EUVD-2004-1616

Malware in sbrugna...

phpMyRecipes 1.2.2 /dosearch.php SQL注入漏洞

No description provided by source...

CVE-2014-9347

CVE-2014-9347 documents a SQL injection in phpMyRecipes 1.2.2, specifically in dosearch.php via the words_exact parameter. The vulnerability enables remote attackers to execute arbitrary SQL commands, with the impact described as partial confidentiality, integrity, and availability. Affected comp...

CVE-2014-9347: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in dosearch.php in phpMyRecipes 1.2.2 allows remote attackers to execute arbitrary SQL commands via the wordsexact parameter...

phpMyRecipes 1.2.2 dosearch.php SQL Injection

SQL Injection vulnerabilty in phpMyRecipes dosearch.php Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...

phpMyRecipes 1.2.2 SQL Injection Exploit

phpMyRecipes 1.2.2 dosearch.php, wordsexact param - SQL Injection phpMyRecipes 1.2.2 dosearch.php, wordsexact param - SQL Injection Exploit !/usr/bin/python import httplib from bs4 import BeautifulSoup import re import os Function that takes an SQL select statement and inject it into the wordsexa...

UBBCentral UBB.threads 3.4/3.5 Dosearch.PHP SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/11502/info It is reported that UBBCentral UBB.threads is prone to an SQL injection vulnerability. This issue is due to a failure of the application to properly validate user supplied URI input. Because of this, a maliciou...

CVE-2007-2530: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Tropicalm Crowell Resource 4.5.2 allow remote attackers to execute arbitrary PHP code via a URL in the RESPATH parameter to 1 dosearch.php or 2 printfriendly.php...

tropicalm-rfi.txt

§§§§§§§§§§ §§§§§§§§§§§§§§§ §§§§§§§§§§§§§§§§§§§ §§§§§§§§§§§§§§§§§§§§§§§ §§§§§§§§§§§§§§§§§§§§§§§§§§ §§§§§§§§§§§§§§§§§§§§§§§§§§§§§§ §§§§§§§§§§§§§§§§§§§§§§§§§§§§§§§§§ §§§§§§§§§§§§§§§§§§§§§§§§§§§§§§§§§§§ §§§§§§§§§§§§§§§§§§§§§§§§§§§§§§§§§§§§§ §§§§§§§§§§§§§§§§§§§§§§§§§§§§§§§§§§§§§§§...

Tropicalm Crowell Resource 4.5.2 (RESPATH) RFI Vulnerabilities

No description provided by source. §§§§§§§§§§ §§§§§§§§§§§§§§§ §§§§§§§§§§§§§§§§§§§ §§§§§§§§§§§§§§§§§§§§§§§ §§§§§§§§§§§§§§§§§§§§§§§§§§ §§§§§§§§§§§§§§§§§§§§§§§§§§§§§§ §§§§§§§§§§§§§§§§§§§§§§§§§§§§§§§§§ §§§§§§§§§§§§§§§§§§§§§§§§§§§§§§§§§§§ §§§§§§§§§§§§§§§§§§§§§§§§§§§§§§§§§§§§§...

CVE-2006-5059

Multiple cross-site scripting XSS vulnerabilities in WWWthreads 5.4.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the Cat parameter to 1 dosearch.php, 2 postlist.php, 3 showmembers.php, 4 faqenglish.php, 5 online.php, 6 login.php, 7 newuser.php, 8 wwwthreads.php,...

CVE-2006-5059: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in WWWthreads 5.4.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the Cat parameter to 1 dosearch.php, 2 postlist.php, 3 showmembers.php, 4 faqenglish.php, 5 online.php, 6 login.php, 7 newuser.php, 8 wwwthreads.php,...

CVE-2005-2057: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in Infopop UBB.Threads before 6.5.2 Beta allow remote attackers to inject arbitrary web script or HTML via the 1 Searchpage parameter to dosearch.php, 2 Number, 3 what, or 4 page parameter to newreply.php, 5 Number, 6 Board, or 7 what parameter to...

CVE-2004-1622: Undefined Security Weakness

SQL injection vulnerability in dosearch.php in UBB.threads 3.4.x allows remote attackers to execute arbitrary SQL statements via the Name parameter...

UBB.threads dosearch.php SQL injection

There is a SQL injection issue in the remote version of UBB.threads that may allow an attacker to execute arbitrary SQL statements on the remote host and potentially overwrite arbitrary files there by sending a malformed value to the 'Name' argument of the file 'dosearch.php'. %NASLMINLEVEL 70300...

SQL Injection in UBB.threads 3.4.x

Product: ======== UBB.threads Vendor: ======= UBBCentral http://www.ubbcentral.com/ Versions: ========= I tested it successfull on 3.4.x At Version 3.5 you need to be logged in to perform a search. I didnt tested this version. Problem: ======== Sql-Injection in dosearch.php dosearch.php?Name=' OR...