EUVD-2008-3477

Malware in sbrugna...

Sql injection

SQL injection vulnerability in go.php in Scripts24 iPost 1.0.1 and iTGP 1.0.4 allows remote attackers to execute arbitrary SQL commands via the id parameter in a report action...

CVE-2008-3491

CVE-2008-3491: SQL injection in go.php of Scripts24 iPost 1.0.1 and iTGP 1.0.4 allows remote attackers to execute arbitrary SQL commands via the id parameter in a report action. Affected software is Scripts24 iPost/iTGP; root cause is improper handling of the id parameter leading to SQL injection...

iPost 'go.php' SQL注入漏洞

BUGTRAQ ID: 30504 CNCAN ID：CNCAN-2008080417 iPost是一款基于PHP的WEB应用程序。 iPost不正确处理用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，可能获得敏感信息或操作数据库。 问题由于'go.php'脚本对用户提交给'id'参数缺少过滤，构建恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息或操作数据库。 Scripts24 iPost 1.0.1 目前没有解决方案提供： http://scripts24.com/ipost/index.php...

Scripts24 iPost 1.0.1 (id) Remote SQL Injection Vulnerability

No description provided by source. Viva IslaM Viva IslaM Remote SQL Injection Vulnerability iPOST go.php action www.scripts24.com AuTh0r : Mr.SQL H0ME : WwW.PaL-HaCkEr.CoM & WwW.AtsDp.CoM Email : [email protected] SYRIAN Arab HACkErS -: Exploite :- www.Target.com/go.php?action=report&id= Real id her...

Scripts24 iPost 1.0.1 - 'id' SQL Injection

Viva IslaM Viva IslaM Remote SQL Injection Vulnerability iPOST go.php action www.scripts24.com AuTh0r : Mr.SQL H0ME : WwW.PaL-HaCkEr.CoM & WwW.AtsDp.CoM Email : [email protected] SYRIAN Arab HACkErS -: Exploite :- www.Target.com/go.php?action=report&id= Real id here...

Scripts24 iPost 1.0.1 - id SQL Injection

Scripts24 iPost 1.0.1 - id SQL Injection Viva IslaM Viva IslaM Remote SQL Injection Vulnerability iPOST go.php action www.scripts24.com AuTh0r : Mr.SQL H0ME : WwW.PaL-HaCkEr.CoM & WwW.AtsDp.CoM Email : [email protected] SYRIAN Arab HACkErS -: Exploite :- www.Target.com/go.php?action=report&id= Real ...

ipost-sql.txt

Viva IslaM Viva IslaM Remote SQL Injection Vulnerability iPOST go.php action www.scripts24.com AuTh0r : Mr.SQL H0ME : WwW.PaL-HaCkEr.CoM & WwW.AtsDp.CoM Email : [email protected] SYRIAN Arab HACkErS -: Exploite :- www.Target.com/go.php?action=report&id= Real id here...

Scripts24 iPost 1.0.1 (id) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================= Scripts24 iPost 1.0.1 id Remote SQL Injection Vulnerability ============================================================= Viva IslaM Viva IslaM Remote SQL Injection Vulnerabilit...