PHP Links 1.3 - 'smarty.php' Remote File Inclusion

------------------------------------------------------------- ----- H-T Team HouSSaMix + ToXiC350 from MoroCCo -------- ------------------------------------------------------------- = Author : Houssamix From H-T Team = Script : PHP Links from DeltaScripts = 1.3 = Download :...

PHP Links <= 1.3 smarty.php Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications =============================================================== PHP Links = 1.3 smarty.php Remote File Inclusion Vulnerability ===============================================================...

PHP Links <= 1.3 (vote.php id) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================= PHP Links = 1.3 vote.php id Remote SQL Injection Vulnerability =================================================================...

CVE-2006-5828

SQL injection vulnerability in detail.php in DeltaScripts PHP Classifieds 7.1 and earlier allows remote attackers to execute arbitrary SQL commands via the userid parameter...

CVE-2006-5828

CVE-2006-5828 affects DeltaScripts PHP Classifieds before the 7.2/7.1 release: the vulnerable file is detail.php, where the user_id parameter is used in an SQL query, enabling remote attackers to execute arbitrary SQL commands. The entry explicitly notes a SQL injection vulnerability in DeltaScri...

CVE-2006-5828

SQL injection vulnerability in detail.php in DeltaScripts PHP Classifieds 7.1 and earlier allows remote attackers to execute arbitrary SQL commands via the userid parameter...

PHP Classifieds catid_search及catid变量远程SQL注入漏洞

PHP Classifieds是一款基于WEB的PHP编写的目录分类程序。 PHP Classifieds对用户提交给的参数缺少正确充分的过滤，远程攻击者可以利用此漏洞非授权操作数据库。 PHP Classifieds的index.php和search.php脚本对用户提交catidsearch或catid参数数据缺少充分过滤，远程攻击者可以通过在输入数据中插入特定的SQL命令来非授权获取对数据库的访问。 DeltaScripts PHP Classifieds = 7.1 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...

CVE-2006-5520

CVE-2006-5520 describes a PHP remote file inclusion vulnerability in the DeltaScripts PHP Classifieds 7.1 package. The flaw is in the file functions.php , allowing a remote attacker to execute arbitrary PHP code by supplying a URL in the set_path parameter. Attack impact is rated as high (CVSS v2...

CVE-2006-5520

PHP remote file inclusion vulnerability in functions.php in DeltaScripts PHP Classifieds 7.1 allows remote attackers to execute arbitrary PHP code via a URL in the setpath parameter...

PHP Classifieds 7.1 (index.php) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================== PHP Classifieds 7.1 index.php Remote SQL Injection Vulnerability ================================================================== ---- App Name: PHP Classifieds = 7.1 App...

PHP Classifieds 7.1 - index.php SQL Injection

PHP Classifieds 7.1 - index.php SQL Injection ---- Credit: Kzar [email protected] kzar.co.uk/exploits/phpclassifiedsexploit ---- App Name: PHP Classifieds = 7.1 App URL: www.deltascripts.com/phpclassifieds Problem: Multiple SQL Injection exploits ---- Exploit: search.php?catidsearch=sql...

PHP Classifieds 7.1 (index.php) Remote SQL Injection Vulnerability

No description provided by source. ---- Credit: Kzar [email protected] kzar.co.uk/exploits/phpclassifiedsexploit ---- App Name: PHP Classifieds = 7.1 App URL: www.deltascripts.com/phpclassifieds Problem: Multiple SQL Injection exploits ---- Exploit: search.php?catidsearch=sql index.php?catid=sql --...

PHP Classifieds 7.1 - 'index.php' SQL Injection

---- Credit: Kzar [email protected] kzar.co.uk/exploits/phpclassifiedsexploit ---- App Name: PHP Classifieds = 7.1 App URL: www.deltascripts.com/phpclassifieds Problem: Multiple SQL Injection exploits ---- Exploit: search.php?catidsearch=sql index.php?catid=sql ---- Example: Puts Username and...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in DeltaScripts Pro Publish allow remote attackers to inject arbitrary web script or HTML via the 1 artid parameter in art.php and the 2 catname parameter in cat.php...

CVE-2006-2821

Multiple cross-site scripting XSS vulnerabilities in DeltaScripts Pro Publish allow remote attackers to inject arbitrary web script or HTML via the 1 artid parameter in art.php and the 2 catname parameter in cat.php...

CVE-2006-2821

Multiple cross-site scripting XSS vulnerabilities in DeltaScripts Pro Publish allow remote attackers to inject arbitrary web script or HTML via the 1 artid parameter in art.php and the 2 catname parameter in cat.php...

CVE-2006-2821

CVE-2006-2821 involves multiple cross‑site scripting (XSS) flaws in DeltaScripts Pro Publish. The vulnerabilities allow remote attackers to inject arbitrary web script or HTML via the following parameters: (1) artid in art.php and (2) catname in cat.php. The cited sources describe XSS impact and ...

Pro Publish SQL Injection and XSS Vulnerabilities

--------------------------------------------- Pro Publish SQL Injection and XSS Vulnerabilities --------------------------------------------- Site: http://www.deltascripts.com/download/ Bug: 1. SQL Injection : http://victim/propublish/cat.php?catid=' 2. XSS : 1-...

CVE-2002-1702

Cross-site scripting vulnerability XSS in DeltaScripts PHP Classifieds 6.0.5 allows remote attackers to execute arbitrary script as other users via the URL parameter...

CVE-2002-1702

CVE-2002-1702 is a cross-site scripting vulnerability in DeltaScripts PHP Classifieds 6.0.5 that allows remote attackers to execute arbitrary script as other users via the URL parameter. Documented impacts include potential integrity compromise with no confidentiality or availability impact per N...