iGaming CMS SQL注入漏洞

BUGTRAQ ID: 31340 CNCAN ID：CNCAN-2008092402 iGaming CMS是一款基于PHP的WEB应用程序。 iGaming CMS不正确处理用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，可能获得敏感信息或操作数据库。 问题由于脚本对用户提交给WEB参数缺少过滤，构建恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息或操作数据库。 iGaming 1.5 目前没有解决方案提供： http://www.igamingcms.com/ http://www.sebug.net/exploit/4691/...

igamingcms-sql.txt

!/usr/bin/perl ---------------------------------------------------------- iGaming agent"Mozilla/4.5 en Win95; U"; $http-timeout1; if$host ! /^http://.+?$/ print "? iGaming CMS get$host.'/previews.php?browse='.$exec; $two = $http-get$host.'/reviews.php?browse='.$exec; $xxx =...

iGaming CMS <= 1.5 Multiple Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl ---------------------------------------------------------- iGaming = 1.5 Multiple Remote SQL Injection Exploit Perl Exploit - Output: id:admin:password Discovered On: 23/09/2008 Discovered By: StAkeR - StAkeRathotmaildotit Proud To Be Italian...

iGaming CMS 1.5 - Multiple SQL Injections

!/usr/bin/perl ---------------------------------------------------------- iGaming agent"Mozilla/4.5 en Win95; U"; $http-timeout1; if$host ! /^http://.+?$/ print "? iGaming CMS get$host.'/previews.php?browse='.$exec; $two = $http-get$host.'/reviews.php?browse='.$exec; $xxx =...

iGaming CMS <= 1.5 Multiple Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ======================================================== iGaming CMS agent"Mozilla/4.5 en Win95; U"; $http-timeout1; if$host ! /^http://.+?$/ print "? iGaming CMS get$host.'/previews.php?browse='.$exec; $two =...

iGaming CMS 1.5 - Multiple SQL Injections

iGaming CMS 1.5 - Multiple SQL Injections !/usr/bin/perl ---------------------------------------------------------- iGaming agent"Mozilla/4.5 en Win95; U"; $http-timeout1; if$host ! /^http://.+?$/ print "? iGaming CMS get$host.'/previews.php?browse='.$exec; $two =...

Sql injection

SQL injection vulnerability in pollvote.php in iGaming CMS 1.5 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-2130

SQL injection vulnerability in pollvote.php in iGaming CMS 1.5 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-2130

SQL injection vulnerability in pollvote.php in iGaming CMS 1.5 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-2130

Affected software: iGaming CMS 1.5. The vulnerability is a SQL injection in poll_vote.php reachable via the id parameter, causing arbitrary SQL execution as described in CVE-2008-2130. The available documents confirm the flaw’s existence and impact but do not provide exploit code, specific exploi...

CVE-2008-2130: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in pollvote.php in iGaming CMS 1.5 allows remote attackers to execute arbitrary SQL commands via the id parameter...

iGaming CMS 1.5 - 'poll_vote.php' SQL Injection

source: https://www.securityfocus.com/bid/29059/info iGaming CMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify...

iGaming CMS 1.5 - poll_vote.php SQL Injection

iGaming CMS 1.5 - pollvote.php SQL Injection source: https://www.securityfocus.com/bid/29059/info iGaming CMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...

Sql injection

SQL injection vulnerability in archive.php in iGaming 1.5, and 1.3.1 and earlier, allows remote attackers to execute arbitrary SQL commands via the section parameter...

CVE-2008-0255

SQL injection vulnerability in archive.php in iGaming 1.5, and 1.3.1 and earlier, allows remote attackers to execute arbitrary SQL commands via the section parameter...

CVE-2008-0255

SQL injection vulnerability in archive.php in iGaming 1.5, and 1.3.1 and earlier, allows remote attackers to execute arbitrary SQL commands via the section parameter...

CVE-2008-0255

CVE-2008-0255 affects iGaming archive.php vulnerable versions 1.5 and 1.3.1 and earlier. The root cause is an SQL injection via the section parameter, allowing remote attackers to execute arbitrary SQL commands. Impact per sources is partial confidentiality, integrity, and availability. The NVD e...

CVE-2008-0255: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in archive.php in iGaming 1.5, and 1.3.1 and earlier, allows remote attackers to execute arbitrary SQL commands via the section parameter...

iGaming CMS 1.3.11.5 - SQL Injection

iGaming CMS 1.3.11.5 - SQL Injection !/usr/bin/perl use Tk; use Tk::BrowseEntry; use Tk::DialogBox; use LWP::UserAgent; $mw = new MainWindowtitle = "UnderWHAT?!" ; $mw-geometry '395x180' ; $mw-resizable0,0; $mw-Label-text = '', -font = 'Verdana 2',-foreground='red'-pack; $mw-Label-text = 'iGaming...

iGaming CMS 1.3.1/1.5 - SQL Injection

!/usr/bin/perl use Tk; use Tk::BrowseEntry; use Tk::DialogBox; use LWP::UserAgent; $mw = new MainWindowtitle = "UnderWHAT?!" ; $mw-geometry '395x180' ; $mw-resizable0,0; $mw-Label-text = '', -font = 'Verdana 2',-foreground='red'-pack; $mw-Label-text = 'iGaming cms 'Tahoma 7...