CVE-2008-2222

SQL injection vulnerability in login.php in EQdkp 1.3.2f allows remote attackers to bypass EQdkp user authentication via the userid parameter...

EQDKP 1.3.2f (user_id) Authentication Bypass (PoC)

Exploit for unknown platform in category web applications ================================================== EQDKP 1.3.2f userid Authentication Bypass PoC ================================================== ?php // EQDKP 1.3.2f Authentication Bypass PoC $data'autologinid' = 'x'; $data'userid' = "1...

Code injection

Multiple unspecified vulnerabilities in EQDKP Plus before 0.4.4.5 have unknown impact and attack vectors...

CVE-2007-4176

Multiple unspecified vulnerabilities in EQDKP Plus before 0.4.4.5 have unknown impact and attack vectors...

CVE-2007-4176

CVE-2007-4176 affects EQDKP Plus prior to version 0.4.4.5 . The connected documents provide no explicit root-cause, vulnerability vector, or concrete exploit details beyond noting “multiple unspecified vulnerabilities” with unknown impact. The NVD entry lists a CVSS v2 base score of 6.8 (Medium) ...

CVE-2007-4176

Multiple unspecified vulnerabilities in EQDKP Plus before 0.4.4.5 have unknown impact and attack vectors...

[Full-disclosure] Overwrite variables eqDKP 1.3.2d and prior (login.php)

If you want to run old code that relies on registerglobals temporarily, make sure you use one of the non-overwriting extracttype values such as EXTRSKIP and be aware that you should extract in the same order that's defined in variablesorder within the php.ini ----- eqDKP 1.3.2d and prior login.ph...

CVE-2007-3079

listmembers.php in EQdkp 1.3.2c and earlier allows remote attackers to obtain sensitive information via an invalid compare parameter, which reveals the path...

Sql injection

SQL injection vulnerability in listmembers.php in EQdkp 1.3.2 and earlier allows remote attackers to execute arbitrary SQL commands via the rank parameter...

CVE-2007-3077

SQL injection vulnerability in listmembers.php in EQdkp 1.3.2 and earlier allows remote attackers to execute arbitrary SQL commands via the rank parameter...

Path traversal

listmembers.php in EQdkp 1.3.2c and earlier allows remote attackers to obtain sensitive information via an invalid compare parameter, which reveals the path...

CVE-2007-3077

CVE-2007-3077 affects EQdkp 1.3.2 and earlier. The vulnerability is an SQL injection in listmembers.php via the rank parameter, enabling remote execution of arbitrary SQL commands. Exploit details or specific patches are not provided in the connected documents; remediation information is not stat...

CVE-2007-3079

listmembers.php in EQdkp 1.3.2c and earlier allows remote attackers to obtain sensitive information via an invalid compare parameter, which reveals the path...

CVE-2007-3077

SQL injection vulnerability in listmembers.php in EQdkp 1.3.2 and earlier allows remote attackers to execute arbitrary SQL commands via the rank parameter...

CVE-2007-3079

CVE-2007-3079 affects EQdkp 1.3.2c and earlier. The vulnerability lies in listmembers.php where an invalid compare parameter can disclose the server path, allowing remote attackers to obtain sensitive information. The connected documents do not provide remediation steps or exploit details beyond ...

Cross site scripting

Cross-site scripting XSS vulnerability in the Attunement and Key Tracker 0.95 and earlier plugin for EQdkp allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly involving the 1 keyshow, 2 sortkey, and 3 show parameters to index.php...

CVE-2007-3067

Cross-site scripting XSS vulnerability in the Attunement and Key Tracker 0.95 and earlier plugin for EQdkp allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly involving the 1 keyshow, 2 sortkey, and 3 show parameters to index.php...

CVE-2007-3067

CVE-2007-3067 is an XSS vulnerability in the Attunement and Key Tracker 0.95 and earlier plugin for EQdkp. The vulnerability allows remote attackers to inject arbitrary script/HTML via unspecified vectors, with potential involvement of the (1) keyshow, (2) sortkey, and (3) show parameters to inde...

CVE-2007-3067

Cross-site scripting XSS vulnerability in the Attunement and Key Tracker 0.95 and earlier plugin for EQdkp allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly involving the 1 keyshow, 2 sortkey, and 3 show parameters to index.php...

EQdkp <= 1.3.2 (listmembers.php rank) Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl -w EQdkp = 1.3.2 SQL Injection Exploit Discovered by: Silentz Payload: Admin Username & Hash Retrieval Website: http://www.w4ck1ng.com Vulnerable Code listmembers.php: $sql = 'SELECT m., m.memberearned-m.memberspent+m.memberadjustment AS...