DELTAScripts PHP Links - Multiple SQL Injections

source: https://www.securityfocus.com/bid/55478/info DeltaScripts PHP Links is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the applicatio...

Simple Machines Forum <= 1.1.12 XSS Vulnerability

Exploit for php platform in category web applications Exploit Title: XSS PersistentSimple Machines Forum alertdocument.cookie; 0day.today 2018-04-13...

PHP MatchMaker Remote User Reset Password Vulnerability

Exploit for php platform in category web applications Exploit Title : PHP MatchMaker Remote User Reset Password Vulnerability Google Dork: allintext: Powered by PHP MatchMaker Date: 23/03/2011 Author: Daniel Godoy Author Mail: DanielGodoyatGobiernoFederaldotcom Author Web:...

DeltaScripts PHP Links XSS Vulnerability

Exploit for unknown platform in category web applications ======================================== DeltaScripts PHP Links XSS Vulnerability ======================================== + Exploit Title: DeltaScripts PHP Links XSS Vulnerability + Date: January 09 2010 + Author: Crux mail:email protecte...

DeltaScripts PHP Links 1.0 Cross Site Scripting

H A C K - T E C H E X P L O I T S - by Crux + Exploit Title: DeltaScripts PHP Links XSS Vulnerability + Date: January 09 2010 + Author: Crux mail:[email protected] + Software Link: http://www.deltascripts.com/phplinks/ + Version: 1.0 + Tested on: ALL OS + Dork: NO NO NO! Vulnerable File...

DELTAScripts PHP Links 1.0 - email Cross-Site Scripting

DELTAScripts PHP Links 1.0 - email Cross-Site Scripting source: https://www.securityfocus.com/bid/37700/info DeltaScripts PHP Links is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary...

DELTAScripts PHP Links 1.0 - &#039;email&#039; Cross-Site Scripting

source: https://www.securityfocus.com/bid/37700/info DeltaScripts PHP Links is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in th...

DELTAScripts PHPLinks SQL Injection

/ Name : DELTAScripts PHPLinks Vuln : SQL Injection Author : Hamza 'MizoZ' N. Email : mizozxatgmaildotcom WebSite : www.greymen.org Greetz : Zuka, all friends & arab hackers / Vulnerability is in the $GET'catid' HOST/PATH/index.php?catid=8+union+all+select+1,2,3,4,5,6--...

DELTAScripts PHPClassifieds Blind SQL Injection

/ Name : DELTAScripts PHPClassifieds Vuln : Blind SQL Injection Author : Hamza 'MizoZ' N. Email : mizozxatgmaildotcom WebSite : www.greymen.org Greetz : Zuka, all friends & arab hackers / Vulnerability is in the rate.php , $GET'id' HOST/PATH/rate.php?id=true value+INJECTION exemples :...

DELTAScripts PHPClassifieds (rate.php) Blind SQL Injection

Exploit for unknown platform in category web applications ========================================================== DELTAScripts PHPClassifieds rate.php Blind SQL Injection ========================================================== / Name : DELTAScripts PHPClassifieds Vuln : Blind SQL Injection ...

DELTAScripts PHPLinks (catid) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ========================================================= DELTAScripts PHPLinks catid SQL Injection Vulnerability ========================================================= / Name : DELTAScripts PHPLinks Vuln : SQL Injection Author : Hamza...

DELTAScripts PHPClassifieds - rate.php Blind SQL Injection

DELTAScripts PHPClassifieds - rate.php Blind SQL Injection / Name : DELTAScripts PHPClassifieds Vuln : Blind SQL Injection Author : Hamza 'MizoZ' N. Email : mizozxatgmaildotcom WebSite : www.greymen.org Greetz : Zuka, all friends & arab hackers / Vulnerability is in the rate.php , $GET'id'...

DELTAScripts PHPLinks - catid SQL Injection

DELTAScripts PHPLinks - catid SQL Injection / Name : DELTAScripts PHPLinks Vuln : SQL Injection Author : Hamza 'MizoZ' N. Email : mizozxatgmaildotcom WebSite : www.greymen.org Greetz : Zuka, all friends & arab hackers / Vulnerability is in the $GET'catid'...

DELTAScripts PHPClassifieds - &#039;rate.php&#039; Blind SQL Injection

/ Name : DELTAScripts PHPClassifieds Vuln : Blind SQL Injection Author : Hamza 'MizoZ' N. Email : mizozxatgmaildotcom WebSite : www.greymen.org Greetz : Zuka, all friends & arab hackers / Vulnerability is in the rate.php , $GET'id' HOST/PATH/rate.php?id=true value+INJECTION exemples :...

DELTAScripts PHPLinks - &#039;catid&#039; SQL Injection

/ Name : DELTAScripts PHPLinks Vuln : SQL Injection Author : Hamza 'MizoZ' N. Email : mizozxatgmaildotcom WebSite : www.greymen.org Greetz : Zuka, all friends & arab hackers / Vulnerability is in the $GET'catid' http://server/PATH/index.php?catid=8+union+all+select+1,2,3,4,5,6--...

CVE-2008-6720

SQL injection vulnerability in admin/admlogin.php in DeltaScripts PHP Links 1.3 and earlier allows remote attackers to execute arbitrary SQL commands via the adminusername parameter aka the admin field...

CVE-2008-6720

SQL injection vulnerability in admin/admlogin.php in DeltaScripts PHP Links 1.3 and earlier allows remote attackers to execute arbitrary SQL commands via the adminusername parameter aka the admin field...

CVE-2008-6720

CVE-2008-6720 describes an SQL injection in DeltaScripts PHP Links 1.3 and earlier, affecting admin/adm_login.php via the admin_username parameter. The vulnerability allows remote attackers to execute arbitrary SQL commands; CVSSv2 base score 7.5 (HIGH) with network access, low attack complexity,...

Sql injection

SQL injection vulnerability in detail.php in DeltaScripts PHP Classifieds 7.5 and earlier allows remote attackers to execute arbitrary SQL commands via the siteid parameter, a different vector than CVE-2006-5828...

CVE-2008-5805

SQL injection vulnerability in detail.php in DeltaScripts PHP Classifieds 7.5 and earlier allows remote attackers to execute arbitrary SQL commands via the siteid parameter, a different vector than CVE-2006-5828...