EUVD-2008-6413

Malware in sbrugna...

phpKF 'forum_duzen.php' SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/30318/info phpKF is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

Sql injection

SQL injection vulnerability in forumduzen.php in phpKF allows remote attackers to execute arbitrary SQL commands via the fno parameter...

CVE-2008-6443

CVE-2008-6443 describes a SQL injection in phpKF’s forum_duzen.php exploitable via the fno parameter. Affected behavior: remote attackers could modify or read database data by injecting arbitrary SQL. Root cause is improper input handling leading to SQL statement construction. The public referenc...

phpKF 'forum_duzen.php' SQL注入漏洞

BUGTRAQ ID: 30318 CNCAN ID：CNCAN-2008072203 phpKF是一款基于PHP的WEB应用程序。 phpKF不正确处理用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，可能获得敏感信息或操作数据库。 问题由于'forumduzen.php'脚本对用户提交给'fno'参数缺少过滤，构建恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息或操作数据库。 phpKF 目前没有解决方案提供： http://www.scriptcv.com/phpkf-forum-scripti.html...

PHPKF - forum_duzen.php SQL Injection

PHPKF - forumduzen.php SQL Injection source: https://www.securityfocus.com/bid/30318/info phpKF is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

PHPKF - 'forum_duzen.php' SQL Injection

source: https://www.securityfocus.com/bid/30318/info phpKF is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data, o...