557 matches found
Dragon Business Directory <= 3.01.12 (ID) SQL Injection Vulnerability
Exploit for unknown platform in category web applications ===================================================================== Dragon Business Directory = 3.01.12 ID SQL Injection Vulnerability ===================================================================== Title : Dragon Business Director...
CVE-2006-6066
Multiple SQL injection vulnerabilities in Dragon Calendar / Events Listing 2.x allow remote attackers to execute arbitrary SQL commands via the 1 username or 2 password parameter to a adminlogin.asp, the 3 ID parameter to b eventsearchdetail.asp, or the 4 VenueID parameter to c venuedetail.asp...
CVE-2006-6066
Multiple SQL injection vulnerabilities in Dragon Calendar / Events Listing 2.x allow remote attackers to execute arbitrary SQL commands via the 1 username or 2 password parameter to a adminlogin.asp, the 3 ID parameter to b eventsearchdetail.asp, or the 4 VenueID parameter to c venuedetail.asp...
CVE-2006-6066
Vulnerability summary (CVE-2006-6066) : Dragon Calendar / Events Listing 2.x contains multiple SQL injection flaws allowing remote attackers to execute arbitrary SQL commands via parameters in API endpoints: username or password to admin_login.asp, ID to event_searchdetail.asp, and VenueID to ven...
PT-2006-6711 · Dragon · Dragon Calendar / Events Listing
Name of the Vulnerable Software and Affected Versions: Dragon Calendar / Events Listing versions 2.x Description: The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via the username or password parameter to the "admin login.asp" API endpoint, the ID paramete...
dragonevents.txt
vendor site:http://www.dragoninternet.net/ product:Dragon Events Listing bug:login bypass & injection sql risk:high login bypass : username: 'or''=' passwd: 'or''=' injection sql get http://site.com/eventsearchdetail.asp?ID='sql http://site.com/venuedetail.asp?VenueID='sql laurent gaffié & benjam...
Dragon calendar [ login bypass & injection sql ]
vendor site:http://www.dragoninternet.net/ product:Dragon Events Listing bug:login bypass & injection sql risk:high login bypass : username: 'or''=' passwd: 'or''=' injection sql get http://site.com/eventsearchdetail.asp?ID='sql http://site.com/venuedetail.asp?VenueID='sql laurent gaffie & benjam...
Dragon Internet Events Listing 2.0.01 - admin_login.asp Multiple Field SQL Injections
Dragon Internet Events Listing 2.0.01 - adminlogin.asp Multiple Field SQL Injections source: https://www.securityfocus.com/bid/21098/info Dragon Event Listing is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it ...
Dragon Internet Events Listing 2.0.01 - 'admin_login.asp' Multiple Field SQL Injections
source: https://www.securityfocus.com/bid/21098/info Dragon Event Listing is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the...
Dragon Internet Events Listing 2.0.01 - 'venue_detail.asp?VenueID' SQL Injection
source: https://www.securityfocus.com/bid/21098/info Dragon Event Listing is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the...
Dragon Internet Events Listing 2.0.01 - 'event_searchdetail.asp?ID' SQL Injection
source: https://www.securityfocus.com/bid/21098/info Dragon Event Listing is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the...
Dragon Internet Events Listing 2.0.01 - venue_detail.asp?VenueID SQL Injection
Dragon Internet Events Listing 2.0.01 - venuedetail.asp?VenueID SQL Injection source: https://www.securityfocus.com/bid/21098/info Dragon Event Listing is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an S...
Dragon Internet Events Listing 2.0.01 - event_searchdetail.asp?ID SQL Injection
Dragon Internet Events Listing 2.0.01 - eventsearchdetail.asp?ID SQL Injection source: https://www.securityfocus.com/bid/21098/info Dragon Event Listing is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an...
CVE-2006-4961
SQL injection vulnerability in the GetModuleConfig function in publicincludes/pubkernel/pbdmodules.php in Php Blue Dragon 2.9.1 and earlier allows remote attackers to execute arbitrary SQL commands via the m parameter to index.php...
CVE-2006-4962
Directory traversal vulnerability in pbdengine.php in Php Blue Dragon 2.9.1 and earlier allows remote attackers to read and execute arbitrary local files via a .. dot dot sequence via the phpExt parameter, as demonstrated by executing PHP code in a log file...
CVE-2006-4961
SQL injection vulnerability in the GetModuleConfig function in publicincludes/pubkernel/pbdmodules.php in Php Blue Dragon 2.9.1 and earlier allows remote attackers to execute arbitrary SQL commands via the m parameter to index.php...
CVE-2006-4960
The CVE-2006-4960 entry describes a cross-site scripting (XSS) vulnerability in Php Blue Dragon 2.9.1 and earlier, exploitable via the m parameter. The issue is reflected in an error message generated by a failed SQL query, indicating that user-supplied input can be echoed back to the browser in ...
CVE-2006-4962
A directory traversal vulnerability affects Php Blue Dragon ≤ 2.9.1 in pbd_engine.php. An attacker can use a .. sequence in the phpExt parameter to read and execute local files, demonstrated by executing PHP code in a log file. The CVE details do not specify affected patch versions beyond the lis...
CVE-2006-4961
CVE-2006-4961 affects Php Blue Dragon 2.9.1 and earlier. The vulnerability resides in the GetModuleConfig function inside public_includes/pub_kernel/pbd_modules.php, where the m parameter to index.php leads to a SQL injection that allows remote attackers to execute arbitrary SQL commands. The pro...
Php Blue Dragon CMS <= 2.9.1 (XSS/SQL) Code Execution Exploit
Exploit for unknown platform in category web applications ============================================================= Php Blue Dragon CMS = 2.9.1 XSS/SQL Code Execution Exploit ============================================================= !/usr/bin/php -q -d shortopentag=on ? $devilteam = "...