7216 matches found
Sql injection
SQL injection vulnerability in index.php in Voice Of Web AllMyGuests 0.4.1 allows remote attackers to execute arbitrary SQL commands via the AMGid parameter in a comments action...
CVE-2008-1961
Voice Of Web AllMyGuests 0.4.1 is affected by CVE-2008-1961: an SQL injection in index.php allows remote attackers to execute arbitrary SQL via the AMG_id parameter in the comments action. Root cause: unsanitized AMG_id input in comments processing leads to query manipulation. No remediation deta...
CVE-2008-1961
SQL injection vulnerability in index.php in Voice Of Web AllMyGuests 0.4.1 allows remote attackers to execute arbitrary SQL commands via the AMGid parameter in a comments action...
CVE-2008-1936
CVE-2008-1936 describes an SQL injection in index.php of Classifieds Caffe. The vulnerability is exploitable via the cat_id parameter in an add action, potentially allowing remote attackers to execute arbitrary SQL commands. This may be site-specific; CVSS 2.0 vector indicates network access with...
E RESERV 2.1 (index.php ID_loc) SQL Injection Vulnerability
No description provided by source. ========================================================= =============== JIKI TEAM Maroc And YameN =============== ========================================================= Author : jiko email : [email protected] Home : www.no-back.org Script : E RESERV VERSI...
CVE-2008-1913
CVE-2008-1913 affects Lasernet CMS (versions 1.5 and 1.11) with a vulnerable index.php. When magic_quotes_gpc is disabled, an attacker can inject arbitrary SQL via the new parameter in a new action, enabling remote execution and partial impact on confidentiality/integrity/availability. The NVD li...
Unfixed XSS vulnerability at www.phrozen.biz
Security researcher Michael Ansel, has submitted on 22/04/2008 a cross-site-scripting XSS vulnerability affecting www.phrozen.biz, which at the time of submission ranked 7618089 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 23/04/2008. It is...
WordPress <= 2.3.3 'index.php' Arbitrary File Access
Binary data 4482.prm...
AllMyGuests 0.4.1 - 'AMG_id' SQL Injection
Found by : -=Player=- Contacts : 282-246-419 ICQ Greatz to: LidlosesAuge, Suicide, enco, Free-Hack Script : AllMyGuests Site : http://www.php-resource.net/ Dork : "powered by AllMyGuests" Valnu : index.php Parameter: AMGid Injection:...
AllMyGuests <= 0.4.1 (AMG_id) Remote SQL Injection Vulnerability
Exploit for unknown platform in category web applications ================================================================ AllMyGuests = 0.4.1 AMGid Remote SQL Injection Vulnerability ================================================================ Found by : -=Player=- Greatz to: LidlosesAuge,...
Sql injection
SQL injection vulnerability in index.php in Terong PHP Photo Gallery aka Advanced Web Photo Gallery 1.0 allows remote attackers to execute arbitrary SQL commands via the photoid parameter...
Sql injection
SQL injection vulnerability in Blog Pixel Motion aka Blog PixelMotion allows remote attackers to execute arbitrary SQL commands via the categorie parameter to index.php, possibly related to include/requetesIndex.php...
CVE-2008-1875
Terong PHP Photo Gallery (Advanced Web Photo Gallery) 1.0 has an SQL injection in index.php via the photo_id parameter, enabling remote execution of arbitrary SQL commands. Affected component: index.php in Terong PHP Photo Gallery; root cause: unsafely constructed SQL query parameter. Impact: par...
Classifieds Caffe (index.php cat_id) Remote SQL Injection
--==+=================== Spanish Hackers Team www.spanish-hackers.com =================+==-- --==+ Classifieds Caffe index.php catid Remote SQL Injection +==-- --==+====================================================================================+==-- + JosS + Spanish Hackers Team + Sys -...
Classifieds Caffe (index.php cat_id) SQL Injection Vulnerability
No description provided by source. --==+=================== Spanish Hackers Team www.spanish-hackers.com =================+==-- --==+ Classifieds Caffe index.php catid Remote SQL Injection +==-- --==+====================================================================================+==-- + JosS ...
CVE-2008-1838
SQL injection vulnerability in BosClassifieds Classified Ads System 3.0 allows remote attackers to execute arbitrary SQL commands via the cat parameter to index.php...
Cross site scripting
Cross-site scripting XSS vulnerability in the joomlaXplorer comjoomlaxplorer Mambo/Joomla! component 1.6.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the error parameter in a showerror action to index.php...
CVE-2008-1849
CVE-2008-1849 affects the joomlaXplorer (com_joomlaxplorer) component for Mambo/Joomla! up to version 1.6.2 and earlier. The vulnerability is a directory traversal in index.php, where a .. in the dir parameter of a show_error action can cause listing of arbitrary directories. This is a remote (ne...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in index.php in Poplar Gedcom Viewer 2.0 allow remote attackers to inject arbitrary web script or HTML via the 1 text and 2 ul parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...
CVE-2008-1800
Multiple cross-site scripting XSS vulnerabilities in index.php in DivXDB 2002 0.94b allow remote attackers to inject arbitrary web script or HTML via the 1 choice, 2 page, 3 zoneadmin, 4 generalsearch, and 5 import parameters. NOTE: the provenance of this information is unknown; the details are...