CVE-2007-6391: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in patch/comments.php in SH-News 3.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...

SH-News 3.0 - 'comments.php' SQL Injection

...:::::SH-News 3.0 SQL Injection Vulnerbility ::::.... Virangar Security Team www.virangar.org www.virangar.net -------- Discoverd By : hadihadi special tnx to:MR.nosrati,black.shadowes,MR.hesy,Zahra & all virangar members & all iranian hackerz greetz:to my best friend in the world hadiaryaie200...

SH-News 3.0 (comments.php id) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================ SH-News 3.0 comments.php id Remote SQL Injection Vulnerability ================================================================ ...:::::SH-News 3.0 SQL Injection Vulnerbility...

Sql injection

Multiple SQL injection vulnerabilities in wpQuiz 2.7 allow remote attackers to execute arbitrary SQL commands via the id parameter to 1 viewimage.php and 2 comments.php...

CVE-2007-6172: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in wpQuiz 2.7 allow remote attackers to execute arbitrary SQL commands via the id parameter to 1 viewimage.php and 2 comments.php...

wpquiz-sql.txt

Tytul: wpQuiz 2.7 Remote SQL Injection Vulnerability http://wireplastik.com/projects.php Autor: Kacper E-Mail: [email protected] Strona: devilteam.eu Irc: irc.myg0t.com devilteam Blad:...

wpQuiz 2.7 Multiple Remote SQL Injection Vulnerabilities

No description provided by source. Tytul: wpQuiz 2.7 Remote SQL Injection Vulnerability http://wireplastik.com/projects.php Autor: Kacper E-Mail: [email protected] Strona: devilteam.eu Irc: irc.myg0t.com devilteam Blad:...

wpQuiz 2.7 - Multiple SQL Injections

wpQuiz 2.7 - Multiple SQL Injections Tytul: wpQuiz 2.7 Remote SQL Injection Vulnerability http://wireplastik.com/projects.php Autor: Kacper E-Mail: [email protected] Strona: devilteam.eu Irc: irc.myg0t.com devilteam Blad:...

wpQuiz 2.7 - Multiple SQL Injections

Tytul: wpQuiz 2.7 Remote SQL Injection Vulnerability http://wireplastik.com/projects.php Autor: Kacper E-Mail: [email protected] Strona: devilteam.eu Irc: irc.myg0t.com devilteam Blad:...

shnew31-rfi.txt

Found By : Hasadya Raed Contact : [email protected] --------------------------- Script : SH-News 3.1 Dork : "Powered by SH-News 3.1" Greetz : Guardian Information Systems --------------------------- B.Files : report.php archive.php comments.php init.php news.php Exploits :...

CVE-2007-3198

CVE-2007-3198 is an XSS vulnerability in Maran PHP Blog (comments.php) where the id parameter can be exploited to inject arbitrary script/HTML. Affected versions are possibly before 2007-06-10. The issue allows remote attackers to execute script in the context of the victim’s browser; impact per ...

CVE-2007-3198: Undefined Security Weakness

Cross-site scripting XSS vulnerability in comments.php in Maran PHP Blog Maran Blog, possibly only versions before 20070610, allows remote attackers to inject arbitrary web script or HTML via the id parameter...

CVE-2007-2859: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in SimpGB 1.46.0 allow remote attackers to execute arbitrary PHP code via a URL in the pathsimpgb parameter to 1 guestbook.php, 2 search.php, 3 mailer.php, 4 avatars.php, 5 ccode.php, 6 comments.php, 7 emoticons.php, 8 gbdownload.php, and possibl...

Sql injection

SQL injection vulnerability in comments.php in WSN Guest 1.02 and 1.21 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2007-1517

SQL injection vulnerability in comments.php in WSN Guest 1.02 and 1.21 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2007-1517

The vulnerability CVE-2007-1517 affects WSN Guest versions 1.02 and 1.21. A SQL injection flaw exists in comments.php that allows remote attackers to execute arbitrary SQL commands through the id parameter. The provided documents do not specify affected database, specific payloads, or concrete ex...

wsnguest-sql.txt

WSN Guest 1.21 Version Comments.PHP "ID" SQL Injection Exploit WSN Guest 1.21 Version Comments.PHP "ID" SQL Injection Exploit SQL Injection Code Search Board ALL UniquE-KeyUniquE-Cracker [email protected]...

CVE-2007-1517: Undefined Security Weakness

SQL injection vulnerability in comments.php in WSN Guest 1.02 and 1.21 allows remote attackers to execute arbitrary SQL commands via the id parameter...

WSN Guest 1.21 (comments.php id) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ============================================================= WSN Guest 1.21 comments.php id Remote SQL Injection Exploit ============================================================= WSN Guest 1.21 Version Comments.PHP "ID" SQL Injection...

WSN Guest 1.21 - 'id' SQL Injection

WSN Guest 1.21 Version Comments.PHP "ID" SQL Injection Exploit WSN Guest 1.21 Version Comments.PHP "ID" SQL Injection Exploit SQL Injection Code Search Board ALL UniquE-KeyUniquE-Cracker [email protected] font face="Verdana" size="2" color=...