205 matches found
Synology DSM 4.3-3827 (article.php) - Blind SQL Injection
No description provided by source. Title: Synology DSM Blind SQL Injection Version affected: = 4.3-3827 Vendor: Synology Discovered by: Michael Wisniewski Status: Patched The file /photo/include/blog/article.php contains a Blind SQL Injection Vulnerability in the 'value' variable in the URL. The...
DB[CMS] (article.php) SQL Injection Vulnerability
No description provided by source. DBCMS article.php SQL Injection Vulnerability ------------------------------------------------------------------------------------------- Author: blackraptor Mail: [email protected] Script Home: http://www.debliteck.com/how.php Dork: Designed and...
XOOPS 2.0.14 Article Module - 'article.php' SQL Injection Vulnerability
No description provided by source. !/usr/bin/env python coding: utf-8 from pocsuite.net import req from pocsuite.poc import POCBase, Output from pocsuite.utils import register import re class TestPOCPOCBase: vulID = '84999' ssvid version = '1.0' author = 'kikay' vulDate = '2008-05-06' createDate ...
leaftec cms multiple vulnerabilities
No description provided by source. Exploit Title: leaftec cms multiple vulnerabilities Date: 21.03.2010 Author: Valentin Höbel Version: Tested on: Debian etch CVE : Code : :: General information :: leaftec cms multiple vulnerabilities discovered :: by Valentin Höbel :: [email protected] ::...
Miraserver 1.0 RC4 article.php cat Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/15960/info Miraserver is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful...
Synology DSM 4.3-3827 - 'article.php' Blind SQL Injection
Title: Synology DSM Blind SQL Injection Version affected: :80/ Cookie: PHPSESSID=; visitday= Host: Connection: Keep-alive Accept-Encoding: gzip,deflate User-Agent: Mozilla/5.0 Windows NT 6.1; WOW64 AppleWebKit/537.36 KHTML, like Gecko Chrome/28.0.1500.63 Safari/537.36 Accept: /...
phpMBBcms 004 /modul/article/article.php SQL注入漏洞
No description provided by source...
CVE-2013-5099
Cross-site scripting XSS vulnerability in article.php in Anchor CMS 0.9.1, when comments are enabled, allows remote attackers to inject arbitrary web script or HTML via the Name field. NOTE: some sources have reported that comments.php is vulnerable, but certain functions from comments.php are us...
CVE-2013-5099: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in article.php in Anchor CMS 0.9.1, when comments are enabled, allows remote attackers to inject arbitrary web script or HTML via the Name field. NOTE: some sources have reported that comments.php is vulnerable, but certain functions from comments.php are us...
Sql injection
Multiple SQL injection vulnerabilities in SenseSites CommonSense CMS allow remote attackers to execute arbitrary SQL commands via the id parameter to 1 special.php, 2 article.php, or 3 cat2.php...
CVE-2012-5342: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in SenseSites CommonSense CMS allow remote attackers to execute arbitrary SQL commands via the id parameter to 1 special.php, 2 article.php, or 3 cat2.php...
Design/Logic Flaw
article.php in Virtual War aka VWar 1.6.1 R2 allows remote attackers to cause a denial of service memory consumption via a large integer in the ratearticleselect parameter...
CVE-2010-5063
The CVE-2010-5063 issue affects Virtual War (aka VWar) 1.6.1 R2: a SQL injection in article.php exploitable via the ratearticleselect parameter may allow remote attackers to execute arbitrary SQL commands. This is a server-side input handling flaw in the affected product/component, enabling unrel...
CVE-2010-5279
CVE-2010-5279 affects Virtual War (aka VWar) 1.6.1 R2. The issue is a remote DoS due to memory consumption triggered by a large integer in the ratearticleselect parameter of article.php. Connected documents confirm the impact as described; no exploit code or broader exploitability details are pro...
CVE-2010-5063
SQL injection vulnerability in article.php in Virtual War aka VWar 1.6.1 R2 allows remote attackers to execute arbitrary SQL commands via the ratearticleselect parameter...
CVE-2010-5063: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in article.php in Virtual War aka VWar 1.6.1 R2 allows remote attackers to execute arbitrary SQL commands via the ratearticleselect parameter...
CVE-2010-5279: Undefined Security Weakness
article.php in Virtual War aka VWar 1.6.1 R2 allows remote attackers to cause a denial of service memory consumption via a large integer in the ratearticleselect parameter...
Vargonen Forums SQL Injection
Exploit Title: Vargonen Forums SQL Injection Vulnerability Date: 01/03/2012 Author: 3spi0n Software Website: http://vargonen.com/ Tested On: BackTrack 5 - Win7 Ultimate Platform: Php $ Vulnerable File: Article.php $ Demo ; www.yuzuklerinefendisi.com/article.php?sid=2120' MySQLi Dar bi Koridor...
Debliteck Ltd SQL Injection
=============================================================== Exploit Title : Debliteck Ltd SQL inj: vulnerable Google Dork : "Designed and Developed by Debliteck Ltd" Date : 17-11-2011 Author : nGa Sa Lu GaNgst3r Service Provider : http://www.debliteck.com/main.php Tested on : Vista Platform :...