Wiki clone products vulnerable to denial of service attacks

Overview Wiki clones allow a user via a web browser to edit documents on the web server. Some products of Wiki clones contain a vulnerability which consumes large amounts of CPU and memory resources when handling a particular request. Impact A remote attacker could execute a DoS denial of service...

Sql injection

SQL injection vulnerability in groupposts.php in vShare YouTube Clone 2.6 allows remote attackers to execute arbitrary SQL commands via the tid parameter...

CVE-2008-2223

SQL injection vulnerability in groupposts.php in vShare YouTube Clone 2.6 allows remote attackers to execute arbitrary SQL commands via the tid parameter...

CVE-2008-2223

SQL injection vulnerability in groupposts.php in vShare YouTube Clone 2.6 allows remote attackers to execute arbitrary SQL commands via the tid parameter...

CVE-2008-2223

CVE-2008-2223 describes an SQL injection in group_posts.php of the vShare YouTube Clone 2.6, exploitable via the tid parameter to execute arbitrary SQL. The vulnerability is confirmed in multiple sources (NVD/NVD-entry) with a CVSS v2 base score of 7.5 (HIGH) and network attack vector with low co...

vShare YouTube Clone脚本group_posts.php文件SQL注入漏洞

BUGTRAQ ID: 29114 vShare YouTube clone是用于在网站上共享视频的PHP脚本。 vShare YouTube clone的groupposts.php文件中没有正确地过滤对tid参数的输入便在SQL查询中使用，这允许远程攻击者通过提交恶意查询请求执行SQL注入攻击。 BuyScripts vShare YouTube Clone 2.6 BuyScripts ---------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://forums.buyscripts.in/viewtopic.php?f=7&t=3389...

vShare YouTube Clone 2.6 - tid SQL Injection

vShare YouTube Clone 2.6 - tid SQL Injection !/usr/bin/perl Coded by: Saime vShare Youtube Clone v2.6 groupposts.php tid Remote SQL Injection Author: Saime URL: http://www.buyscripts.in Price: $10.00 Date: 8/05/2008 Greetz:...

vShare Youtube Clone 2.6 (tid) Remote SQL Injection Vulnerability

No description provided by source. !/usr/bin/perl Coded by: Saime vShare Youtube Clone v2.6 groupposts.php tid Remote SQL Injection Author: Saime URL: http://www.buyscripts.in Price: $10.00 Date: 8/05/2008 Greetz:...

vShare YouTube Clone 2.6 - 'tid' SQL Injection

!/usr/bin/perl Coded by: Saime vShare Youtube Clone v2.6 groupposts.php tid Remote SQL Injection Author: Saime URL: http://www.buyscripts.in Price: $10.00 Date: 8/05/2008 Greetz: BaKo,DrWh4x,optiplex,xprog,cam-man-dan,Tulle,t0pP8uZz,Inspiratio,Novalok,illuz1oN,Untamed and everyone else I forgot!...

vShare Youtube Clone 2.6 (tid) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================= vShare Youtube Clone 2.6 tid Remote SQL Injection Vulnerability ================================================================= !/usr/bin/perl Coded by: Saime vShare Youtu...

YouTube Clone Script (spages.php) Remote Code Execution Exploit

No description provided by source. !/usr/bin/perl inphex /siteadmin/spages.php include"../include/config.php"; include"../include/function.php"; if$REQUEST'update' $filepath = $config'BASEDIR'."/templates/".$REQUEST'page'; iffileexists$filepath $handle =...

youtubeclone-exec.txt

!/usr/bin/perl inphex /siteadmin/spages.php include"../include/config.php"; include"../include/function.php"; if$REQUEST'update' $filepath = $config'BASEDIR'."/templates/".$REQUEST'page'; iffileexists$filepath $handle = fopen$config'BASEDIR'."/templates/".$REQUEST'page', "w";...

YouTube Clone Script - spages.php Remote Code Execution

YouTube Clone Script - spages.php Remote Code Execution !/usr/bin/perl inphex /siteadmin/spages.php include"../include/config.php"; include"../include/function.php"; if$REQUEST'update' $filepath = $config'BASEDIR'."/templates/".$REQUEST'page'; iffileexists$filepath $handle =...

YouTube Clone Script (spages.php) Remote Code Execution Exploit

Exploit for unknown platform in category web applications =============================================================== YouTube Clone Script spages.php Remote Code Execution Exploit =============================================================== !/usr/bin/perl inphex /siteadmin/spages.php...

YouTube Clone Script - 'spages.php' Remote Code Execution

!/usr/bin/perl inphex /siteadmin/spages.php include"../include/config.php"; include"../include/function.php"; if$REQUEST'update' $filepath = $config'BASEDIR'."/templates/".$REQUEST'page'; iffileexists$filepath $handle = fopen$config'BASEDIR'."/templates/".$REQUEST'page', "w";...

CVE-2008-1731

Technical details about CVE-2008-1731 are not publicly provided in the supplied documents. Monitor for updates from related advisories, vendors, or CVE records.

SA-2008-025 - Simple access - Access bypass

The Simple Access module is a node access module that allows administrators to make some nodes private and/or editable by certain user roles. The module contains a flaw that results in the privacy information for a node being lost under certain conditions. These conditions are usually triggered v...

[SECURITY] [DSA 1514-1] New moin packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1514-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff March 9, 2008 http://www.debian.org/security/faq -...

DSA-1514-1 moin

Bulletin has no description...

CVE-2008-0687

Cross-site scripting XSS vulnerability in siteadmin/editorfiles/includes/loadmessage.php in the Youtube Clone Script allows remote attackers to inject arbitrary web script or HTML via the langpleasewait parameter...