary code execution. It is a networked issue with low access complexity and no authentication, leading to po...

CVE-2006-6360

PHP remote file inclusion vulnerability in activate.php in PHP Upload Center 2.0 allows remote attackers to execute arbitrary PHP code via a URL in the footerpage parameter...

CVE-2006-6360: Undefined Security Weakness

PHP remote file inclusion vulnerability in activate.php in PHP Upload Center 2.0 allows remote attackers to execute arbitrary PHP code via a URL in the footerpage parameter...

PHP Upload Center 2.0 (activate.php) File Include Vulnerabilities

Exploit for unknown platform in category web applications ================================================================= PHP Upload Center 2.0 activate.php File Include Vulnerabilities ================================================================= Coding 4 Fun Name = PHP Upload Center v2.0 ...

PHP Upload Center 2.0 - 'activate.php' File Inclusion

Coding 4 Fun Name = PHP Upload Center v2.0 ; Class = Remote/Local File Inclusion ; Download = http://skrypty.webpc.pl/pobierz.php?id=58 ; Found by = GregStar gregstaratc4fdotpl http://c4f.pl ;...

CVE-2006-4749

CVE-2006-4749 describes multiple PHP remote file inclusion vulnerabilities in PHP Advanced Transfer Manager (phpATM) 1.20 and earlier. The flaw allows remote attackers to execute arbitrary PHP code via the include_location parameter in files including activate.php, configure.php, fileop.php, geti...