12 matches found
EUVD-2007-4937
Malware in sbrugna...
EUVD-2007-4960
Malware in sbrugna...
CVE-2008-1757
Cross-site scripting XSS vulnerability in index.php in the ConcoursPhoto module for KwsPHP 1.0 allows remote attackers to inject arbitrary web script or HTML via the VIEW parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in index.php in the ConcoursPhoto module for KwsPHP 1.0 allows remote attackers to inject arbitrary web script or HTML via the VIEW parameter...
CVE-2008-1757
CVE-2008-1757 describes a Cross-site Scripting (XSS) vulnerability in the index.php of the ConcoursPhoto module for KwsPHP 1.0, where the VIEW parameter can be abused to inject arbitrary script/HTML. Affected software is KwsPHP 1.0 with the ConcoursPhoto module; root cause is improper handling of...
KwsPHP 1.0 mg2 Module - SQL Injection
-------------------- KwsPHP 1.0 mg2 Module Remote SQL Injection Exploit -------------------- Found : xoron -------------------- Exploit: Name: index.php?mod=mg2&album=-1//union//select//0,1,pseudo,3,4,5//from//users//where//id=1/ Pass:...
CVE-2007-4979
SQL injection vulnerability in index.php in the sondages module in KwsPHP 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter in a results action, a different module than CVE-2007-4956.2...
Sql injection
Multiple SQL injection vulnerabilities in KwsPHP 1.0 allow remote attackers to execute arbitrary SQL commands via 1 the pseudo parameter to login.php, 2 the id parameter to index.php in a carnet editer action in the MemberSpace espacemembre module, or 3 the typenav parameter to index.php in a...
CVE-2007-4956
Multiple SQL injection vulnerabilities in KwsPHP 1.0 allow remote attackers to execute arbitrary SQL commands via 1 the pseudo parameter to login.php, 2 the id parameter to index.php in a carnet editer action in the MemberSpace espacemembre module, or 3 the typenav parameter to index.php in a...
CVE-2007-4956
Multiple SQL injection vulnerabilities in KwsPHP 1.0 allow remote attackers to execute arbitrary SQL commands via 1 the pseudo parameter to login.php, 2 the id parameter to index.php in a carnet editer action in the MemberSpace espacemembre module, or 3 the typenav parameter to index.php in a...
KwsPHP 1.0 stats Module - SQL Injection
KwsPHP 1.0 stats Module - SQL Injection Script..........................: KwsPHP ver 1.0 stats Module Script Site..................: http://kws.koogar.org/ Vulnerability...............: Remote SQL injection Exploit Access.........................: Remote level.............................:...
KwsPHP 1.0 - 'login.php' SQL Injection
Script..........................: KwsPHP ver 1.0 Script Site..................: http://kws.koogar.org/ Vulnerability...............: login.php Remote SQL injection Exploit Access.........................: Remote level.............................: Dangerous Author..........................: S4mi...