CFAGCMS Remote File Inclusion

www.BugReport.ir AmnPardaz Security Research Team Title: CFAGCMS Remote File Inclusion Vendor: http://sourceforge.net/projects/cfagcms/ Bug: Remote File Inclusion Vulnerable Version: 1 Exploitation: Remote with browser Fix: N/A Original Advisory: http://www.bugreport.ir/index58.htm - Description:...

SFS EZ Gaming Cheats (id) Remote SQL Injection vulnerability

No description provided by source. SFS EZ Gaming Cheats remote sql inj ---------------------------------------------------------- Discovered By: ZoRLu Date: 01.11.2008 Home: www.z0rlu.blogspot.com contact: [email protected] N0T: YALNIZLIK, YiTiRDi ANLAMINI YALNIZLIGIMDA : N0T: a.q kpss :...

SFS EZ Gaming Directory (directory.php id) SQL Injection Vulnerability

No description provided by source. ================================================================================== SFS EZ Gaming Directory directory.php id Remote SQL Injection Vulnerability ================================================================================== / / / / / / / // / /...

SFS EZ Gaming Directory (cat_id) Remote SQL Injection Vulnerability

No description provided by source. Author : BeyazKurt Contact : [email protected] Site : www.khg-crew.ws - KOSOVA HACKERS GROUP LAHEY mahkemesini kiniyoruz. FUCK THE JUSTICE! Script : SFS Gaming Directory Price: $ 24.95 Script Site: http://scripts-for-sites.com/item.php?item=112 D0rk : "sie g...

SFS EZ Gaming Directory - cat_id SQL Injection

SFS EZ Gaming Directory - catid SQL Injection Author : BeyazKurt Contact : [email protected] Site : www.khg-crew.ws - KOSOVA HACKERS GROUP LAHEY mahkemesini kiniyoruz. FUCK THE JUSTICE! Script : SFS Gaming Directory Price: $ 24.95 Script Site: http://scripts-for-sites.com/item.php?item=112 D0...

SFS EZ Gaming Directory - 'directory.php' SQL Injection

================================================================================== SFS EZ Gaming Directory directory.php id Remote SQL Injection Vulnerability ================================================================================== / / / / / / / // / / / / / / / / / / / / // / / / / / /...

SFS EZ Gaming Directory - directory.php SQL Injection

SFS EZ Gaming Directory - directory.php SQL Injection ================================================================================== SFS EZ Gaming Directory directory.php id Remote SQL Injection Vulnerability ================================================================================== /...

SFS EZ Gaming Directory - 'cat_id' SQL Injection

Author : BeyazKurt Contact : [email protected] Site : www.khg-crew.ws - KOSOVA HACKERS GROUP LAHEY mahkemesini kiniyoruz. FUCK THE JUSTICE! Script : SFS Gaming Directory Price: $ 24.95 Script Site: http://scripts-for-sites.com/item.php?item=112 D0rk : "sie go. amk iÅŸinizmi yok xD" SQL...

SFS EZ Gaming Directory (cat_id) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications =================================================================== SFS EZ Gaming Directory catid Remote SQL Injection Vulnerability =================================================================== Author : BeyazKurt LAHEY mahkemesini...

SFS EZ Gaming Directory (directory.php id) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ====================================================================== SFS EZ Gaming Directory directory.php id SQL Injection Vulnerability ======================================================================...

sfsezgaming-sql.txt

================================================================================== SFS EZ Gaming Directory directory.php id Remote SQL Injection Vulnerability ================================================================================== / / / / / / / // / / / / / / / / / / / / // / / / / / /...

CVE-2008-4156

SQL injection vulnerability in print.php in CustomCms CCMS Gaming Portal 4.0, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

SQL injection vulnerability in print.php in CustomCms CCMS Gaming Portal 4.0, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-4156

SQL injection vulnerability in print.php in CustomCms CCMS Gaming Portal 4.0, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-4156

CVE-2008-4156 affects the CustomCms (CCMS) Gaming Portal 4.0. The vulnerability is a SQL injection in print.php via the id parameter when magic_quotes_gpc is disabled. This creates a risk of arbitrary SQL execution by a remote attacker. The available documents do not provide specific affected ver...

CustomCMS CCMS Gaming 'print.php' SQL注入漏洞

BUGTRAQ ID: 30787 CNCAN ID：CNCAN-2008082203 CustomCMS CCMS Gaming是一款基于PHP的WEB应用程序。 CustomCMS CCMS Gaming不正确过滤用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，获得敏感信息或操作数据库。 问题是'print.php'脚本对用户提交的'id'参数缺少过滤，提交恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息或操作数据库。 CustomCms CCMS Gaming 4.0 目前没有解决方案提供： http://customcms.net/index.php...

ccms40-sql.txt

Author: !DoktOR! Date found: 21.08.08 Product: CCMS Gaming Portal Version: 4.0 The price: $55 URL: customcms.net Vulnerability Class: SQL injection print.php Vuln code: $q = mysqlquery"SELECT from ccmsnewscomments WHERE wid='$id'"; magicquotesgpc = Off http://localhost/installdir/ Exploit:...

CustomCMS 4.0 (CCMS) print.php Remote SQL Injection Vulnerability

No description provided by source. Author: !DoktOR! Date found: 21.08.08 Product: CCMS Gaming Portal Version: 4.0 The price: $55 URL: customcms.net Vulnerability Class: SQL injection print.php Vuln code: $q = mysqlquery"SELECT from ccmsnewscomments WHERE wid='$id'"; magicquotesgpc = Off...

CustomCMS 4.0 - print.php SQL Injection

CustomCMS 4.0 - print.php SQL Injection Author: !DoktOR! Date found: 21.08.08 Product: CCMS Gaming Portal Version: 4.0 The price: $55 URL: customcms.net Vulnerability Class: SQL injection print.php Vuln code: $q = mysqlquery"SELECT from ccmsnewscomments WHERE wid='$id'"; magicquotesgpc = Off...

CustomCMS 4.0 - 'print.php' SQL Injection

Author: !DoktOR! Date found: 21.08.08 Product: CCMS Gaming Portal Version: 4.0 The price: $55 URL: customcms.net Vulnerability Class: SQL injection print.php Vuln code: $q = mysqlquery"SELECT from ccmsnewscomments WHERE wid='$id'"; magicquotesgpc = Off http://localhost/installdir/ Exploit:...