Power System Of Article Management 3.0 - File Disclosure / Cross-Site Scripting

--------------------------------------------------------- Portal Name: Power System Of Article Management Version : 3.0 Author : PouyaServer , [email protected] Vulnerability : DD/XSS --------------------------------------------------------- DD:...

Sql injection

SQL injection vulnerability in view.php in AvailScript Article Script allows remote attackers to execute arbitrary SQL commands via the v parameter...

CVE-2008-6037

SQL injection vulnerability in view.php in AvailScript Article Script allows remote attackers to execute arbitrary SQL commands via the v parameter...

CVE-2008-6037

CVE-2008-6037 describes an SQL injection in the AvailScript Article Script, specifically in the file/view component view.php, exploitable via the vulnerable parameter v. The root cause is insufficient input validation/sanitization allowing an attacker to inject SQL commands, enabling an attacker ...

CVE-2008-6037

SQL injection vulnerability in view.php in AvailScript Article Script allows remote attackers to execute arbitrary SQL commands via the v parameter...

CVE-2008-6037: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in view.php in AvailScript Article Script allows remote attackers to execute arbitrary SQL commands via the v parameter...

Flax Article Manager 1.1 Upload Vulnerability

Flax Article Manager 1.1 Remote File Upload Vulnerability ---------------------------------------------------------- Discovered By: S.W.A.T. [email protected] Home: www.batlagh.com Script Page: http://www.clixint.com/products/articles Dork: Copyright 2006 © Flax Article Manager v1.1...

Sql injection

SQL injection vulnerability in category.php in Flax Article Manager 1.1 allows remote attackers to execute arbitrary SQL commands via the catid parameter...

CVE-2009-0284

SQL injection vulnerability in category.php in Flax Article Manager 1.1 allows remote attackers to execute arbitrary SQL commands via the catid parameter...

CVE-2009-0284

SQL injection vulnerability in category.php in Flax Article Manager 1.1 allows remote attackers to execute arbitrary SQL commands via the catid parameter...

CVE-2009-0284

CVE-2009-0284 affects Flax Article Manager 1.1, with an SQL injection in category.php via the cat_id parameter that allows remote attackers to execute arbitrary SQL commands. The NVD entry lists a CVSSv2 base score of 7.5 (High). Exploitation details are not provided in the connected documents; e...

CVE-2009-0284: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in category.php in Flax Article Manager 1.1 allows remote attackers to execute arbitrary SQL commands via the catid parameter...

Flax Article Manager 1.1 Remote PHP Script Upload Vulnerability

Exploit for unknown platform in category web applications =============================================================== Flax Article Manager 1.1 Remote PHP Script Upload Vulnerability =============================================================== Flax Article Manager 1.1 Remote File Upload...

Flax Article Manager 1.1 Remote PHP Script Upload Vulnerability

No description provided by source. Flax Article Manager 1.1 Remote File Upload Vulnerability ---------------------------------------------------------- Discovered By: S.W.A.T. [email protected] Home: www.batlagh.com Script Page: http://www.clixint.com/products/articles Dork: Copyright 2006 © Fl...

Flax Article Manager 1.1 - Remote PHP Script Upload

Flax Article Manager 1.1 Remote File Upload Vulnerability ---------------------------------------------------------- Discovered By: S.W.A.T. [email protected] Home: www.batlagh.com Script Page: http://www.clixint.com/products/articles Dork: Copyright 2006 © Flax Article Manager v1.1...

Flax Article Manager 1.1 (cat_id) SQL Injection Vulnerability

No description provided by source. ------------------------------------------------------------------------- -- JIKO FroM No-exploit.Com --- ------------------------------------------------------------------------- Author : jiko email : [email protected] Home : www.no-exploit.Com Script :...

Flax Article Manager 1.1 - cat_id SQL Injection

Flax Article Manager 1.1 - catid SQL Injection ------------------------------------------------------------------------- -- JIKO FroM No-exploit.Com --- ------------------------------------------------------------------------- Author : jiko email : [email protected] Home : www.no-exploit.Com...

Flax Article Manager 1.1 (cat_id) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================= Flax Article Manager 1.1 catid SQL Injection Vulnerability ============================================================= Author : jiko Script :...

Flax Article Manager 1.1 - 'cat_id' SQL Injection

------------------------------------------------------------------------- -- JIKO FroM No-exploit.Com --- ------------------------------------------------------------------------- Author : jiko email : [email protected] Home : www.no-exploit.Com Script : http://www.clixint.com/products/articles...

CSDN Blog 文章评论处 XSS Bug

CSDN Blog 文章评论处由于对“主 页”信息过滤不严导致跨站漏洞。 这个漏洞比较容易利用，危害相对其它XSS要大些，攻击者可以在任何人的CSDN Blog上发恶意代码的评论，可以进行盗取Cookie，挂马BS之等行为。 测试链接:http://blog.csdn.net/zerosoul/archive/2009/01/10/3743912.aspx http://hi.csdn.net 等待官方修补 在文章评论处的“主 页”一栏中输入以下代码 dork1: http://zerosoul"/ascriptalert"zerosoul"/scripta" dork2:...