EUVD-2008-2973

Malware in sbrugna...

Sql injection

SQL injection vulnerability in index.php in Demo4 CMS 01 Beta allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-2983

SQL injection vulnerability in index.php in Demo4 CMS 01 Beta allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-2983

SQL injection vulnerability in index.php in Demo4 CMS 01 Beta allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-2983

The CVE-2008-2983 entry describes an SQL injection in Demo4 CMS 01 Beta, targeting index.php via the id parameter to allow remote execution of arbitrary SQL commands. The root cause is unsanitized input leading to SQL injection, with impact described as partial confidentiality, integrity, and ava...

CVE-2008-2983: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in Demo4 CMS 01 Beta allows remote attackers to execute arbitrary SQL commands via the id parameter...

demo4cms-upload.txt

0 && !inarray $sExtension, $arAllowed || count$arDenied 0 && inarray $sExtension, $arDenied 63. SendResults '202' ; 64. 65. $sErrorNumber = '0' ; 66. $sFileUrl = '' ; 67. 68. // Initializes the counter used to rename the file, if another one...

Demo4 CMS (index.php id) Remote SQL Injection Vulnerability

No description provided by source. =============================================================== Demo4 CMS index.php id Remote SQL Injection Vulnerability =============================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH...

Demo4 CMS 1b (fckeditor) Arbitrary File Upload Exploit

No description provided by source. ?php / -------------------------------------------------------------- Demo4 CMS Beta01 fckeditor Arbitrary File Upload -------------------------------------------------------------- by Stack Special thnx for : Egix - vulnerable code in...

Demo4 CMS - 'id' SQL Injection

=============================================================== Demo4 CMS index.php id Remote SQL Injection Vulnerability =============================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team...

demo4-sql.txt

=============================================================== Demo4 CMS index.php id Remote SQL Injection Vulnerability =============================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team...

Demo4 CMS (index.php id) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications =========================================================== Demo4 CMS index.php id Remote SQL Injection Vulnerability =========================================================== ,--^----------,--------,-----,-------^--, | ||||||||| -------...

Demo4 CMS - id SQL Injection

Demo4 CMS - id SQL Injection =============================================================== Demo4 CMS index.php id Remote SQL Injection Vulnerability =============================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH...

Demo4 CMS 1b - 'FCKeditor' Arbitrary File Upload

0 && !inarray $sExtension, $arAllowed || count$arDenied 0 && inarray $sExtension, $arDenied 63. SendResults '202' ; 64. 65. $sErrorNumber = '0' ; 66. $sFileUrl = '' ; 67. 68. // Initializes the counter used to rename the file, if another one with the same name alread...