CVE-2008-3372

CVE-2008-3372 describes an SQL injection in the Getacoder Clone’s file search_form.php where the attacker can inject via the sb_protype parameter. The underlying issue is a failure to properly sanitize input, enabling remote execution of arbitrary SQL commands. The NVD entry lists a base score of...

Greatclone Youtuber Clone 'ugroups.php' SQL注入漏洞

BUGTRAQ ID: 30392 CNCAN ID：CNCAN-2008072901 Greatclone Youtuber Clone是一款基于PHP的WEB应用程序。 Greatclone Youtuber Clone不正确过滤用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，获得敏感信息或操作数据库。 问题是'ugroups.php'脚本对用户提交的'uid'参数缺少过滤，提交恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息或操作数据库。 Greatclone Youtuber Clon 目前没有解决方案提供：...

Getacoder clone (sb_protype) Remote SQL Injection Vulnerability

No description provided by source. || | | Getacoder Clone Script sbprotype Remote SQL Injection Vulnerability | | |---------------------Hussin X----------------------| | | Author: Hussin X | | Home : www.tryag.cc/cc | | email: darkangelg85atYahooDoTcom | | | | | | | | script :...

getacoder-sql.txt

|| | | Getacoder Clone Script sbprotype Remote SQL Injection Vulnerability | | |---------------------Hussin X----------------------| | | Author: Hussin X | | Home : www.tryag.cc/cc | | email: darkangelg85atYahooDoTcom | | | | | | | | script :...

Youtuber Clone - SQL Injection

Youtuber Clone - SQL Injection || | | Youtuber Clone UID Remote SQL Injection Vulnerability | | |---------------------Hussin X----------------------| | | Author: Hussin X | | Home : www.tryag.cc/cc | | email: darkangelg85atYahooDoTcom | | | | | | | | script :...

Youtuber Clone - SQL Injection

|| | | Youtuber Clone UID Remote SQL Injection Vulnerability | | |---------------------Hussin X----------------------| | | Author: Hussin X | | Home : www.tryag.cc/cc | | email: darkangelg85atYahooDoTcom | | | | | | | | script : http://www.greatclone.com/productinfo.php?cPath=30&productsid=86 | |...

youtubeclone-sql.txt

|| | | Youtuber Clone UID Remote SQL Injection Vulnerability | | |---------------------Hussin X----------------------| | | Author: Hussin X | | Home : www.tryag.cc/cc | | email: darkangelg85atYahooDoTcom | | | | | | | | script : http://www.greatclone.com/productinfo.php?cPath=30&productsid=86 | |...

Youtuber Clone (ugroups.php UID) Remote SQL Injection Vulnerability

No description provided by source. || | | Youtuber Clone UID Remote SQL Injection Vulnerability | | |---------------------Hussin X----------------------| | | Author: Hussin X | | Home : www.tryag.cc/cc | | email: darkangelg85atYahooDoTcom | | | | | | | | script :...

Youtuber Clone (ugroups.php UID) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications =================================================================== Youtuber Clone ugroups.php UID Remote SQL Injection Vulnerability =================================================================== || | | Youtuber Clone UID Remote SQL...

Getacoder clone (sb_protype) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications =============================================================== Getacoder clone sbprotype Remote SQL Injection Vulnerability =============================================================== || | | Getacoder Clone Script sbprotype Remote SQL...

Getacoder clone - 'sb_protype' SQL Injection

|| | | Getacoder Clone Script sbprotype Remote SQL Injection Vulnerability | | |---------------------Hussin X----------------------| | | Author: Hussin X | | Home : www.tryag.cc/cc | | email: darkangelg85atYahooDoTcom | | | | | | | | script :...

FreeStyleWiki cross-site scripting vulnerability

Overview FreeStyleWiki, a Wiki clone program implemented in Perl, contains a cross-site scripting vulnerability. Impact An rbitrary script may be executed on the user's web browser. In addition, if session information from a cookie is leaked, an attacker could possibly conduct session hijacking...

Wiki clone products vulnerable to denial of service attacks

Overview Wiki clones allow a user via a web browser to edit documents on the web server. Some products of Wiki clones contain a vulnerability which consumes large amounts of CPU and memory resources when handling a particular request. Impact A remote attacker could execute a DoS denial of service...

Wiki clone products vulnerable to denial of service attacks

Overview Wiki clones allow a user via a web browser to edit documents on the web server. Some products of Wiki clones contain a vulnerability which consumes large amounts of CPU and memory resources when handling a particular request. Impact A remote attacker could execute a DoS denial of service...

Wiki clone products vulnerable to denial of service attacks

Overview Wiki clones allow a user via a web browser to edit documents on the web server. Some products of Wiki clones contain a vulnerability which consumes large amounts of CPU and memory resources when handling a particular request. Impact A remote attacker could execute a DoS denial of service...

CVE-2008-2223

SQL injection vulnerability in groupposts.php in vShare YouTube Clone 2.6 allows remote attackers to execute arbitrary SQL commands via the tid parameter...

Sql injection

SQL injection vulnerability in groupposts.php in vShare YouTube Clone 2.6 allows remote attackers to execute arbitrary SQL commands via the tid parameter...

CVE-2008-2223

SQL injection vulnerability in groupposts.php in vShare YouTube Clone 2.6 allows remote attackers to execute arbitrary SQL commands via the tid parameter...

CVE-2008-2223

CVE-2008-2223 describes an SQL injection in group_posts.php of the vShare YouTube Clone 2.6, exploitable via the tid parameter to execute arbitrary SQL. The vulnerability is confirmed in multiple sources (NVD/NVD-entry) with a CVSS v2 base score of 7.5 (HIGH) and network attack vector with low co...

vShare YouTube Clone脚本group_posts.php文件SQL注入漏洞

BUGTRAQ ID: 29114 vShare YouTube clone是用于在网站上共享视频的PHP脚本。 vShare YouTube clone的groupposts.php文件中没有正确地过滤对tid参数的输入便在SQL查询中使用，这允许远程攻击者通过提交恶意查询请求执行SQL注入攻击。 BuyScripts vShare YouTube Clone 2.6 BuyScripts ---------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://forums.buyscripts.in/viewtopic.php?f=7&t=3389...