CVE-2008-5288

PHP remote file inclusion vulnerability in include/header.php in Werner Hilversum FAQ Manager 1.2, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the configpath parameter...

CVE-2008-5287

SQL injection vulnerability in catagorie.php in Werner Hilversum FAQ Manager 1.2 allows remote attackers to execute arbitrary SQL commands via the catid parameter...

Remote file inclusion

PHP remote file inclusion vulnerability in include/header.php in Werner Hilversum FAQ Manager 1.2, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the configpath parameter...

Sql injection

SQL injection vulnerability in catagorie.php in Werner Hilversum FAQ Manager 1.2 allows remote attackers to execute arbitrary SQL commands via the catid parameter...

CVE-2008-5287

SQL injection vulnerability in catagorie.php in Werner Hilversum FAQ Manager 1.2 allows remote attackers to execute arbitrary SQL commands via the catid parameter...

CVE-2008-5287

The CVE-2008-5287 entry documents a SQL injection vulnerability in the Werner Hilversum FAQ Manager 1.2, specifically in catagorie.php where the cat_id parameter can be manipulated to execute arbitrary SQL commands. Affected component: catagorie.php; vulnerable context: handling of cat_id in the ...

CVE-2008-5288

CVE-2008-5288 affects Werner Hilversum FAQ Manager 1.2. It is a PHP remote file inclusion vulnerability in include/header.php when register_globals is enabled, allowing an attacker to execute arbitrary PHP code via a URL supplied in the config_path parameter. Affects versions/hosting context are ...

Ocean12 (Multiple Products) - Admin_ID SQL Injection

Ocean12 Multiple Products - AdminID SQL Injection source: https://www.securityfocus.com/bid/32527/info Multiple Ocean12 products are prone to an SQL-injection vulnerability because they fail to sufficiently sanitize user-supplied data. A successful exploit may allow an attacker to compromise the...

Ocean12 FAQ Manager Pro (ID) Blind SQL Injection Vulnerabillity

No description provided by source. --------------------------------------------------------- Portal Name: Ocean12 FAQ Manager Pro Author : Mountassif Moad Evil Finger / v4 Team Vulnerability : Blind Sql Injection --------------------------------------------------------- Exploit :...

ocean12faq-blindsql.txt

--------------------------------------------------------- Portal Name: Ocean12 FAQ Manager Pro Author : Mountassif Moad Evil Finger / v4 Team Vulnerability : Blind Sql Injection --------------------------------------------------------- Exploit : site.com/?Action=Cat&ID=40%20and%201=1 true...

ocean12faq-sqlxss.txt

Application: Ocean12 FAQ Manager Pro Vendor Name: Ocean12 Vendors Url: http://ocean12tech.com/ Bug Type: Ocean12 FAQ Manager Pro SQL,XSS Multiple Vulnerabilities Exploitation: Remote Google Dork: "Maintained with the Ocean12 FAQ Manager Pro" SQL POC...

ocean12faq-disclose.txt

--------------------------------------------------------- Portal Name: Ocean12 FAQ Manager Pro Author : Mountassif Moad Evil Finger / v4 Team Vulnerability : Database Disclosure Vulnerability --------------------------------------------------------- XPL : http://site.com/path//admin/o12faq.mdb De...

Ocean12 (Multiple Products) - 'Admin_ID' SQL Injection

source: https://www.securityfocus.com/bid/32527/info Multiple Ocean12 products are prone to an SQL-injection vulnerability because they fail to sufficiently sanitize user-supplied data. A successful exploit may allow an attacker to compromise the application, access or modify data, or exploit...

Ocean12 FAQ Manager Pro - 'Keyword' Cross-Site Scripting

source: https://www.securityfocus.com/bid/32526/info Ocean12 FAQ Manager Pro is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user i...

Ocean12 FAQ Manager Pro - 'ID' Blind SQL Injection

--------------------------------------------------------- Portal Name: Ocean12 FAQ Manager Pro Author : Mountassif Moad Evil Finger / v4 Team Vulnerability : Blind Sql Injection --------------------------------------------------------- Exploit : site.com/?Action=Cat&ID=40%20and%201=1 true...

Ocean12 FAQ Manager Pro (ID) Blind SQL Injection Vulnerabillity

Exploit for unknown platform in category web applications =============================================================== Ocean12 FAQ Manager Pro ID Blind SQL Injection Vulnerabillity ===============================================================...

Ocean12 FAQ Manager Pro Database Disclosure Vulnerability

No description provided by source. --------------------------------------------------------- Portal Name: Ocean12 FAQ Manager Pro Author : Mountassif Moad Evil Finger / v4 Team Vulnerability : Database Disclosure Vulnerability --------------------------------------------------------- XPL :...

Ocean12 FAQ Manager Pro - ID Blind SQL Injection

Ocean12 FAQ Manager Pro - ID Blind SQL Injection --------------------------------------------------------- Portal Name: Ocean12 FAQ Manager Pro Author : Mountassif Moad Evil Finger / v4 Team Vulnerability : Blind Sql Injection --------------------------------------------------------- Exploit :...

Ocean12 FAQ Manager Pro Database Disclosure Vulnerability

Exploit for unknown platform in category web applications ========================================================= Ocean12 FAQ Manager Pro Database Disclosure Vulnerability ========================================================= --------------------------------------------------------- Portal...

Ocean12 FAQ Manager Pro - Database Disclosure

--------------------------------------------------------- Portal Name: Ocean12 FAQ Manager Pro Author : Mountassif Moad Evil Finger / v4 Team Vulnerability : Database Disclosure Vulnerability --------------------------------------------------------- XPL : http://site.com/path//admin/o12faq.mdb De...