EUVD-2006-1238

Malware in sbrugna...

DSCounter 1.2 Index.PHP SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/17112/info DSCounter is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow...

[eVuln] DSCounter 'X-Forwarded-For' SQL Injection Vulnerability

New eVuln Advisory: DSCounter 'X-Forwarded-For' SQL Injection Vulnerability http://evuln.com/vulns/98/summary.html --------------------Summary---------------- eVuln ID: EV0098 CVE: CVE-2006-1234 Software: DSCounter Sowtware's Web Site: http://dsportal.uw.hu/ Versions: 1.2 Critical Level: Moderate...

CVE-2006-1234

SQL injection vulnerability in index.php in DSCounter 1.2, with magicquotesgpc disabled, allows remote attackers to execute arbitrary SQL commands via the X-Forwarded-For field HTTPXFORWARDEDFOR environment variable in an HTTP header...

Sql injection

SQL injection vulnerability in index.php in DSCounter 1.2, with magicquotesgpc disabled, allows remote attackers to execute arbitrary SQL commands via the X-Forwarded-For field HTTPXFORWARDEDFOR environment variable in an HTTP header...

CVE-2006-1234

SQL injection vulnerability in index.php in DSCounter 1.2, with magicquotesgpc disabled, allows remote attackers to execute arbitrary SQL commands via the X-Forwarded-For field HTTPXFORWARDEDFOR environment variable in an HTTP header...

CVE-2006-1234

DSCounter 1.2 contains a SQL Injection via the X-Forwarded-For header (HTTP_X_FORWARDED_FOR) when magic_quotes_gpc is disabled. The vulnerable script is index.php; attacker can inject arbitrary SQL to the query, enabling remote exploitation. Exploitation information is provided (PoC/Exploit avail...

DSCounter 1.2 - index.php SQL Injection

DSCounter 1.2 - index.php SQL Injection source: https://www.securityfocus.com/bid/17112/info DSCounter is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could...

DSCounter 1.2 - 'index.php' SQL Injection

source: https://www.securityfocus.com/bid/17112/info DSCounter is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the...