Sql injection

SQL injection vulnerability in directory.php in Prozilla Entertainers 1.1 and earlier allows remote attackers to execute arbitrary SQL commands via the cat parameter. NOTE: some of these details are obtained from third party information...

CVE-2008-1788

CVE-2008-1788 describes an SQL injection in the file directory.php of Prozilla Entertainers 1.1 and earlier. The vulnerability arises when processing the cat parameter, allowing remote attackers to execute arbitrary SQL commands. Affected component: directory.php in Prozilla Entertainers; root ca...

CVE-2008-1788: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in directory.php in Prozilla Entertainers 1.1 and earlier allows remote attackers to execute arbitrary SQL commands via the cat parameter. NOTE: some of these details are obtained from third party information...

Ajchat 'directory.php' SQL注入漏洞

Ajchat是一款基于PHP的WEB应用程序。 Ajchat不正确过滤用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，获得敏感信息或操作数据库。 问题是'directory.php'脚本对用户提交的WEB参数缺少过滤，提交恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息或操作数据库。 Ajchat 0.10 目前没有解决方案提供： http://ajchat.sourceforge.net/ http://www.example.com/directory.php?s='and 1 = 2 union select...

Sql injection

Multiple SQL injection vulnerabilities in directory.php in the Multi-Forums aka Multi Host Forum Pro module 1.3.3, for phpBB and Invision Power Board IPB or IP.Board, allow remote attackers to execute arbitrary SQL commands via the 1 go and 2 cat parameters...

CVE-2007-5688

CVE-2007-5688: Multiple SQL injection vulnerabilities in the Multi-Forums (aka Multi Host Forum Pro) module 1.3.3 for phpBB/IPB, in directory.php, allow remote attackers to execute arbitrary SQL via the (1) go and (2) cat parameters. Affected software is the Multi-Forums module version 1.3.3; roo...

CVE-2007-5688: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in directory.php in the Multi-Forums aka Multi Host Forum Pro module 1.3.3, for phpBB and Invision Power Board IPB or IP.Board, allow remote attackers to execute arbitrary SQL commands via the 1 go and 2 cat parameters...

Multi-Forums - Directory.php Multiple SQL Injections

Multi-Forums - Directory.php Multiple SQL Injections source: https://www.securityfocus.com/bid/26213/info Multi-Forums is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in SQL queries. Exploiting these issues could allo...

Multi-Forums - 'Directory.php' Multiple SQL Injections

source: https://www.securityfocus.com/bid/26213/info Multi-Forums is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in SQL queries. Exploiting these issues could allow an attacker to compromise the application, access o...

CVE-2007-4258

CVE-2007-4258: SQL injection in Prozilla Pub Site Directory’s directory.php via the cat parameter. Remote attackers can execute arbitrary SQL commands. Affected: Prozilla Pub Site Directory (directory.php) with cat parameter. Root cause: unsafely built SQL queries allowing injection. Impact: part...

CVE-2007-4258: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in directory.php in Prozilla Pub Site Directory allows remote attackers to execute arbitrary SQL commands via the cat parameter...

Unfixed XSS vulnerability at www.forumfree.org

Security researcher St@rExT, has submitted on 08/06/2007 a cross-site-scripting XSS vulnerability affecting www.forumfree.org, which at the time of submission ranked 65217 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/06/2007. It is...

Prozilla Pub Site Directory (directory.php cat) SQL Injection Vulnerbility

Exploit for unknown platform in category web applications ========================================================================== Prozilla Pub Site Directory directory.php cat SQL Injection Vulnerbility ==========================================================================...

Unfixed XSS vulnerability at s4.forumfree.org

Security researcher St@rExT, has submitted on 08/06/2007 a cross-site-scripting XSS vulnerability affecting s4.forumfree.org, which at the time of submission ranked 46879 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/06/2007. It is current...

CVE-2007-4056

SQL injection vulnerability in directory.php in Prozilla Adult Directory allows remote attackers to execute arbitrary SQL commands via the catid parameter in a list action. NOTE: the original report indicated that this was the "photo" SourceForge project aka Maan Bsat Photo Collection, but that w...

CVE-2007-4056

CVE-2007-4056 affects Prozilla Adult Directory (directory.php). The vulnerability is an SQL injection in the list action via the cat_id parameter, enabling remote attackers to execute arbitrary SQL commands. The connected documents confirm the vulnerable component and root cause but do not provid...

CVE-2007-4056: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in directory.php in Prozilla Adult Directory allows remote attackers to execute arbitrary SQL commands via the catid parameter in a list action. NOTE: the original report indicated that this was the "photo" SourceForge project aka Maan Bsat Photo Collection, but that w...

Sql injection

Multiple SQL injection vulnerabilities in Prozilla Directory Script allow remote attackers to execute arbitrary SQL commands via the catid parameter in a list action to directory.php, and other unspecified vectors...

CVE-2007-3809

Multiple SQL injection vulnerabilities in Prozilla Directory Script allow remote attackers to execute arbitrary SQL commands via the catid parameter in a list action to directory.php, and other unspecified vectors...

CVE-2007-3809: Undefined Security Weakness

Multiple SQL injection vulnerabilities in Prozilla Directory Script allow remote attackers to execute arbitrary SQL commands via the catid parameter in a list action to directory.php, and other unspecified vectors...