Messages Library 2.0 (cat.php CatID) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================ Messages Library 2.0 cat.php CatID SQL Injection Vulnerability ================================================================...

Messages Library 2.0 SQL Injection

+===================================================================================+ ./SEC-R1Z / / / / /\ \ |/ / \ \ / / / / | | / | | / / \ / / / / | || / | | / / \ \ \ \2009 | \ | | / / / \ /\ / ||\ \ ||/ \ +===================================================================================+ |...

Messages Library 2.0 - cat.php?CatID SQL Injection

Messages Library 2.0 - cat.php?CatID SQL Injection +===================================================================================+ ./SEC-R1Z / / / / /\ \ |/ / \ \ / / / / | | / | | / / \ / / / / | || / | | / / \ \ \ \2009 | \ | | / / / \ /\ / ||\ \ ||/ ...

CVE-2008-5580: Improper Input Validation

mini-pub.php/front-end/cat.php in mini-pub 0.3 allows remote attackers to execute arbitrary commands via shell metacharacters in the sFileName argument...

CVE-2008-5579: Improper Limitation of a Pathname to a Restricted Directory

Absolute path traversal vulnerability in mini-pub.php/front-end/cat.php in mini-pub 0.3 allows remote attackers to read arbitrary files via a full pathname in the sFileName parameter...

CVE-2008-4344

SQL injection vulnerability in cat.php in 6rbScript allows remote attackers to execute arbitrary SQL commands via the CatID parameter...

Sql injection

SQL injection vulnerability in cat.php in 6rbScript allows remote attackers to execute arbitrary SQL commands via the CatID parameter...

CVE-2008-4344

The CVE-2008-4344 entry describes a SQL injection vulnerability in the file cat.php of 6rbScript , exploitable via the CatID parameter to allow remote attackers to execute arbitrary SQL commands. The incident is supported by multiple sources (e.g., NVD and CVE records) with a CVSS v2 base score o...

CVE-2008-4344

SQL injection vulnerability in cat.php in 6rbScript allows remote attackers to execute arbitrary SQL commands via the CatID parameter...

CVE-2008-4344: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in cat.php in 6rbScript allows remote attackers to execute arbitrary SQL commands via the CatID parameter...

6rbScript - cat.php SQL Injection

6rbScript - cat.php SQL Injection source: https://www.securityfocus.com/bid/31329/info 6rbScript is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

6rbScript - 'cat.php' SQL Injection

source: https://www.securityfocus.com/bid/31329/info 6rbScript is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify dat...

6rbscriptcat-sql.txt

$/ $ $ 6rbScript cat.php Remote SQL Injection $ $/ $ -- K -- $ $ Author:\ Kararalshami $ $ Home:\ Google.Com $ $ email:\ KararalshameaTYahood0tcom $ $ $ $/ $ -- K -- $ $ script :\ www.6rbscript.com $ $ Price! :\ 150$ $ $ DorK :\ "Try 2 Find it!" $/ Exploit:\ ------------...

CVE-2008-3186: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Chipmunk Blog Blogger allow remote attackers to inject arbitrary web script or HTML via the membername parameter to 1 members.php, 2 comments.php, 3 photos.php, 4 archive.php, or 5 cat.php. NOTE: the provenance of this information is unknown; t...

Chipmunk Blog - cat.php Cross-Site Scripting

Chipmunk Blog - cat.php Cross-Site Scripting source: https://www.securityfocus.com/bid/29883/info Chipmunk Blog is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script...

CVE-2008-2537

SQL injection vulnerability in cat.php in HispaH Model Search allows remote attackers to execute arbitrary SQL commands via the cat parameter...

CVE-2008-2537: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in cat.php in HispaH Model Search allows remote attackers to execute arbitrary SQL commands via the cat parameter...

CVE-2008-1844

SQL injection vulnerability in cat.php in W2B phpHotResources allows remote attackers to execute arbitrary SQL commands via the kind parameter...

Sql injection

SQL injection vulnerability in cat.php in W2B phpHotResources allows remote attackers to execute arbitrary SQL commands via the kind parameter...

CVE-2008-1844

The CVE-2008-1844 entry concerns a SQL injection vulnerability in W2B phpHotResources, specifically in cat.php where the kind parameter can be exploited to execute arbitrary SQL commands. Affected component/function is cat.php in the PHP-based W2B phpHotResources application; underlying issue is ...