CVE-2009-2269

SQL injection vulnerability in Empire CMS 5.1 allows remote attackers to execute arbitrary SQL commands via the bid parameter to the default URI under e/tool/gbook/...

Sql injection

SQL injection vulnerability in Empire CMS 5.1 allows remote attackers to execute arbitrary SQL commands via the bid parameter to the default URI under e/tool/gbook/...

CVE-2009-2269

Empire CMS 5.1 is affected by a SQL injection in the default URI under e/tool/gbook/ through the bid parameter. The vulnerability allows remote attackers to execute arbitrary SQL commands. Evidence from NVD confirms a base CVSS v2.0 score of 7.5 ( HIGH ), with network access and low attack comple...

CVE-2009-2269

SQL injection vulnerability in Empire CMS 5.1 allows remote attackers to execute arbitrary SQL commands via the bid parameter to the default URI under e/tool/gbook/...

Empire Cms 5.1 sql injection

Securitylab.ir Application Info: Name: Empire Cms Version: 5.1 Download: http://www.phome.net/OpenSource/download/EmpireCMS5.1osSCGBK.zip Discoverd By: Securitylab.ir Website: http://Securitylab.ir Contacts: adminatsecuritylab.ir & [email protected] Vulnerability Info: Type: Sql Injection Risk:...

Empire CMS 5.1 SQL Injection

Securitylab.ir Application Info: Name: Empire Cms Version: 5.1 Download: http://www.phome.net/OpenSource/download/EmpireCMS5.1osSCGBK.zip Discoverd By: Securitylab.ir Website: http://Securitylab.ir Contacts: adminatsecuritylab.ir & [email protected] Vulnerability Info: Type: Sql Injection Risk:...

Empire CMS 0day-vulnerability warning-the black bar safety net

Source: Rist Dark gray dropped out of the 0day. Find used Empire CMS station,the site behind a directly applied:e/tool/gbook/? bid=1 Out is Empire CMS the guestbook,in the name of writing:缞\ Contact email at:,1,1,1,select concatusername,0x5f,password,0x5f,rnd from phomeenewsuser where...

帝国ECMS V5 /e/member/list/index.php注入漏洞

帝国ECMS /e/member/list/index.php文件: if$sear $keyboard=RepPostVar2$GET'keyboard'; if$keyboard $add.=$where.$userusername." like '%$keyboard%'"; $search.="&sear=1&keyboard=$keyboard"; 判断sear参数是否存在,然后直接去keyboard的参数,然后再判断keyboard值是否为空,如果不为 空就直接把keyboard带入查询产生注射漏洞. 帝国ECMS V5 暂无...

Empire ECMS 0Day V5. 0 injection vulnerability analysis-vulnerability warning-the black bar safety net

Empire ECMS /e/member/list/index. php file: if$sear $keyboard=RepPostVar2$GET'keyboard'; if$keyboard $add.=$ where.$ userusername." like '%$keyboard%'"; $search.="& amp;sear=1&keyboard=$keyboard"; Judge sear whether the parameters exist,then go directly to the keyboard of the parameters,and then...

CVE-2008-3169

Multiple heap-based buffer overflows in Empire Server before 4.3.15 allow remote attackers to cause a denial of service or possibly execute arbitrary code via unspecified vectors, related to a "coordinate normalization bug." NOTE: some of these details are obtained from third party information...

CVE-2008-3168

The files utility in Empire Server before 4.3.15 discloses the world creation time, which makes it easier for attackers to determine the PRNG seed...

CVE-2008-3168

The CVE-2008-3168 entry concerns Empire Server before version 4.3.15, where the files utility discloses the world creation time. This timing leak reduces entropy for the PRNG seed and is described as a vulnerability in the NVD entry; no exploit details are provided in the connected documents. The...

CVE-2008-3169

Multiple heap-based buffer overflows in Empire Server before 4.3.15 allow remote attackers to cause a denial of service or possibly execute arbitrary code via unspecified vectors, related to a "coordinate normalization bug." NOTE: some of these details are obtained from third party information...

CVE-2008-3169

Empire Server (before version 4.3.15) is affected by heap-based buffer overflows due to a coordinate normalization bug. The vulnerability allows remote attackers to cause a denial of service or possibly execute arbitrary code via unspecified vectors. Remediation is to upgrade to 4.3.15 or apply v...

CVE-2008-3168

The files utility in Empire Server before 4.3.15 discloses the world creation time, which makes it easier for attackers to determine the PRNG seed...

Sql injection

SQL injection vulnerability in gamelisting.php in Solar Empire 2.9.1.1 and earlier allows remote attackers to execute arbitrary SQL commands via the User-Agent HTTP header...

CVE-2007-3307

SQL injection vulnerability in gamelisting.php in Solar Empire 2.9.1.1 and earlier allows remote attackers to execute arbitrary SQL commands via the User-Agent HTTP header...

CVE-2007-3307

CVE-2007-3307 describes a SQL injection vulnerability in the web component of Solar Empire (game_listing.php) affecting version 2.9.1.1 and earlier. The issue allows remote attackers to execute arbitrary SQL commands by sending a crafted value in the User-Agent HTTP header. The vulnerability impa...

CVE-2007-3307

SQL injection vulnerability in gamelisting.php in Solar Empire 2.9.1.1 and earlier allows remote attackers to execute arbitrary SQL commands via the User-Agent HTTP header...

Solar Empire <= 2.9.1.1 Blind SQL Injection / Hash Retrieve Exploit

No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo " ------------------------------------------------------------------------ Solar Empire = 2.9.1.1 Blind SQL Injection / Hash Retrieve Exploit by BlackHawk [email protected] http://itablackhawk.altervista.org Thanks t...