EUVD-2008-3190

Malware in sbrugna...

Avlc Forum (vlc_forum.php id) - Remote SQL Injection Vulnerability

No description provided by source. ==================================================================== Avlc Forum vlcforum.php id Remote SQL Injection Vulnerability ==================================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------...

Sql injection

SQL injection vulnerability in vlcforum.php in Avlc Forum as of 20080715 allows remote attackers to execute arbitrary SQL commands via the id parameter in an affichmessage action...

CVE-2008-3200

SQL injection vulnerability in vlcforum.php in Avlc Forum as of 20080715 allows remote attackers to execute arbitrary SQL commands via the id parameter in an affichmessage action...

CVE-2008-3200

CVE-2008-3200 affects Avlc Forum via SQL injection in the vlc_forum.php script, specifically the affich_message action using the id parameter. Root cause: improper handling of user-supplied id leads to arbitrary SQL execution. Impact: remote attacker could read/modify data and affect other databa...

CVE-2008-3200

SQL injection vulnerability in vlcforum.php in Avlc Forum as of 20080715 allows remote attackers to execute arbitrary SQL commands via the id parameter in an affichmessage action...

CVE-2008-3200: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in vlcforum.php in Avlc Forum as of 20080715 allows remote attackers to execute arbitrary SQL commands via the id parameter in an affichmessage action...

avlc-sql.txt

==================================================================== Avlc Forum vlcforum.php id Remote SQL Injection Vulnerability ==================================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Te...

Avlc Forum 'vlc_forum.php' SQL注入漏洞

BUGTRAQ ID: 30202 CNCAN ID：CNCAN-2008071503 Avlc Forum是一款基于PHP的WEB应用程序。 Avlc Forum不正确处理用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，可能获得敏感信息或操作数据库。 问题由于'vlcforum.php'脚本对用户提交给'id'参数缺少过滤，构建恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息或操作数据库。 Avlc Forum 目前没有解决方案提供： http://www.easy-script.com/scripts-PHP/avlc-forum-2147.html...

Avlc Forum (vlc_forum.php id) Remote SQL Injection Vulnerability

No description provided by source. ==================================================================== Avlc Forum vlcforum.php id Remote SQL Injection Vulnerability ==================================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------...

Avlc Forum (vlc_forum.php id) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================ Avlc Forum vlcforum.php id Remote SQL Injection Vulnerability ================================================================ ,--^----------,--------,-----,-------^--, |...

Avlc Forum - vlc_forum.php SQL Injection

Avlc Forum - vlcforum.php SQL Injection ==================================================================== Avlc Forum vlcforum.php id Remote SQL Injection Vulnerability ==================================================================== ,--^----------,--------,-----,-------^--, | |||||||||...

Avlc Forum - 'vlc_forum.php' SQL Injection

==================================================================== Avlc Forum vlcforum.php id Remote SQL Injection Vulnerability ==================================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Te...