CVE-2008-4743

CVE-2008-4743 is an SQL injection vulnerability in QuidaScript’s FAQ Management Script, specifically in index.php where the catid parameter is used unsafely. The affected component is the index.php handler within the QuidaScript FAQ Management Script, with the underlying cause being improper hand...

Easynet4u faq Host (faq.php faq) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications =================================================================== Easynet4u faq Host faq.php faq Remote SQL Injection Vulnerability =================================================================== Remote SQL Injection SuB-ZeRo author ...

Easynet4u faq Host - faq.php SQL Injection

Easynet4u faq Host - faq.php SQL Injection Remote SQL Injection SuB-ZeRo SuB-ZeRo my best freinds :: x.CJP.X & ach2008 & carlos the jackel & crazy-zero & bibi-info & HiSoK4 all muslims milw0rm.com 2008-10-10...

Easynet4u faq Host (faq.php faq) Remote SQL Injection Vulnerability

No description provided by source. Remote SQL Injection CoNsTaNtiNe HaCkErS25 SuB-ZeRo author : SuB-ZeRoAlGeRiA-HaCkErS contact : [email protected] homepage: www.no-exploit.com script : faqhost script download: http://www.easynet4u.com/easyshop/index.php?do=catalog&c=remotelyhostedscripts&i=faqhost...

Easynet4u faq Host - 'faq.php' SQL Injection

Remote SQL Injection SuB-ZeRo SuB-ZeRo my best freinds :: x.CJP.X & ach2008 & carlos the jackel & crazy-zero & bibi-info & HiSoK4 all muslims milw0rm.com 2008-10-10...

FAQ Management Script (catid) Remote SQL Injection Vulnerability

No description provided by source. || | | FAQ Management catid Remote SQL Injection Vulnerability | | |-------------------- Hussin X -------------------| | | Author: Hussin X | | Home : WwW.IQ-ty.CoM | | email: darkangelg85atYahooDoTcom | | | | | | | | script :...

FAQ Management Script - catid SQL Injection

FAQ Management Script - catid SQL Injection || | | FAQ Management catid Remote SQL Injection Vulnerability | | |-------------------- Hussin X -------------------| | | Author: Hussin X | | Home : WwW.IQ-ty.CoM | | email: darkangelg85atYahooDoTcom | | | | | | | | script :...

FAQ Management Script - 'catid' SQL Injection

|| | | FAQ Management catid Remote SQL Injection Vulnerability | | |-------------------- Hussin X -------------------| | | Author: Hussin X | | Home : WwW.IQ-ty.CoM | | email: darkangelg85atYahooDoTcom | | | | | | | | script :...

FAQ Management Script (catid) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================ FAQ Management Script catid Remote SQL Injection Vulnerability ================================================================ || | | FAQ Management catid Remote SQL Injecti...

softbizfaq-sql.txt

|| | | Softbiz FAQ Script Multiple SQL Injection Vulnerability | | |--------------------IQ-Security--------------------| | | Author: Hussin X | | Home : WwW.IQ-TY.CoM | wWw.TrYaG.cC | | email: darkangelg85atYahooDoTcom | | | | | | | script : http://www.softbizscripts.com | | DorK :...

CVE-2008-4108

Tools/faqwiz/move-faqwiz.sh aka the generic FAQ wizard moving tool in Python 2.4.5 might allow local users to overwrite arbitrary files via a symlink attack on a tmp$RANDOM.tmp temporary file. NOTE: there may not be common usage scenarios in which tmp$RANDOM.tmp is located in an untrusted directo...

DEBIAN-CVE-2008-4108

Tools/faqwiz/move-faqwiz.sh aka the generic FAQ wizard moving tool in Python 2.4.5 might allow local users to overwrite arbitrary files via a symlink attack on a tmp$RANDOM.tmp temporary file. NOTE: there may not be common usage scenarios in which tmp$RANDOM.tmp is located in an untrusted directo...

CVE-2008-4108

Tools/faqwiz/move-faqwiz.sh aka the generic FAQ wizard moving tool in Python 2.4.5 might allow local users to overwrite arbitrary files via a symlink attack on a tmp$RANDOM.tmp temporary file. NOTE: there may not be common usage scenarios in which tmp$RANDOM.tmp is located in an untrusted directo...

Directory traversal

Tools/faqwiz/move-faqwiz.sh aka the generic FAQ wizard moving tool in Python 2.4.5 might allow local users to overwrite arbitrary files via a symlink attack on a tmp$RANDOM.tmp temporary file. NOTE: there may not be common usage scenarios in which tmp$RANDOM.tmp is located in an untrusted directo...

CVE-2008-4108

Tools/faqwiz/move-faqwiz.sh aka the generic FAQ wizard moving tool in Python 2.4.5 might allow local users to overwrite arbitrary files via a symlink attack on a tmp$RANDOM.tmp temporary file. NOTE: there may not be common usage scenarios in which tmp$RANDOM.tmp is located in an untrusted directo...

CVE-2008-4108

Removed by vendor...

CVE-2008-4108

The CVE-2008-4108 entry concerns Tools/faqwiz/move-faqwiz.sh (the generic FAQ wizard moving tool) in Python 2.4.5, where a local attacker could cause a symlink attack on a temporary file (tmp$RANDOM.tmp) to overwrite arbitrary files. According to the NVD/mitigations notes, this is a local vulnera...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in admin/index.php in ACG-PTP 1.0.6 allow remote authenticated administrators to inject arbitrary web script or HTML via the 1 Category name field under Advertisement Packages, the 2 Reason field under Credit/Debit Users, and the 3 FAQ question an...

CVE-2008-3782

Multiple cross-site scripting XSS vulnerabilities in admin/index.php in ACG-PTP 1.0.6 allow remote authenticated administrators to inject arbitrary web script or HTML via the 1 Category name field under Advertisement Packages, the 2 Reason field under Credit/Debit Users, and the 3 FAQ question an...

QuidaScript FAQ Management Script 'catid' SQL注入漏洞

BUGTRAQ ID: 30775 CNCAN ID：CNCAN-2008082208 QuidaScript FAQ Management Script是一款基于PHP的WEB应用程序。 QuidaScript FAQ Management Script不正确过滤用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，获得敏感信息或操作数据库。 问题是脚本对用户提交的'catid'参数缺少过滤，提交恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息或操作数据库。 QuidaScript FAQ Management Script 目前没有解决方案提供：...