Unfixed XSS vulnerability at www.promociona.net

Security researcher sl4xUz, has submitted on 18/06/2008 a cross-site-scripting XSS vulnerability affecting www.promociona.net, which at the time of submission ranked 470569 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 02/07/2008. It is...

Sql injection

SQL injection vulnerability in read.asp in JiRo's FAQ Manager eXperience 1.0 allows remote attackers to execute arbitrary SQL commands via the fID parameter...

CVE-2008-2691

SQL injection vulnerability in read.asp in JiRo's FAQ Manager eXperience 1.0 allows remote attackers to execute arbitrary SQL commands via the fID parameter...

CVE-2008-2691

CVE-2008-2691 : SQL injection in JiRo's FAQ Manager eXperience 1.0, via the fID parameter in read.asp, allows remote attackers to execute arbitrary SQL commands. Affected component: the read.asp endpoint handling fID. Exploitation details and exact root cause are not expanded beyond the parameter...

CVE-2008-2691

SQL injection vulnerability in read.asp in JiRo's FAQ Manager eXperience 1.0 allows remote attackers to execute arbitrary SQL commands via the fID parameter...

jiro-sql.txt

Script Name : JiRo´s FAQ Manager eXperience + Version : v 1.0 + Price : Single Website License 34.95 $ 2 Websites License 62.95 $ 5 Websites License 139.95 $ + Author : Underz0ne Crew + Home : http://www.underz0ne.net + Script In short : 'JiRos FAQ Management System is an essential element for...

JiRo?s FAQ Manager (read.asp fID) SQL Injection Vulnerability

No description provided by source. + Script Name : JiRo´s FAQ Manager eXperience + Version : v 1.0 + Price : Single Website License 34.95 $ 2 Websites License 62.95 $ 5 Websites License 139.95 $ + Author : Underz0ne Crew + Home : http://www.underz0ne.net + Script In short : 'JiRos FAQ Management...

JiRo?s FAQ Manager (read.asp fID) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================= JiRo's FAQ Manager read.asp fID SQL Injection Vulnerability ============================================================= + Script Name : JiRo?s FAQ Manager eXperience + Version...

JiRo's FAQ Manager eXperience 1.0 - 'fID' SQL Injection

Script Name : JiRo´s FAQ Manager eXperience + Version : v 1.0 + Price : Single Website License 34.95 $ 2 Websites License 62.95 $ 5 Websites License 139.95 $ + Author : Underz0ne Crew + Home : http://www.underz0ne.net + Script In short : 'JiRos FAQ Management System is an essential element for...

JiRos FAQ Manager eXperience 1.0 - fID SQL Injection

JiRos FAQ Manager eXperience 1.0 - fID SQL Injection + Script Name : JiRo´s FAQ Manager eXperience + Version : v 1.0 + Price : Single Website License 34.95 $ 2 Websites License 62.95 $ 5 Websites License 139.95 $ + Author : Underz0ne Crew + Home : http://www.underz0ne.net + Script In short :...

Sql injection

SQL injection vulnerability in faq.php in vBulletin 3.7.0 Gold allows remote attackers to execute arbitrary SQL commands via the q parameter in a search action...

Microsoft Security Bulletin MS08-029 – Moderate Vulnerabilities in Microsoft Malware Protection Engine Could Allow Denial of Service (952044)

Microsoft Security Bulletin MS08-029 – Moderate Vulnerabilities in Microsoft Malware Protection Engine Could Allow Denial of Service 952044 Published: May 13, 2008 Version: 1.0 General Information Executive Summary This security update resolves two privately reported vulnerabilities in the...

joomla faq SQL Injection

allinurl :"index.php?option=faq task" index.php?option=faq&task=viewallfaq&catid=-9999999//union//select//concatusername,0x3a,password,0x3a,0//from//mosusers/...

Joomla! / Mambo Component faq - 'catid' SQL Injection

source: https://www.securityfocus.com/bid/27822/info The Joomla! and Mambo 'faq' component is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

joomlafaq-sql.txt

allinurl :"index.php?option=faq task" index.php?option=faq&task=viewallfaq&catid=-9999999//union//select//concatusername,0x3a,password,0x3a,0//from//mosusers/...

Debian Security Advisory DSA 109-1 (faqomatic)

The remote host is missing an update to faqomatic announced via advisory DSA 109-1. OpenVAS Vulnerability Test $Id: deb1091.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 109-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 109-1 (faqomatic)

The remote host is missing an update to faqomatic announced via advisory DSA 109-1. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

Microsoft Security Bulletin MS08-001 – Critical Vulnerabilities in Windows TCP/IP Could Allow Remote Code Execution (941644)

Microsoft Security Bulletin MS08-001 – Critical Vulnerabilities in Windows TCP/IP Could Allow Remote Code Execution 941644 Published: January 8, 2008 Version: 1.0 General Information Executive Summary This critical security update resolves two privately reported vulnerabilities in Transmission...

MyPHP Forum多个SQL注入漏洞

BUGTRAQ ID: 27118 MyPHP Forum是一个易于架设并且易于使用基于MySQL与PHP的论坛。 MyPHP Forum处理用户请求数据时存在输入验证漏洞，远程攻击者可能利用此漏洞执行SQL注入攻击。 MyPHP Forum的faq.php文件没有正确地验证对id参数的输入，member.php文件没有正确验证对member参数的输入，search.php文件没有正确验证对searchtext和searchuser参数的输入，允许攻击者通过注入任意SQL代码控制SQL查询。成功攻击要求禁用了magicquotesgpc。 faq.php文件中的漏洞代码：...

CVE-2007-6667

SQL injection vulnerability in faq.php in MyPHP Forum 3.0 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: the member.php vector is already covered by CVE-2005-0413...