Sql injection

SQL injection vulnerability in index.php in Demo4 CMS 01 Beta allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-2983

SQL injection vulnerability in index.php in Demo4 CMS 01 Beta allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-2983

SQL injection vulnerability in index.php in Demo4 CMS 01 Beta allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-2983

The CVE-2008-2983 entry describes an SQL injection in Demo4 CMS 01 Beta, targeting index.php via the id parameter to allow remote execution of arbitrary SQL commands. The root cause is unsanitized input leading to SQL injection, with impact described as partial confidentiality, integrity, and ava...

Sql injection

SQL injection vulnerability in clanek.php in OwnRS Beta 3 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-2856

SQL injection vulnerability in clanek.php in OwnRS Beta 3 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-2855

Cross-site scripting XSS vulnerability in clanek.php in OwnRS Beta 3 allows remote attackers to inject arbitrary web script or HTML via the id parameter...

CVE-2008-2855

Cross-site scripting XSS vulnerability in clanek.php in OwnRS Beta 3 allows remote attackers to inject arbitrary web script or HTML via the id parameter...

CVE-2008-2856

CVE-2008-2856 affects OwnRS Beta 3 through clanek.php, where the id parameter enables SQL injection. The vulnerability allows remote execution of arbitrary SQL commands (impact: partial confidentiality/integrity/availability per CVSS), with a network attack vector and low complexity. The base sco...

CVE-2008-2856

SQL injection vulnerability in clanek.php in OwnRS Beta 3 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-2855

Affected software: OwnRS Beta 3. Component: clanek.php. Vulnerability: Cross-site scripting (XSS) via the id parameter. Root cause: lack of proper sanitization/output of user-supplied id leading to injection of arbitrary script/HTML. Impact: remote attacker can inject scripts into the victim’s br...

ShareCMS 0.1 Multiple Remote SQL Injection Vulnerabilities

No description provided by source. ============================================================== ShareCMS 0.1 Multiple Remote SQL Injection Vulnerabilities ============================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH...

ShareCMS 0.1 - Multiple SQL Injections

============================================================== ShareCMS 0.1 Multiple Remote SQL Injection Vulnerabilities ============================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team...

igsuite-sql.txt

!/usr/bin/perl 05/18/2008 - IGSuite 3.2.4 Blind SQL Injection - ksOSe 05/21/2008 - Vendor notified 05/23/2008 - A patch was pushed via the igsuited daemonnot enabled by default Fix: run igsuited --update-igsuite or upgrade to 3.2.5-beta. Tested on IGSuite 3.2.4 on linux with MySQL, needs ncin pat...

IGSuite 3.2.4 - Reverse Shell / Blind SQL Injection

!/usr/bin/perl 05/18/2008 - IGSuite 3.2.4 Blind SQL Injection - ksOSe 05/21/2008 - Vendor notified 05/23/2008 - A patch was pushed via the igsuited daemonnot enabled by default Fix: run igsuited --update-igsuite or upgrade to 3.2.5-beta. Tested on IGSuite 3.2.4 on linux with MySQL, needs ncin pat...

Lotus Expeditor cai URI handler command injection

Added: 06/20/2008 CVE: CVE-2008-1965 BID: 28926 OSVDB: 44868 Background Lotus Expeditor is a desktop integration framework used by Lotus products including Lotus Symphony. Problem Lotus Expeditor registers a handler for cai: URIs which passes arbitrary arguments to rcplauncher.exe. This allows...

gravity-sqlxss.txt

==================================================================== Gravity Board X 2.0 Beta SQL/XSS Multiple Remote Vulnerabilities ==================================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking...

Gravity Board X 2.0 Beta - SQL Injection / Cross-Site Scripting

==================================================================== Gravity Board X 2.0 Beta SQL/XSS Multiple Remote Vulnerabilities ==================================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in DesktopOnNet 3 Beta allow remote attackers to execute arbitrary PHP code via a URL in the apppath parameter to 1 don3requiem.don3app/don3requiem.php and 2 frontpage.don3app/frontpage.php...

CVE-2008-2649

Multiple PHP remote file inclusion vulnerabilities in DesktopOnNet 3 Beta allow remote attackers to execute arbitrary PHP code via a URL in the apppath parameter to 1 don3requiem.don3app/don3requiem.php and 2 frontpage.don3app/frontpage.php...