CVE-2009-5094: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in info.php in CMS Faethon 2.2.0 Ultimate allows remote attackers to execute arbitrary SQL commands via the item parameter...

cgcraft llc (info.php?id) (news_item.php?id) Remote SQL injection Vulnerability

IRANIAN THE BEST HACKERS IN THE WORLD Remote SQL injection Vulnerability cgcraft llc info.php?id newsitem.php?id AuTh0r : EhsanHp200 H0ME : www.ehsanhp.blogsky.com Email : [email protected] Vendor : http://www.cgcraft.com/ Persian Gulf 4 Ever! Dork : "website by cgCraft llc"...

cgcraft llc (info.php?id) (news_item.php?id) Remote SQL injection

No description provided by source. IRANIAN THE BEST HACKERS IN THE WORLD \ Remote SQL injection Vulnerability cgcraft llc info.php?id newsitem.php?id AuTh0r : EhsanHp200 H0ME : www.ehsanhp.blogsky.com Email : [email protected] Vendor : http://www.cgcraft.com/ Persian Gulf 4 Ever! Dork :...

Travel411 - SQL Injection

Travel411 - SQL Injection ===================================================================== . . . . | | ||/ | || | / / \ / /\ | | / | \ \ | |/ | \ / | || | // | / // | \ /\ | /|//|||| |\ | / /|| / Exploit-ID is the Indonesian Exploit Archive Web : exploit-id.com e-mail :...

Travel411 - SQL Injection

===================================================================== . . . . | | ||/ | || | / / \ / /\ | | / | \ \ | |/ | \ / | || | // | / // | \ /\ | /|//|||| |\ | / /|| / Exploit-ID is the Indonesian Exploit Archive Web : exploit-id.com e-mail : rootatexploit-id.com Caddy-Dz , member...

CVE-2010-2905

SQL injection vulnerability in info.php in ScriptsFeed and BrotherScripts BS Scripts Directory allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2010-2905

SQL injection vulnerability in info.php in ScriptsFeed and BrotherScripts BS Scripts Directory allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2010-2905

CVE-2010-2905 is a SQL injection vulnerability affecting the ScriptsFeed and BrotherScripts (BS) Scripts Directory, exploitable via the id parameter in info.php and allowing remote execution of arbitrary SQL commands. The CVE has corroborating entries in multiple sources (NVD, CVE list, PRION) de...

CVE-2010-2905: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in info.php in ScriptsFeed and BrotherScripts BS Scripts Directory allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2009-4961

CVE-2009-4961 affects Lanai Core 0.6. Affected component: info.php that calls phpinfo, enabling remote attackers to disclose configuration information. Impact is information disclosure (no integrity/availability impact stated). No remediation details are provided in the trusted documents; upgradi...

CVE-2009-4961: Exposure of Sensitive Information to an Unauthorized Actor

Lanai Core 0.6 allows remote attackers to obtain configuration information via a direct request to info.php, which calls the phpinfo function...

BS Scripts Directory - 'info.php' SQL Injection

Exploit Title: BS Script Directory remote SQL injection vulnerability Date: 15th july 2010 Author: D4rk357 Critical:high contact:d4rk357atyahoodotin Price : 24.95 $ Software Link:http://www.brotherscripts.com/productinfo.php?productsid=454 Greetz to :b0nd, Fbih2s,Beenu,rockey killer,The empty,...

CVE-2009-3153: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in x10 MP3 Search engine 1.6.5 allow remote attackers to inject arbitrary web script or HTML via the 1 picid parameter to includes/videoad.php, 2 category parameter to linkvideoslisting.php, id parameter to 3 templates/header1.php and 4...

CVE-2008-6655

Multiple cross-site scripting XSS vulnerabilities in GEDCOMTOMYSQL 2 allow remote attackers to inject arbitrary web script or HTML via the 1 nombranche and 2 nom parameters to php/prenom.php; the 3 nombranche parameter to php/index.php; and the 4 nombranche, 5 nom, and 6 prenom parameters to...

CVE-2008-6655: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in GEDCOMTOMYSQL 2 allow remote attackers to inject arbitrary web script or HTML via the 1 nombranche and 2 nom parameters to php/prenom.php; the 3 nombranche parameter to php/index.php; and the 4 nombranche, 5 nom, and 6 prenom parameters to...

CVE-2008-6467: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in jobs/jobseekers/job-info.php in Diesel Job Site allows remote attackers to execute arbitrary SQL commands via the jobid parameter...

CVE-2008-6225

CVE-2008-6225 concerns a SQL injection vulnerability in the Mole Group Airline Ticket Sale Script, specifically in info.php where the flight parameter can be exploited to execute arbitrary SQL commands. This is reported across multiple sources as a vulnerability allowing remote attackers to run a...

CVE-2008-6225: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in info.php in Mole Group Airline Ticket Sale Script allows remote attackers to execute arbitrary SQL commands via the flight parameter. NOTE: the vendor has disputed this issue, stating "crazy hackers and so named Security companies spread out such false informations...

CVE-2008-6159

Content Management Made Easy (CMME) 1.19 is affected by an information disclosure vulnerability where a direct request to info.php invokes phpinfo, allowing remote attackers to obtain system information. The flaw is triggered by accessing the info.php entry point, and the underlying cause is the ...

CVE-2008-6159: Exposure of Sensitive Information to an Unauthorized Actor

Content Management Made Easy CMME 1.19 allows remote attackers to obtain system information via a direct request to info.php, which invokes the phpinfo function...