PHP Address Book Multiple SQL Injection Vulnerabilities

PHP Address Book is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PHP Address Book Version Detection

Detection of PHP Address Book. The script sends a connection request to the server and attempts to extract the version number from the reply. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

Sql injection

Multiple SQL injection vulnerabilities in PHP Address Book 4.0.x allow remote attackers to execute arbitrary SQL commands via the 1 id parameter to delete.php or 2 alphabet parameter to index.php. NOTE: the edit.php and view.php vectors are already covered by CVE-2008-2565...

CVE-2009-2608

Multiple SQL injection vulnerabilities in PHP Address Book 4.0.x allow remote attackers to execute arbitrary SQL commands via the 1 id parameter to delete.php or 2 alphabet parameter to index.php. NOTE: the edit.php and view.php vectors are already covered by CVE-2008-2565...

CVE-2009-2608

Multiple SQL injection vulnerabilities in PHP Address Book 4.0.x allow remote attackers to execute arbitrary SQL commands via the 1 id parameter to delete.php or 2 alphabet parameter to index.php. NOTE: the edit.php and view.php vectors are already covered by CVE-2008-2565...

CVE-2009-2608

CVE-2009-2608 affects PHP Address Book 4.0.x, with SQL injection vulnerabilities exploitable via (1) the id parameter to delete.php and (2) the alphabet parameter to index.php. The root cause is improper input handling in these endpoints, enabling arbitrary SQL execution by an attacker. The descr...

CVE-2009-2608: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in PHP Address Book 4.0.x allow remote attackers to execute arbitrary SQL commands via the 1 id parameter to delete.php or 2 alphabet parameter to index.php. NOTE: the edit.php and view.php vectors are already covered by CVE-2008-2565...

Nwahy Dir 2.1 Arbitrary Change Admin Password Exploit

No description provided by source. ? / Nwahy Dir v2.1 Change Admin Password Exploit - Author : rEcruit - Mail : [email protected] - Download : http://nwahy.com/showdownload-3105.html - Vuln in ./admincp/admininfo.php code $u = addslashes$COOKIE'username'; $query = mysqlquery "SELECT FROM dliladmi...

CVE-2009-2337: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in includes/module/book/index.inc.php in w3b|cms Gaestebuch Guestbook Module 3.0.0, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the spamid parameter...

MULTIPLE SQL INJECTION VULNERABILITIES --PHP-AddressBook v-4.0.x-->

-------------------------------------------------------------------- MULTIPLE SQL INJECTION VULNERABILITIES --PHP-AddressBook v-4.0.X-- -------------------------------------------------------------------- CMS INFORMATION: --WEB: http://sourceforge.net/projects/php-addressbook/ --DOWNLOAD:...

PHP-Address Book 4.0.x Multiple SQL Injection Vulnerabilities

No description provided by source. || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ VIVA SPAIN!... GANAREMOS EL MUNDIAL!...o.O PROUD TO BE SPANISH! -------------------------------------...

PHP-Address Book 4.0.x - Multiple SQL Injections

PHP-Address Book 4.0.x - Multiple SQL Injections || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ VIVA SPAIN!... GANAREMOS EL MUNDIAL!...o.O PROUD TO BE SPANISH!...

PHP Address Book 4.0.x SQL Injection

-------------------------------------------------------------------- MULTIPLE SQL INJECTION VULNERABILITIES --PHP-AddressBook v-4.0.X-- -------------------------------------------------------------------- CMS INFORMATION: --WEB: http://sourceforge.net/projects/php-addressbook/ --DOWNLOAD:...

Sql injection

SQL injection vulnerability in products.php in Virtue Book Store allows remote attackers to execute arbitrary SQL commands via the cid parameter...

CVE-2009-2017

SQL injection vulnerability in products.php in Virtue Book Store allows remote attackers to execute arbitrary SQL commands via the cid parameter...

CVE-2009-2017

Vulnerability CVE-2009-2017 affects Virtue Book Store's products.php, where the cid parameter is vulnerable to SQL injection, permitting remote execution of arbitrary SQL commands. Connected sources confirm the vulnerability, with a CVSS-like score of 7.5 (HIGH) and network exposure with low atta...

CVE-2009-2017

SQL injection vulnerability in products.php in Virtue Book Store allows remote attackers to execute arbitrary SQL commands via the cid parameter...

CVE-2009-2017: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in products.php in Virtue Book Store allows remote attackers to execute arbitrary SQL commands via the cid parameter...

Virtue Book Store (cid) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ========================================================== Virtue Book Store cid Remote SQL Injection Vulnerability ========================================================== CMS : Online Book Store WEB : http://www.virtuenetz.com/book/...

Virtue Book Store - cid SQL Injection

Virtue Book Store - cid SQL Injection CMS : Online Book Store WEB : http://www.virtuenetz.com/book/ Archivo : products.php Variable Tipo : GET valor : cid Tipo : SQL Injection URL : http://www.site.com/products.php?cid=SQLI Exploit : Ejemplo : undersec@Undersec:/Escritorio$ php exploit.php...