121 matches found
CVE-2009-1282
SQL injection vulnerability in private/system/lib-session.php in glFusion 1.1.2 and earlier allows remote attackers to execute arbitrary SQL commands via the glfsession cookie parameter...
CVE-2009-1281
Cross-site scripting XSS vulnerability in glFusion before 1.1.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2009-1281
CVE-2009-1281 describes a cross-site scripting (XSS) vulnerability in glFusion before 1.1.3. The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. According to NVD metrics, the attack has a Network vector, no authentication, and does not affect confiden...
CVE-2009-1282
The provided sources document a concrete SQL injection vulnerability in glFusion
glFusion <= 1.1.2 COM_applyFilter()/cookies Blind SQL Injection Exploit
No description provided by source. ?php / glFusion = 1.1.2 COMapplyFilter/cookies remote blind sql injection exploit by Nine:Situations:Group::bookoo our site: http://retrogod.altervista.org/ software site: http://www.glfusion.org/ google dork: "Page created in" "seconds by glFusion" +RSS Found...
glFusion 1.1.2 - COM_applyFilter()cookies Blind SQL Injection
glFusion 1.1.2 - COMapplyFiltercookies Blind SQL Injection 1 // Check user status $status = SECcheckUserStatus$userid; if $status == USERACCOUNTACTIVE || $status == USERACCOUNTAWAITINGACTIVATION $userloggedin = 1; SESSupdateSessionTime$sessid, $CONF'cookieip'; ... see SESSupdateSessionTime functi...
glFusion <= 1.1.2 COM_applyFilter()/cookies Blind SQL Injection Exploit
Exploit for unknown platform in category web applications ======================================================================= glFusion 1 // Check user status $status = SECcheckUserStatus$userid; if $status == USERACCOUNTACTIVE || $status == USERACCOUNTAWAITINGACTIVATION $userloggedin = 1;...
glFusion 1.1.2 SQL Injection
1 // Check user status $status = SECcheckUserStatus$userid; if $status == USERACCOUNTACTIVE || $status == USERACCOUNTAWAITINGACTIVATION $userloggedin = 1; SESSupdateSessionTime$sessid, $CONF'cookieip'; ... see SESSupdateSessionTime function near lines 418-436: ... function...
glFusion <= 1.1.2 COM_applyFilter()/cookies remote blind sql injection exploit
?php / glFusion = 1.1.2 COMapplyFilter/cookies remote blind sql injection exploit by Nine:Situations:Group::bookoo our site: http://retrogod.altervista.org/ software site: http://www.glfusion.org/ google dork: "Page created in" "seconds by glFusion" +RSS Found another vector of injection in...
glFusion 1.1.2 - 'COM_applyFilter()/cookies' Blind SQL Injection
1 // Check user status $status = SECcheckUserStatus$userid; if $status == USERACCOUNTACTIVE || $status == USERACCOUNTAWAITINGACTIVATION $userloggedin = 1; SESSupdateSessionTime$sessid, $CONF'cookieip'; ... see SESSupdateSessionTime function near lines 418-436: ... function...
glFusion <= 1.1.2 COM_applyFilter()/order sql injection exploit
?php / glFusion = 1.1.2 COMapplyFilter/order sql injection exploit by Nine:Situations:Group::bookoo working against Mysql = 4.1 php.ini independent our site: http://retrogod.altervista.org/ software site: http://www.glfusion.org/ google dork: "Page created in" "seconds by glFusion" +RSS...
glFusion <= 1.1.2 COM_applyFilter()/order SQL Injection Exploit
No description provided by source. ?php / glFusion = 1.1.2 COMapplyFilter/order sql injection exploit by Nine:Situations:Group::bookoo working against Mysql = 4.1 php.ini independent our site: http://retrogod.altervista.org/ software site: http://www.glfusion.org/ google dork: "Page created in"...
glFusion 1.1.2 SQL Injection
= 4.1 php.ini independent our site: http://retrogod.altervista.org/ software site: http://www.glfusion.org/ google dork: "Page created in" "seconds by glFusion" +RSS Vulnerability, sql injection in 'order' and 'direction' arguments: look ExecuteQueries function in...
glFusion 1.1.2 - COM_applyFilter()order SQL Injection
glFusion 1.1.2 - COMapplyFilterorder SQL Injection = 4.1 php.ini independent our site: http://retrogod.altervista.org/ software site: http://www.glfusion.org/ google dork: "Page created in" "seconds by glFusion" +RSS Vulnerability, sql injection in 'order' and 'direction' arguments: look...
glFusion <= 1.1.2 COM_applyFilter()/order SQL Injection Exploit
Exploit for unknown platform in category web applications =============================================================== glFusion = 4.1 php.ini independent google dork: "Page created in" "seconds by glFusion" +RSS Vulnerability, sql injection in 'order' and 'direction' arguments: look...
glFusion 1.1.2 - 'COM_applyFilter()/order' SQL Injection
= 4.1 php.ini independent our site: http://retrogod.altervista.org/ software site: http://www.glfusion.org/ google dork: "Page created in" "seconds by glFusion" +RSS Vulnerability, sql injection in 'order' and 'direction' arguments: look ExecuteQueries function in...
CVE-2009-0455
Cross-site scripting XSS vulnerability in the anonymous comments feature in lib-comment.php in glFusion 1.1.0, 1.1.1, and earlier versions allows remote attackers to inject arbitrary web script or HTML via the username parameter to comment.php...
CVE-2009-0455
The CVE concerns glFusion’s anonymous comments feature. Affected product/version: glFusion 1.1.0, 1.1.1, and earlier. Vulnerability: Cross-site scripting (XSS) in lib-comment.php allowing remote attackers to inject arbitrary web script or HTML via the username parameter to comment.php. Root cause...
CVE-2009-0455
Cross-site scripting XSS vulnerability in the anonymous comments feature in lib-comment.php in glFusion 1.1.0, 1.1.1, and earlier versions allows remote attackers to inject arbitrary web script or HTML via the username parameter to comment.php...
glFusion 1.1 - Anonymous Comment Username HTML Injection
glFusion 1.1 - Anonymous Comment Username HTML Injection source: https://www.securityfocus.com/bid/33683/info glFusion is prone to an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied data. Attacker-supplied HTML or JavaScript code could run in the context of th...