EUVD-2008-2420

Malware in sbrugna...

EUVD-2008-2411

Malware in sbrugna...

Sql injection

SQL injection vulnerability in index.php in FicHive 1.0 allows remote attackers to execute arbitrary SQL commands via the letter parameter in a Search action, a different vector than CVE-2008-2416. NOTE: the provenance of this information is unknown; the details are obtained solely from third par...

CVE-2008-2425

SQL injection vulnerability in index.php in FicHive 1.0 allows remote attackers to execute arbitrary SQL commands via the letter parameter in a Search action, a different vector than CVE-2008-2416. NOTE: the provenance of this information is unknown; the details are obtained solely from third par...

CVE-2008-2425

CVE-2008-2425 : FicHive 1.0 – SQL injection in index.php allowing remote attackers to execute arbitrary SQL via the letter parameter in a Search action. This entry notes a different vector than CVE-2008-2416 (category parameter in Fiction action). No remediation details are provided in the connec...

CVE-2008-2425

SQL injection vulnerability in index.php in FicHive 1.0 allows remote attackers to execute arbitrary SQL commands via the letter parameter in a Search action, a different vector than CVE-2008-2416. NOTE: the provenance of this information is unknown; the details are obtained solely from third par...

CVE-2008-2416

SQL injection vulnerability in index.php in FicHive 1.0 allows remote attackers to execute arbitrary SQL commands via the category parameter in a Fiction action, possibly related to sources/fiction.class.php...

Sql injection

SQL injection vulnerability in index.php in FicHive 1.0 allows remote attackers to execute arbitrary SQL commands via the category parameter in a Fiction action, possibly related to sources/fiction.class.php...

CVE-2008-2416

SQL injection vulnerability in index.php in FicHive 1.0 allows remote attackers to execute arbitrary SQL commands via the category parameter in a Fiction action, possibly related to sources/fiction.class.php...

CVE-2008-2416

Summary of CVE-2008-2416: FicHive 1.0 is vulnerable to a SQL injection in index.php triggered by the category parameter in a Fiction action (likely related to sources/fiction.class.php). This allows remote attackers to craft arbitrary SQL, enabling potential data disclosure or modification. The v...

FicHive 1.0 (category) Remote Blind SQL Injection Exploit

No description provided by source. !/usr/bin/perl Usage: ./test.pl -url "http://localhost/scriptpath/index.php?go=Fiction&category=valideid use LWP::UserAgent; use Getopt::Long; use IO::Handle; use strict; $| = 1; my $defaultdebug = 0; my $defaultlength = 13; my $defaultmethod = "GET"; my...