SQL Injection

redaxmedia/redaxscript is vulnerable to SQL injection attacks. Using the searchterms parameters in the searchpost function in includes/search.php, attackers can inject and execute SQL queries...

CVE-2015-1518

SQL injection vulnerability in the searchpost function in includes/search.php in Redaxscript before 2.3.0 allows remote attackers to execute arbitrary SQL commands via the searchterms parameter...

Sql injection

SQL injection vulnerability in the searchpost function in includes/search.php in Redaxscript before 2.3.0 allows remote attackers to execute arbitrary SQL commands via the searchterms parameter...

CVE-2015-1518

SQL injection vulnerability in the searchpost function in includes/search.php in Redaxscript before 2.3.0 allows remote attackers to execute arbitrary SQL commands via the searchterms parameter...

PT-2015-5341

Name of the Vulnerable Software and Affected Versions Redaxscript versions prior to 2.3.0 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the search terms parameter in the search post function, located in includes/search.php. Recommendations F...

CVE-2007-3808: Undefined Security Weakness

SQL injection vulnerability in includes/search.php in paFileDB 3.6 allows remote attackers to execute arbitrary SQL commands via the categories parameter in a search action to index.php, a different vector than CVE-2005-2000...

paFileDB 3.6 - 'search.php' SQL Injection

Site: http://www.phparena.net/pafiledb Description: SQL injection categories in includes/search.php Code: $results = $db-GetArray"SELECT FROM ".$dbPrefix."files WHERE ".$searchin." AND filecatid IN ".implode',',$POST'categories'.""; Comment:"ouuch" SQL: UNION SELECT ALL...