Redaxo CMS <= 3.2 (INCLUDE_PATH) Remote File Include Vulnerabilities

Exploit for unknown platform in category web applications ==================================================================== Redaxo CMS = 3.2 INCLUDEPATH Remote File Include Vulnerabilities ==================================================================== Script: Redaxo CMS Redaxo 3.2 - 3.1 ...

AlstraSoft E-Friends - XSS

AlstraSoft E-Friends - XSS Homepage: http://www.alstrasoft.com/ Description: Alstrasoft E-friends allows you to run a community site like MySpace and Friendster. Effected files or areas of site: index.php The input forms on the following items belowdo not properlly filter out all potential harmfu...

In RedHat 9 on the overflow to obtain root demo-vulnerability warning-the black bar safety net

From recently to be black Server security analysis point of view, I find the user elevated permissions tool. He is using a Samba security vulnerability upgrade in order to ROOT. These days the server because you want to put to the public test, this time also installed a Samba server. The results ...

Sql injection

Multiple SQL injection vulnerabilities in Creative Community Portal 1.1 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 articleid parameter to a ArticleView.php, 2 forumid parameter to b DiscView.php or c Discussions.php, 3 eventid parameter to d EventView.php, 4...

CVE-2006-2251

SQL injection vulnerability in the dommod function in mod.php in Invision Community Blog ICB 1.1.2 final through 1.2 allows remote attackers with moderator privileges to execute arbitrary SQL commands via the selectedbids parameter...

CVE-2006-2255

Multiple SQL injection vulnerabilities in Creative Community Portal 1.1 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 articleid parameter to a ArticleView.php, 2 forumid parameter to b DiscView.php or c Discussions.php, 3 eventid parameter to d EventView.php, 4...

Sql injection

SQL injection vulnerability in the dommod function in mod.php in Invision Community Blog ICB 1.1.2 final through 1.2 allows remote attackers with moderator privileges to execute arbitrary SQL commands via the selectedbids parameter...

CVE-2006-2251

SQL injection vulnerability in the dommod function in mod.php in Invision Community Blog ICB 1.1.2 final through 1.2 allows remote attackers with moderator privileges to execute arbitrary SQL commands via the selectedbids parameter...

CVE-2006-2251

CVE-2006-2251: A SQL injection in the do_mmod function of mod.php in Invision Community Blog (ICB) 1.1.2 final through 1.2 allows remote attackers with moderator privileges to execute arbitrary SQL via the selectedbids parameter. Affected software is Invision Community Blog (ICB). The vulnerabili...

CVE-2006-2255

Multiple SQL injection vulnerabilities in Creative Community Portal 1.1 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 articleid parameter to a ArticleView.php, 2 forumid parameter to b DiscView.php or c Discussions.php, 3 eventid parameter to d EventView.php, 4...

CVE-2006-2255

The CVE-2006-2255 entry concerns Multiple SQL injection vulnerabilities in Creative Community Portal 1.1 and earlier. Affected parameters include article_id (ArticleView.php), forum_id (DiscView.php or Discussions.php), event_id (EventView.php), AddVote and answer_id (PollResults.php), and mid (D...

Creative Community Portal vuln.

Creative Community Portal vuln. Vuln. discovered by : r0t Pridels Sec Crew Date: 8 may 2006 vendor:www.creative-software.co.uk/community2.html affected versions:1.1 and prior orginal advisory:http://pridels.blogspot.com/2006/05/creative-community-portal-vuln.html Vuln. Description: Creative...

Creative Software UK Community Portal 1.1 - ArticleView.php?article_id SQL Injection

Creative Software UK Community Portal 1.1 - ArticleView.php?articleid SQL Injection source: https://www.securityfocus.com/bid/17890/info Creative Community Portal is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize...

Creative Software UK Community Portal 1.1 - 'PollResults.php' Multiple SQL Injections

source: https://www.securityfocus.com/bid/17890/info Creative Community Portal is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. A successful exploit could allow an...

Creative Software UK Community Portal 1.1 - DiscView.php?forum_id SQL Injection

Creative Software UK Community Portal 1.1 - DiscView.php?forumid SQL Injection source: https://www.securityfocus.com/bid/17890/info Creative Community Portal is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied...

Creative Software UK Community Portal 1.1 - Discussions.php?forum_id SQL Injection

Creative Software UK Community Portal 1.1 - Discussions.php?forumid SQL Injection source: https://www.securityfocus.com/bid/17890/info Creative Community Portal is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize...

Creative Software UK Community Portal 1.1 - PollResults.php Multiple SQL Injections

Creative Software UK Community Portal 1.1 - PollResults.php Multiple SQL Injections source: https://www.securityfocus.com/bid/17890/info Creative Community Portal is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize...

Creative Software UK Community Portal 1.1 - 'DiscReply.php?mid' SQL Injection

source: https://www.securityfocus.com/bid/17890/info Creative Community Portal is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. A successful exploit could allow an...

Creative Software UK Community Portal 1.1 - 'Discussions.php?forum_id' SQL Injection

source: https://www.securityfocus.com/bid/17890/info Creative Community Portal is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. A successful exploit could allow an...

Creative Software UK Community Portal 1.1 - DiscReply.php?mid SQL Injection

Creative Software UK Community Portal 1.1 - DiscReply.php?mid SQL Injection source: https://www.securityfocus.com/bid/17890/info Creative Community Portal is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied...