53 matches found
RunCMS Module section - artid SQL Injection
RunCMS Module section - artid SQL Injection Cr@zyKing [email protected] / hackshow.us Grtz : CrackersChild - str0ke - 3php - AleminKrali - Eno7 - DreamTurk - TheBekir - Mhzr91 Runcms Module Section artid Remote Sql İnj. Vuln. Example : - modules/sections/index.php?op=viewarticle&artid=Sql ...
CVE-2008-1053
Multiple SQL injection vulnerabilities in the KoseYazilari module for PHP-Nuke allow remote attackers to execute arbitrary SQL commands via the artid parameter in a 1 viewarticle or 2 printpage action to modules.php...
PHP-Nuke Module Kose_Yazilari (artid) SQL Injection Vulnerability
Exploit for unknown platform in category web applications ================================================================= PHP-Nuke Module KoseYazilari artid SQL Injection Vulnerability ================================================================= CoRPITX Turkey PHP-Nuke KoseYazilari SQL...
PHP-Nuke Docum模块'artid' SQL注入漏洞
BUGTRAQ ID: 27912 CNCAN ID:CNCAN-2008022208 PHP-Nuke Docum模块是一款基于PHP的WEB应用程序。 PHP-Nuke Docum模块不正确过滤用户提交的URI数据,远程攻击者可以利用漏洞进行SQL注入攻击,可获得敏感信息或操作数据库。 问题是由于脚本对用户提交的'artid'参数处理缺少充分过滤,提交恶意SQL查询作为参数数据,可更改原来的SQL逻辑,获得敏感信息或操作数据库。 PHP-Nuke Module Docum 目前没有详细解决方案提供: http://www.phpnuke.org/...
CVE-2008-0906
SQL injection vulnerability in the Docum module in PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the artid parameter in a viewarticle operation...
PHP-Nuke Module Docum - 'artid' SQL Injection
php-nuke modules Docum remote sql inj Found:DamaR [email protected] Hack Bitti ama Dönmek Yakın Since 2000 -------------------------------------------------------------------------------...
PHP-Nuke Module Sections (artid) Remote SQL Injection Vulnerability
Exploit for unknown platform in category web applications =================================================================== PHP-Nuke Module Sections artid Remote SQL Injection Vulnerability =================================================================== PHP-Nuke Module Sections SQL...
PHP-Nuke Module Sections - artid SQL Injection
PHP-Nuke Module Sections - artid SQL Injection PHP-Nuke Module Sections SQL Injectionartid AUTHOR : S@BUN HOME 1 : http://www.milw0rm.com/author/1334 MAİL : [email protected] DORK 1 : allinurl: "name Sections op viewarticle artid" example...
PHP-Nuke Module Sections - 'artid' SQL Injection
PHP-Nuke Module Sections SQL Injectionartid AUTHOR : S@BUN HOME 1 : http://www.milw0rm.com/author/1334 MAİL : [email protected] DORK 1 : allinurl: "name Sections op viewarticle artid" example www.xxX/xxxxSections&op=viewarticle&artid=exploit EXPLOIT :...
WMNewsInclude.txt
Advisory: WMNews Remote File Include Vulnerability Release Date: 2006/07/26 Author: uNfz Critical Level: High Contact: [email protected] Vendor: Warta Mikael -------------------- -------------------- Searching / Dork: allinurl: .php?Artid= allinurl: .php?ArtCat= allinurl: wmprint.php allinurl:...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in DeltaScripts Pro Publish allow remote attackers to inject arbitrary web script or HTML via the 1 artid parameter in art.php and the 2 catname parameter in cat.php...
CVE-2006-2821
Multiple cross-site scripting XSS vulnerabilities in DeltaScripts Pro Publish allow remote attackers to inject arbitrary web script or HTML via the 1 artid parameter in art.php and the 2 catname parameter in cat.php...
CVE-2006-1233
Multiple cross-site scripting XSS vulnerabilities in WMNews allow remote attackers to inject arbitrary web script or HTML via the 1 ArtCat parameter to wmview.php, 2 ctrrowcol parameter to footer.php, or 3 ArtID parameter to wmcomments.php...