KwsPHP Module Galerie (id_gal) Remote SQL Injection Vulnerability

No description provided by source. KwsPHP v1.3.456 galerieSQL Injection AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 BLOG : http://my.opera.com/SQL-Injection/blog/ MAiL : [email protected] DORK 1 : allinurl: "index.php?mod=galerie"action=gal EXPLOiT :...

KwsPHP 1.3.456 Module Galerie - 'id_gal' SQL Injection

KwsPHP v1.3.456 galerieSQL Injection AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 BLOG : http://my.opera.com/SQL-Injection/blog/ MAiL : [email protected] DORK 1 : allinurl: "index.php?mod=galerie"action=gal EXPLOiT :...

KwsPHP Module jeuxflash (cat) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================ KwsPHP Module jeuxflash cat Remote SQL Injection Vulnerability ================================================================ KwsPHP Module jeuxflash Remote SQL Injection...

KwsPHP Module ConcoursPhoto 2.0 - 'C_ID' SQL Injection

KwsPHP Module ConcoursPhoto Remote SQL Injection Exploit AUTHOR : Stack-Terrorist v40 Email : [email protected] Home : http://v4-team.com & http://stack-terrorist.com Script : KwsPHP Module ConcoursPhoto Bug : Remote SQL Injection Exploit Dork : inurl:index.php?mod=ConcoursPhoto EXPLOITS :...

KwsPHP Module jeuxflash 1.0 - 'cat' SQL Injection

KwsPHP Module jeuxflash Remote SQL Injection Exploit AUTHOR : HouSSamix From H-T Team Script : KwsPHP Module jeuxflash Version : last version Bug : Remote SQL Injection Exploit Dork : inurl:index.php?mod=jeuxflash EXPLOITS :...

Sql injection

SQL injection vulnerability in login.php in CuteFlow 1.5.0 and 2.10.0 allows remote attackers to execute arbitrary SQL commands via the UserId parameter, related to the login form field in index.php...

Directory traversal

Directory traversal vulnerability in index.php in Sava's GuestBook 2.0 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the action parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third...

Directory traversal

Directory traversal vulnerability in index.php in Sava's Link Manager 2.0 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the q parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third part...

Sql injection

SQL injection vulnerability in index.php in Neat weblog 0.2 allows remote attackers to execute arbitrary SQL commands via the articleId parameter in a show action, probably related to the showArticle function in lib/libarticle.include.php...

CVE-2008-1639

Vulnerability (CVE-2008-1639) in Neat weblog 0.2: an SQL injection flaw in index.php allows remote attackers to modify or retrieve data via the articleId parameter in the show action, likely linked to the showArticle function in lib/lib_article.include.php. The NVD entry records a CVSS v2 base sc...

CVE-2008-1653

CVE-2008-1653 describes a directory traversal vulnerability in the web app Sava’s Link Manager 2.0 . The flaw occurs in index.php , allowing remote attackers to include and execute arbitrary local files by manipulating the q parameter (directory traversal sequences). This is consistently reported...

CVE-2008-1642

The CVE-2008-1642 issue affects Sava’s GuestBook 2.0 (index.php) and is a directory traversal vulnerability that lets remote attackers cause local file inclusion and execution via directory traversal sequences in the action parameter. The root cause is improper validation of the action parameter ...

CVE-2008-1636

CVE-2008-1636 describes a cross-site scripting (XSS) vulnerability in the JV2 Quick Gallery 1.1 product, specifically in index.php via the f parameter. The connected NVD entry confirms the vulnerability allows remote attackers to inject arbitrary script/HTML through the f parameter, indicating in...

CVE-2008-1631

CVE-2008-1631 corresponds to a SQL injection vulnerability in CuteFlow versions 1.5.0 and 2.10.0. The flaw occurs in login.php, related to the UserId parameter used by the login form (indexed in index.php), allowing remote attackers to craft arbitrary SQL commands. Multiple sources (NVD entry, CV...

CVE-2008-1639: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in Neat weblog 0.2 allows remote attackers to execute arbitrary SQL commands via the articleId parameter in a show action, probably related to the showArticle function in lib/libarticle.include.php...

CVE-2008-1636: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in index.php in JV2 Quick Gallery 1.1 allows remote attackers to inject arbitrary web script or HTML via the f parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2008-1649: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in staticpages/easypublish/index.php in EasyNews 4.0 allows remote attackers to inject arbitrary web script or HTML via the read parameter in an edppupublish action...

CVE-2008-1642: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in Sava's GuestBook 2.0 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the action parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third...

CVE-2008-1653: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in Sava's Link Manager 2.0 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the q parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third part...

CVE-2008-1650: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in dynamicpages/index.php in EasyNews 4.0 allows remote attackers to execute arbitrary SQL commands via the read parameter in an edpHelpInternalNews action...