Lucene search
+L

9385 matches found

Packet Storm
Packet Storm
added 2008/12/31 12:0 a.m.27 views

PHP-Fusion Mod TI Blog System SQL Injection

PHP-Fusion Mod TI - Blog System Sql Injection AUTHOR : Sina Yazdanmehr R3d.W0rm Discovered by : Sina Yazdanmehr R3d.W0rm Our Site : Http://IRCRASH.COM IRCRASH Team Members : Khashayar Fereidani - R3d.w0rm Sina Yazdanmehr - Hadi Kiamarsi Download :...

SaveExploits0
Packet Storm
Packet Storm
added 2008/12/31 12:0 a.m.24 views

PHP-Fusion 7.0.2 Blind SQL Injection Exploit

!/usr/bin/perl -w ------------------------------------------------------- PHP-Fusion = 7.00.2 Remote Blind SQL Injection Exploit by athos - stakerathotmaildotit download on http://php-fusion.co.uk ------------------------------------------------------- Usage: perl xpl.pl host/path prefix userid...

0.3AI score
SaveExploits0
zdt
zdt
added 2008/12/28 12:0 a.m.23 views

PHP-Fusion Mod TI (id) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ========================================================= PHP-Fusion Mod TI id Remote SQL Injection Vulnerability ========================================================= PHP-Fusion Mod TI - Blog System Sql Injection AUTHOR : Sina...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2008/12/28 12:0 a.m.19 views

PHP-Fusion Mod TI (id) Remote SQL Injection Vulnerability

No description provided by source. PHP-Fusion Mod TI - Blog System Sql Injection AUTHOR : Sina Yazdanmehr R3d.W0rm Discovered by : Sina Yazdanmehr R3d.W0rm Our Site : Http://IRCRASH.COM IRCRASH Team Members : Khashayar Fereidani - R3d.w0rm Sina Yazdanmehr - Hadi Kiamarsi Download :...

7.1AI score
SaveExploits0
exploitpack
exploitpack
added 2008/12/28 12:0 a.m.17 views

PHP-Fusion Mod TI - id SQL Injection

PHP-Fusion Mod TI - id SQL Injection PHP-Fusion Mod TI - Blog System Sql Injection AUTHOR : Sina Yazdanmehr R3d.W0rm Discovered by : Sina Yazdanmehr R3d.W0rm Our Site : Http://IRCRASH.COM IRCRASH Team Members : Khashayar Fereidani - R3d.w0rm Sina Yazdanmehr - Hadi Kiamarsi Download :...

0.5AI score
SaveExploits0
Exploit DB
Exploit DB
added 2008/12/28 12:0 a.m.36 views

PHP-Fusion Mod TI - 'id' SQL Injection

PHP-Fusion Mod TI - Blog System Sql Injection AUTHOR : Sina Yazdanmehr R3d.W0rm Discovered by : Sina Yazdanmehr R3d.W0rm Our Site : Http://IRCRASH.COM IRCRASH Team Members : Khashayar Fereidani - R3d.w0rm Sina Yazdanmehr - Hadi Kiamarsi Download :...

7.5CVSS5.8AI score0.00997EPSS
SaveExploits2
Prion
Prion
added 2008/12/26 5:30 p.m.21 views

Sql injection

SQL injection vulnerability in blog.php in the Team Impact TI Blog System mod for PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the id parameter...

7.5CVSS9.1AI score0.00997EPSS
SaveExploits2References5
NVD
NVD
added 2008/12/26 5:30 p.m.18 views

CVE-2008-5733

SQL injection vulnerability in blog.php in the Team Impact TI Blog System mod for PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the id parameter...

7.5CVSS8.4AI score0.00997EPSS
SaveExploits2References5
CVE
CVE
added 2008/12/26 5:8 p.m.47 views

CVE-2008-5733

The CVE-2008-5733 entry concerns the Team Impact TI Blog System mod for PHP-Fusion. Affected component: blog.php. The vulnerability is a SQL injection via the id parameter, allowing remote attackers to execute arbitrary SQL commands. Root cause is unsafely handled input in the id parameter. Impac...

7.5CVSS8.4AI score0.00997EPSS
SaveExploits2References5Affected Software1
Cvelist
Cvelist
added 2008/12/26 5:8 p.m.26 views

CVE-2008-5733

SQL injection vulnerability in blog.php in the Team Impact TI Blog System mod for PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the id parameter...

8.4AI score0.00997EPSS
SaveExploits2References5
securityvulns
securityvulns
added 2008/12/26 12:0 a.m.49 views

PHP-Fusion Mod TI - Blog System Sql Injection

PHP-Fusion Mod TI - Blog System Sql Injection AUTHOR : Sina Yazdanmehr R3d.W0rm Discovered by : Sina Yazdanmehr R3d.W0rm Our Site : Http://IRCRASH.COM IRCRASH Team Members : Khashayar Fereidani - R3d.w0rm Sina Yazdanmehr - Hadi Kiamarsi Download :...

2.2AI score
SaveExploits0
seebug.org
seebug.org
added 2008/12/25 12:0 a.m.29 views

PHP-Fusion <= 7.0.2 Remote Blind SQL Injection Exploit

No description provided by source. !/usr/bin/perl -w ------------------------------------------------------- PHP-Fusion = 7.00.2 Remote Blind SQL Injection Exploit by athos - stakerathotmaildotit download on http://php-fusion.co.uk ------------------------------------------------------- Usage: pe...

7.1AI score
SaveExploits0
exploitpack
exploitpack
added 2008/12/24 12:0 a.m.19 views

PHP-Fusion 7.0.2 - Blind SQL Injection

PHP-Fusion 7.0.2 - Blind SQL Injection !/usr/bin/perl -w ------------------------------------------------------- PHP-Fusion = 7.00.2 Remote Blind SQL Injection Exploit by athos - stakerathotmaildotit download on http://php-fusion.co.uk ------------------------------------------------------- Usage...

0.1AI score
SaveExploits0
zdt
zdt
added 2008/12/24 12:0 a.m.30 views

PHP-Fusion <= 7.0.2 Remote Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ====================================================== PHP-Fusion = 7.0.2 Remote Blind SQL Injection Exploit ====================================================== !/usr/bin/perl -w -------------------------------------------------------...

7.1AI score
SaveExploits0
Exploit DB
Exploit DB
added 2008/12/24 12:0 a.m.35 views

PHP-Fusion 7.0.2 - Blind SQL Injection

!/usr/bin/perl -w ------------------------------------------------------- PHP-Fusion = 7.00.2 Remote Blind SQL Injection Exploit by athos - stakerathotmaildotit download on http://php-fusion.co.uk ------------------------------------------------------- Usage: perl xpl.pl host/path prefix userid...

6CVSS5.8AI score0.01485EPSS
SaveExploits3
Prion
Prion
added 2008/12/05 1:30 a.m.29 views

Sql injection

SQL injection vulnerability in messages.php in PHP-Fusion 6.01.15 and 7.00.1, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the subject and msgsend parameters, a different vector than CVE-2005-3157, CVE-2005-3158, CVE-2005-3159, CVE-2005-4005, and...

6.8CVSS8.4AI score0.03629EPSS
SaveExploits11References10Affected Software1
Cvelist
Cvelist
added 2008/12/05 1:0 a.m.31 views

CVE-2008-5335

SQL injection vulnerability in messages.php in PHP-Fusion 6.01.15 and 7.00.1, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the subject and msgsend parameters, a different vector than CVE-2005-3157, CVE-2005-3158, CVE-2005-3159, CVE-2005-4005, and...

8AI score0.02881EPSS
SaveExploits2References10
CVE
CVE
added 2008/12/05 1:0 a.m.49 views

CVE-2008-5335

CVE-2008-5335 describes an SQL injection in PHP-Fusion before remediation: in messages.php, versions 6.01.15 and 7.00.1 allow remote attackers to inject SQL via the subject and msg_send parameters when magic_quotes_gpc is disabled. The root cause is improper handling of user input in these fields...

6.8CVSS8.1AI score0.02881EPSS
SaveExploits2References10Affected Software1
seebug.org
seebug.org
added 2008/11/26 12:0 a.m.162 views

PHP-Fusion messages.php模块SQL注入漏洞

BUGTRAQ ID: 32388 PHP-Fusion是一款基于PHP的内容管理系统。 当sendmessage设置为Send的时候,PHP-Fusion的messages.php文件中没有正确地验证对subject参数的输入便在SQL查询中使用,这允许远程攻击者通过提交恶意请求执行SQL注入攻击。 PHP-Fusion 7.00.1 PHP-Fusion ---------- 目前厂商还没有提供补丁或者升级程序,我们建议使用此软件的用户随时关注厂商的主页以获取最新版本: http://sourceforge.net/projects/php-fusion/ ?php...

6.9AI score
SaveExploits0
NVD
NVD
added 2008/11/21 5:30 p.m.23 views

CVE-2008-5197

SQL injection vulnerability in classifieds.php in PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the lid parameter in a detailadverts action...

7.5CVSS8.3AI score0.04096EPSS
SaveExploits2References4
Rows per page
Query Builder