CVE-2007-0865

SQL injection vulnerability in comments.php in LushiNews 1.01 and earlier allows remote authenticated users to inject arbitrary SQL commands via the id parameter...

CVE-2007-0865

CVE-2007-0865 describes an SQL injection in the file comments.php of LushiNews 1.01 and earlier . The vulnerability allows remote authenticated users to inject arbitrary SQL commands through the id parameter. The entry scopes impact to partial confidentiality, integrity, and availability, with a ...

LushiNews <= 1.01 (comments.php) Remote SQL Injection Exploit

No description provided by source. % Response.Buffer = True % % On Error Resume Next % % Server.ScriptTimeout = 100 % % '=============================================================================================== 'Script Name: LushiNews = 1.01 comments.php Remote SQL Injection Exploit 'Coded ...

CVE-2007-0865: Undefined Security Weakness

SQL injection vulnerability in comments.php in LushiNews 1.01 and earlier allows remote authenticated users to inject arbitrary SQL commands via the id parameter...

LushiNews <= 1.01 (comments.php) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ============================================================= LushiNews exploit2.asp 'Update: + Get Header 'Update: + Get Whois Info '=============================================================================================== % functio...

LushiNews 1.01 - 'comments.php' SQL Injection

exploit2.asp 'Update: + Get Header 'Update: + Get Whois Info '=============================================================================================== % function functionControl1 setTimeout"functionControl2",2000; function functionControl2 ifdocument.form1.field1.value=="" alert"Exploit...

LushiNews 1.01 - comments.php SQL Injection

LushiNews 1.01 - comments.php SQL Injection exploit2.asp 'Update: + Get Header 'Update: + Get Whois Info '=============================================================================================== % function functionControl1 setTimeout"functionControl2",2000; function functionControl2...

CVE-2007-0172: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in AllMyGuests 0.3.0 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the AMGserverpath parameter to 1 comments.php and 2 signin.php; and possibly via a URL in unspecified parameters to 3 include/submit.inc.php, 4...

CVE-2004-2669: Undefined Security Weakness

Multiple SQL injection vulnerabilities in Land Down Under LDU v701 allow remote attackers to execute arbitrary SQL commands or obtain the installation path via parameters including 1 s, w, and d in users.php, 2 id in comments.php, 3 rusername in auth.php, or 4 h in plug.php...

CVE-2006-6211

Multiple cross-site scripting XSS vulnerabilities in BirdBlog 1.4.0 allow remote attackers to inject arbitrary web script or HTML via the 1 msg parameter to a admin/admincore.php, the 2 month parameter to b admin/comments.php or c admin/entries.php, or the 3 page parameter to d admin/logs.php,...

CVE-2006-6046: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in eggblog 3.1.0 allow remote attackers to inject arbitrary web script or HTML via the 1 edit parameter to a admin/articles.php or b admin/comments.php, or the 2 add parameter to admin/users.php...

Advanced Poll 2.0.7 Remote File Include Vulnerability

Advanced Poll Advanced Poll 2.0.7 Remote File Include Vulnerability Found by: beks Bug in booth.php captcha.php comments.php png.php www.site.com/path/booth.php?includepath=shell www.site.com/path/captcha.php?includepath=shell www.site.com/path/comments.php?includepath=shell...

CVE-2006-5917: Undefined Security Weakness

Multiple SQL injection vulnerabilities in OmniStar Article Manager allow remote attackers to execute arbitrary SQL commands via the 1 articleid parameter in a articles/comments.php and b articles/article.php, and the 2 pageid parameter in c articles/pages.php...

CVE-2006-5398

SQL injection vulnerability in comments.php in Simplog 0.9.3.1 allows remote attackers to execute arbitrary SQL commands via the cid parameter...

CVE-2006-5398

The CVE-2006-5398 entry concerns Simplog 0.9.3.1, where a SQL injection vulnerability exists in comments.php. The flaw allows remote attackers to execute arbitrary SQL commands by supplying a crafted cid parameter. The vulnerability is documented across multiple sources (NVD/NIST) with the same d...

CVE-2006-5398

SQL injection vulnerability in comments.php in Simplog 0.9.3.1 allows remote attackers to execute arbitrary SQL commands via the cid parameter...

CVE-2006-5398: Undefined Security Weakness

SQL injection vulnerability in comments.php in Simplog 0.9.3.1 allows remote attackers to execute arbitrary SQL commands via the cid parameter...

Simplog 0.9.3.1 - 'comments.php' SQL Injection

!/usr/bin/php input type=text name=cname maxlength=64 value="",$data; $bname = expl...

CVE-2006-5282

SH-News 3.1 and earlier is affected by multiple PHP remote file inclusion vulnerabilities. The flaw allows an attacker to trigger arbitrary PHP code execution by supplying a URL in the scriptpath parameter to one of five pages: report.php, archive.php, comments.php, init.php, or news.php. The iss...

CVE-2006-5282: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in SH-News 3.1 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the scriptpath parameter to 1 report.php, 2 archive.php, 3 comments.php, 4 init.php, or 5 news.php...