CVE-2008-0733

SQL injection vulnerability in index.php in CS Team Counter Strike Portals allows remote attackers to execute arbitrary SQL commands via the id parameter, as demonstrated using the downloads page...

Sql injection

SQL injection vulnerability in index.php in the Sermon comsermon 0.2 component for Mambo allows remote attackers to execute arbitrary SQL commands via the gid parameter...

Directory traversal

Multiple directory traversal vulnerabilities in sflog! 0.96 allow remote attackers to read arbitrary files via a .. dot dot in the 1 permalink or 2 section parameter to index.php, possibly involving includes/entries.inc.php and other files included by index.php...

Sql injection

SQL injection vulnerability in index.php in BlogPHP 2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter in a page action...

CVE-2008-0703

Multiple directory traversal vulnerabilities in sflog! 0.96 allow remote attackers to read arbitrary files via a .. dot dot in the 1 permalink or 2 section parameter to index.php, possibly involving includes/entries.inc.php and other files included by index.php...

CVE-2008-0721

The CVE-2008-0721 issue affects the Sermon (com_sermon) 0.2 component for Mambo, where an SQL injection is exploitable via the gid parameter in index.php. The vulnerability is described as allowing remote attackers to execute arbitrary SQL commands; CVSS v2 base score 7.5 (HIGH) with Network atta...

CVE-2008-0681

SQL injection vulnerability in index.php in PHPShop 0.8.1 allows remote attackers to execute arbitrary SQL commands via the productid parameter, as demonstrated by a shop/flypage action...

CVE-2008-0686: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in the NeoReferences comneoreferences 1.3.1 and 1.3.3 component for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter...

CVE-2008-0695

Vulnerability (CVE-2008-0695) : SQL injection in BookmarkX script 2007, via index.php showtopic with the topicid parameter. Allows remote arbitrary SQL execution; CVSS v2 base score 7.5 ( HIGH ). Public reference: Exploit-DB item 5040. No explicit remediation/version details present in the provid...

CVE-2008-0703

Multiple directory traversal vulnerabilities in sflog! 0.96 allow remote attackers to read arbitrary files via a .. dot dot in the 1 permalink or 2 section parameter to index.php, possibly involving includes/entries.inc.php and other files included by index.php...

CVE-2008-0690: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in the mosDirectory comdirectory 2.3.2 component for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter in a viewcat action...

CVE-2008-0689: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in the Marketplace commarketplace 1.1.1 and 1.1.1-pl1 component for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter in a showcategory action...

CVE-2008-0695: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in BookmarkX script 2007 allows remote attackers to execute arbitrary SQL commands via the topicid parameter in a showtopic action...

CVE-2008-0679: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in index.php in BlogPHP 2.0 allows remote attackers to inject arbitrary web script or HTML via the search parameter...

CVE-2008-0681: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in PHPShop 0.8.1 allows remote attackers to execute arbitrary SQL commands via the productid parameter, as demonstrated by a shop/flypage action...

CVE-2008-0678: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in BlogPHP 2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter in a page action...

CVE-2008-0721: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in the Sermon comsermon 0.2 component for Mambo allows remote attackers to execute arbitrary SQL commands via the gid parameter...

CVE-2008-0722: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in index.php in Pagetool 1.0.7 allows remote attackers to inject arbitrary web script or HTML via the searchterm parameter in a pagetoolsearch action. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

CVE-2008-0690

The CVE-2008-0690 vulnerability affects Joomla!'s mosDirectory (com_directory) 2.3.2. A SQL injection flaw exists in index.php via the catid parameter in a viewcat action, allowing remote attackers to execute arbitrary SQL commands. The connected sources corroborate that this is a SQL injection i...

csp-sql.txt

COUNTER STRİKE PORTALSKommentare zum Download script download=http://www.phpwelt.de/scripte/Sonstiges/?PHPSESSID=3cfc7efaa4b2a50e397b801526944fe6 AUTHOR : S@BUN HOME : http://www.hackturkiye.com/ MAİL : [email protected] DORK 1 : allinurl: id mode=details "index.php?page=downloads...