KTP Computer Customer Database CMS 1.0 - Blind SQL Injection Vulnerability

No description provided by source. ================================================ KTPCCD CMS Blind SQL Injection Vulnerability ================================================ ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team...

Directory traversal

Directory traversal vulnerability in KTP Computer Customer Database KTPCCD CMS, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the p parameter to the default URI...

Sql injection

SQL injection vulnerability in KTP Computer Customer Database KTPCCD CMS, when magicquotesgpc is disabled, allows remote authenticated users to execute arbitrary SQL commands via the tid parameter in a vtech action to the default URI...

CVE-2008-5954

SQL injection vulnerability in KTP Computer Customer Database KTPCCD CMS, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the lname parameter in a login action to an unspecified component. NOTE: the provenance of this information is unknown; the...

CVE-2008-5952

SQL injection vulnerability in KTP Computer Customer Database KTPCCD CMS, when magicquotesgpc is disabled, allows remote authenticated users to execute arbitrary SQL commands via the tid parameter in a vtech action to the default URI...

CVE-2008-5953

Directory traversal vulnerability in KTP Computer Customer Database KTPCCD CMS, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the p parameter to the default URI...

CVE-2008-5952

The CVE-2008-5952 entry describes an SQL injection in the KTP Computer Customer Database (KTPCCD) CMS. When magic_quotes_gpc is disabled, remote authenticated users can inject arbitrary SQL via the tid parameter in a vtech action to the default URI. Affected software: KTPCCD CMS (KTP Computer Cus...

CVE-2008-5953: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in KTP Computer Customer Database KTPCCD CMS, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the p parameter to the default URI...

CVE-2008-5954: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in KTP Computer Customer Database KTPCCD CMS, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the lname parameter in a login action to an unspecified component. NOTE: the provenance of this information is unknown; the...

KTP Computer Customer Database CMS 1.0 - Blind SQL Injection

================================================ KTPCCD CMS Blind SQL Injection Vulnerability ================================================ ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team .. +---------------------------^----------| ,-------, ...