CVE-2007-3055

Cross-site scripting XSS vulnerability in index.php in Codelib Linker 2.0.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the cat parameter...

CVE-2007-3067

Cross-site scripting XSS vulnerability in the Attunement and Key Tracker 0.95 and earlier plugin for EQdkp allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly involving the 1 keyshow, 2 sortkey, and 3 show parameters to index.php...

CVE-2007-3055

CVE-2007-3055 is an XSS vulnerability affecting Codelib Linker 2.0.4 and earlier. The issue is in index.php where the cat parameter can be exploited to inject arbitrary web script or HTML, enabling remote script execution in the victim’s browser. The primary sources (NVD entry) confirm the vulner...

CVE-2007-3052

SQL injection vulnerability in index.php in the PNphpBB2 1.2i and earlier module for PostNuke allows remote attackers to execute arbitrary SQL commands via the c parameter...

Comicsense 0.2 (index.php epi) Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl -w ComicSense 0.2 SQL Injection Exploit Discovered by: s0cratex Payload: Admin Username & Hash Retrieval Website: http://www.w4ck1ng.com Original Advisory: http://seclists.org/bugtraq/2007/Jun/0063.html http://milw0rm.com/exploits/4035 Vulnerable...

linker-xss.txt

Linker index.php - Cross-Site Scripting Vulnerability Vulnerability: http://www.target.com/index.php?cat=3E%22%3E%3CScRiPt%20%0a%0d%3Ealertdocument.cookie%3B%3C/script%3E Vulnerable: All Versions Script : http://enproject.codelib.co.kr ----------------------------------------------- Credits :...

Comicsense 0.2 - index.php?epi SQL Injection (2)

Comicsense 0.2 - index.php?epi SQL Injection 2 !/usr/bin/perl -w ComicSense 0.2 SQL Injection Exploit Discovered by: s0cratex Payload: Admin Username & Hash Retrieval Website: http://www.w4ck1ng.com Original Advisory: http://seclists.org/bugtraq/2007/Jun/0063.html http://milw0rm.com/exploits/4035...

Comicsense 0.2 - 'index.php?epi' SQL Injection (2)

!/usr/bin/perl -w ComicSense 0.2 SQL Injection Exploit Discovered by: s0cratex Payload: Admin Username & Hash Retrieval Website: http://www.w4ck1ng.com Original Advisory: http://seclists.org/bugtraq/2007/Jun/0063.html http://milw0rm.com/exploits/4035 Vulnerable Code index.php: $sqlQuery = "SELECT...

Comicsense 0.2 (index.php epi) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================= Comicsense 0.2 index.php epi Remote SQL Injection Vulnerability ================================================================= Comicsense SQL Injection Advisory/Exploit b...

Design/Logic Flaw

PHP JackKnife PHPJK allows remote attackers to obtain sensitive information via 1 a request to index.php with an invalid value of the iParentUnq parameter, or a request to GDisplay.php with an invalid 2 iCategoryUnq or 3 sSort array parameter, which reveals the path in various error messages...

Sql injection

Multiple SQL injection vulnerabilities in myBloggie 2.1.6 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 catid or 2 year parameter to index.php in a viewuser action, different vectors than CVE-2005-1500 and CVE-2005-4225...

CVE-2007-3003

Multiple SQL injection vulnerabilities in myBloggie 2.1.6 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 catid or 2 year parameter to index.php in a viewuser action, different vectors than CVE-2005-1500 and CVE-2005-4225...

MyBloggie Index.PHP SQL注入漏洞

MyBloggie是一款基于PHP的WEB应用程序。 MyBloggie不正确过滤用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，获得敏感信息。 问题是'Archives.PHPIndex.PHP'脚本对用户提交的WEB参数缺少过滤，提交恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息。 myBloggie myBloggie 2.1.6 myBloggie myBloggie 2.1.5 myBloggie myBloggie 2.1.4 myBloggie myBloggie 2.1.3 Beta myBloggie myBloggie 2.1.3...

Linker index.php - Cross-Site Scripting Vulnerability

Linker index.php - Cross-Site Scripting Vulnerability Vulnerability: http://www.target.com/index.php?cat=3E223E3CScRiPt200a0d3Ealertdocument.cookie3B3C/script3E Vulnerable: All Versions Script : http://enproject.codelib.co.kr ----------------------------------------------- Credits : Vagrant Conta...

Linker 2.0.4 - index.php Cross-Site Scripting

Linker 2.0.4 - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/24277/info Codelib Linker is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary scrip...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in BoastMachine allows remote attackers to inject arbitrary web script or HTML via the blog parameter in a content search action...

CVE-2007-2932

Cross-site scripting XSS vulnerability in index.php in BoastMachine allows remote attackers to inject arbitrary web script or HTML via the blog parameter in a content search action...

Sql injection

SQL injection vulnerability in index.php in the Phil-a-Form comphilaform 1.2.0.0 and earlier component for Joomla! allows remote attackers to execute arbitrary SQL commands via the formid parameter...

CVE-2007-2933

The CVE-2007-2933 entry describes an SQL injection in the Phil-a-Form (com_philaform) Joomla! component. Affected version: 1.2.0.0 and earlier. Vulnerable component is index.php where attacker-supplied form_id can be used to inject and execute arbitrary SQL commands remotely. Impact as stated: pa...

CVE-2007-2932

Cross-site scripting XSS vulnerability in index.php in BoastMachine allows remote attackers to inject arbitrary web script or HTML via the blog parameter in a content search action...