Tipask control/answer.php content参数 SQL注入

No description provided by source...

tipask注入漏洞

简要描述： sql注入漏洞（2次注入） 详细说明： 官方最新源码测试 在control中answer.php中 追问模块---追问 / function onappend $this-load"message"; $qid = intval$this-get2 ? $this-get2 : intval$this-post'qid'; $aid = intval$this-get3 ? $this-get3 : intval$this-post'aid'; $question = $ENV'question'-get$qid; $answer = $ENV'answer'-get$aid...

PT-2012-5269

Name of the Vulnerable Software and Affected Versions TCExam versions prior to 11.3.008 Description The issue allows remote authenticated users with level 5 or greater permissions to execute arbitrary SQL commands. This can be achieved via the subject module id parameter to 1 "tce edit answer.php...

PT-2012-5270

Name of the Vulnerable Software and Affected Versions TCExam versions prior to 11.3.008 Description A cross-site scripting XSS issue exists, allowing remote authenticated users with level 5 or greater permissions to inject arbitrary web script or HTML via the question subject id parameter in the...

FaqRing 3.0 Cross Site Scripting

/ | | \ \ / / | | \ \ / / | |\ \ /\ / / | | | | | | \ V /| | | \ V V / | | || | || / ||| // ,|, | |/ | | | |/ / | ' \ | | / | | | | | | | |||,|| || || FaqRing 3.0 Remote XSS Vulnerabilities Discovered By : Moudi Contact : Download : http://faqsystems.com/index.shtml Greetings : Mizoz, Zuka,...

CVE-2008-5267

An SQL injection vulnerability in Experts 1.0.0 (component: answer.php) allows remote attackers to execute arbitrary SQL via the question_id parameter when magic_quotes_gpc is disabled. Root cause: input not properly sanitized. Impact: partial confidentiality, integrity, and availability per CVSS...

CVE-2008-5267: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in answer.php in Experts 1.0.0, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the questionid parameter...

experts-sql.txt

========================================================= Experts answer.php Remote SQL Injection Vulnerability ========================================================= ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team...

CVE-2005-3882: Undefined Security Weakness

SQL injection vulnerability in answer.php in FAQSystems FAQRing Knowledge Base Software 3.0 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2005-0475: Undefined Security Weakness

SQL injection vulnerability in paFAQ Beta4, and possibly other versions, allows remote attackers to execute arbitrary SQL code via the 1 offset, 2 limit, 3 order, or 4 orderby parameter to question.php, 5 offset parameter to answer.php, 6 searchitem parameter to search.php, 7 catid, 8 cid, or 9 i...