SQL Injection in Eclime

Vulnerability ID: HTB22704 Reference: http://www.htbridge.ch/advisory/sqlinjectionineclime.html Product: Eclime Vendor: www.eclime.com http://www.eclime.com/ Vulnerable Version: 1.1.2b Vendor Notification: 16 November 2010 Vulnerability Type: SQL Injection Status: Not Fixed, Vendor Alerted,...

Eclime 1.1.2b Multiple Vulnerabilities

Exploit for php platform in category web applications ====================================== Eclime 1.1.2b Multiple Vulnerabilities ====================================== Vendor: www.eclime.com http://www.eclime.com/ Vulnerable Version: 1.1.2b Vendor Notification: 16 November 2010 Vulnerability...

Eclime 1.1.2b - Multiple Vulnerabilities

Eclime 1.1.2b - Multiple Vulnerabilities Vulnerability ID: HTB22705 Reference: http://www.htbridge.ch/advisory/sqlinjectionineclime1.html Product: Eclime Vendor: www.eclime.com http://www.eclime.com/ Vulnerable Version: 1.1.2b Vendor Notification: 16 November 2010 Vulnerability Type: SQL Injectio...

Eclime 1.1.2b - Multiple Vulnerabilities

Vulnerability ID: HTB22705 Reference: http://www.htbridge.ch/advisory/sqlinjectionineclime1.html Product: Eclime Vendor: www.eclime.com http://www.eclime.com/ Vulnerable Version: 1.1.2b Vendor Notification: 16 November 2010 Vulnerability Type: SQL Injection Status: Not Fixed, Vendor Alerted,...

Eclime 1.1.2b SQL Injection / Cross Site Scripting

Vulnerability ID: HTB22705 Reference: http://www.htbridge.ch/advisory/sqlinjectionineclime1.html Product: Eclime Vendor: www.eclime.com http://www.eclime.com/ Vulnerable Version: 1.1.2b Vendor Notification: 16 November 2010 Vulnerability Type: SQL Injection Status: Not Fixed, Vendor Alerted,...

Multiple Vulnerabilities in Eclime

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Eclime which could be exploited to perform cross-site scripting and SQL injection attacks. 1 Cross-site scripting XSS vulnerability in Eclime: CVE-2010-4852 The vulnerability exists due to input sanitation error ...

eclime v1.1 (REMOTE FILE UPLOAD) Vulnerabilities

Exploit for php platform in category web applications ================================================ eclime v1.1 REMOTE FILE UPLOAD Vulnerabilities ================================================ 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0...

eclime v1.1 (File Disclosure) Vulnerabilities

Exploit for php platform in category web applications ============================================= eclime v1.1 File Disclosure Vulnerabilities ============================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, ...

eclime 1.1 Bypass / Database Disclosure

======================================================================================== | Title : eclime v1.1 = by Pass / Creat and Download Backup Vulnerability | Author : indoushka | email : [email protected] | Home : www.iqs3cur1ty.com/vb | Web Site :...

eclime v1.1 ByPass / Create and Download Backup Vulnerability

Exploit for php platform in category web applications ============================================================= eclime v1.1 ByPass / Create and Download Backup Vulnerability =============================================================...

eclime 1.1 - Bypass / Create and Download Backup

======================================================================================== | Title : eclime v1.1 = by Pass / Creat and Download Backup Vulnerability | Author : indoushka | email : [email protected] | Home : www.iqs3cur1ty.com/vb | Dork : Powered by eclime.com | Tested on: window...

eclime 1.1 - Bypass Create and Download Backup

eclime 1.1 - Bypass Create and Download Backup ======================================================================================== | Title : eclime v1.1 = by Pass / Creat and Download Backup Vulnerability | Author : indoushka | email : [email protected] | Home : www.iqs3cur1ty.com/vb |...

eclime login.php SQL Injection

The version of eclime running on the remote web server has a SQL injection vulnerability. The application fails to properly sanitize input passed to the 'emailaddress' and 'password' parameters of 'login.php'. Regardless of PHP's 'magicquotesgpc' setting, a remote attacker can exploit this by...