EUVD-2008-2438

Malware in sbrugna...

PHP Realty 'dpage.php' SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/30678/info PHP Realty is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise th...

Sql injection

SQL injection vulnerability in dpage.php in YPN PHP Realty allows remote attackers to execute arbitrary SQL commands via the docID parameter...

PHP Realty 'dpage.php' SQL注入漏洞

BUGTRAQ ID: 30678 CNCAN ID：CNCAN-2008081407 PHP Realty是一款基于PHP的WEB应用程序。 PHP Realty不正确处理用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，可能获得敏感信息或操作数据库。 问题由于'dpage.php'脚本对用户提交给'docid'参数缺少过滤，构建恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息或操作数据库。 YPN PHP Realty 目前没有解决方案提供： http://ypninc.com/php-realty-fsbo-portal-script/prod76.html...

PHP Realty - 'dpage.php' SQL Injection

source: https://www.securityfocus.com/bid/30678/info PHP Realty is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify...

Sql injection

SQL injection vulnerability in dpage.php in The Real Estate Script allows remote attackers to execute arbitrary SQL commands via the docID parameter...

CVE-2008-2443

SQL injection vulnerability in The Real Estate Script’s dpage.php (docID parameter) allows remote attackers to execute arbitrary SQL commands. This is a vulnerability in the Real Estate Script where the docID input is not properly sanitized, enabling potentially partial/complete database impact. ...

CVE-2008-2443

SQL injection vulnerability in dpage.php in The Real Estate Script allows remote attackers to execute arbitrary SQL commands via the docID parameter...

restate-sql.txt

Remote SQL Injection Vulnerability Therealestatescript dpage.php $ Author : HaCkeREgY $ c0nTaCT : [email protected] $ DownlOad : www.therealestatescript.com $ Price : The Real Estate Script is on sale for $99.95 $59.95 until June 1st. ==================================================== $ Dor...

The Real Estate Script - docID SQL Injection

The Real Estate Script - docID SQL Injection Remote SQL Injection Vulnerability Therealestatescript dpage.php $ Author : HaCkeREgY $ c0nTaCT : [email protected] $ DownlOad : www.therealestatescript.com $ Price : The Real Estate Script is on sale for $99.95 $59.95 until June 1st...

The Real Estate Script - 'docID' SQL Injection

Remote SQL Injection Vulnerability Therealestatescript dpage.php $ Author : HaCkeREgY $ c0nTaCT : [email protected] $ DownlOad : www.therealestatescript.com $ Price : The Real Estate Script is on sale for $99.95 $59.95 until June 1st. ==================================================== $ Dor...

The Real Estate Script (dpage.php docID) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ==================================================================== The Real Estate Script dpage.php docID SQL Injection Vulnerability ==================================================================== Remote SQL Injection Vulnerability...