CVE-2008-1759

CVE-2008-1759 describes an SQL injection in the jeuxflash module for KwsPHP. The vulnerability allows remote attackers to pass arbitrary SQL commands through the cat parameter to index.php, representing a different vector from CVE-2007-4922. The description in the provided documents specifies the...

KwsPHP Module ConcoursPhoto XSS

AUTHOR : H-T Team Script : KwsPHP Module ConcoursPhoto Bug : XSS Dork : inurl:index.php?mod=ConcoursPhoto XPL http://server.com/Path/index.php?mod=ConcoursPhoto&VIEW=XSS = HouSSaMix + ToXiC350 = H-T Team...

kwsphpjeux-sql.txt

KwsPHP Module jeuxflash Remote SQL Injection Exploit AUTHOR : HouSSamix From H-T Team Script : KwsPHP Module jeuxflash Version : last version Bug : Remote SQL Injection Exploit Dork : inurl:index.php?mod=jeuxflash EXPLOITS :...

KwsPHP 1.0 ConcoursPhoto Module - VIEW Cross-Site Scripting

KwsPHP 1.0 ConcoursPhoto Module - VIEW Cross-Site Scripting source: https://www.securityfocus.com/bid/28612/info KwsPHP is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code ...

kwsphpconcor-sql.txt

KwsPHP Module ConcoursPhoto Remote SQL Injection Exploit AUTHOR : Stack-Terrorist v40 Email : [email protected] Home : http://v4-team.com & http://stack-terrorist.com Script : KwsPHP Module ConcoursPhoto Bug : Remote SQL Injection Exploit Dork : inurl:index.php?mod=ConcoursPhoto EXPLOITS :...

kwsphparc-sql.txt

KwsPHP v1.3.456 archivesSQL Injection AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 BLOG : http://my.opera.com/SQL-Injection/blog/ MAiL : [email protected] DORK 1 : allinurl: "index.php?mod=archives" EXPLOiT 1:...

kwsphpgal-sql.txt

KwsPHP v1.3.456 galerieSQL Injection AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 BLOG : http://my.opera.com/SQL-Injection/blog/ MAiL : [email protected] DORK 1 : allinurl: "index.php?mod=galerie"action=gal EXPLOiT :...

KwsPHP 1.0 ConcoursPhoto Module - 'VIEW' Cross-Site Scripting

source: https://www.securityfocus.com/bid/28612/info KwsPHP is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the...

KwsPHP 1.3.456 Module Archives - id SQL Injection

KwsPHP 1.3.456 Module Archives - id SQL Injection KwsPHP v1.3.456 archivesSQL Injection AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 BLOG : http://my.opera.com/SQL-Injection/blog/ MAiL : [email protected] DORK 1 : allinurl: "index.php?mod=archives" EXPLOiT 1:...

KwsPHP Module Galerie (id_gal) Remote SQL Injection Vulnerability

No description provided by source. KwsPHP v1.3.456 galerieSQL Injection AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 BLOG : http://my.opera.com/SQL-Injection/blog/ MAiL : [email protected] DORK 1 : allinurl: "index.php?mod=galerie"action=gal EXPLOiT :...

KwsPHP 1.3.456 Module Galerie - id_gal SQL Injection

KwsPHP 1.3.456 Module Galerie - idgal SQL Injection KwsPHP v1.3.456 galerieSQL Injection AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 BLOG : http://my.opera.com/SQL-Injection/blog/ MAiL : [email protected] DORK 1 : allinurl: "index.php?mod=galerie"action=gal EXPLOiT :...

KwsPHP 1.3.456 Module Archives - 'id' SQL Injection

KwsPHP v1.3.456 archivesSQL Injection AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 BLOG : http://my.opera.com/SQL-Injection/blog/ MAiL : [email protected] DORK 1 : allinurl: "index.php?mod=archives" EXPLOiT 1:...

KwsPHP 1.3.456 Module Galerie - 'id_gal' SQL Injection

KwsPHP v1.3.456 galerieSQL Injection AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 BLOG : http://my.opera.com/SQL-Injection/blog/ MAiL : [email protected] DORK 1 : allinurl: "index.php?mod=galerie"action=gal EXPLOiT :...

KwsPHP Module ConcoursPhoto 2.0 - C_ID SQL Injection

KwsPHP Module ConcoursPhoto 2.0 - CID SQL Injection KwsPHP Module ConcoursPhoto Remote SQL Injection Exploit AUTHOR : Stack-Terrorist v40 Email : [email protected] Home : http://v4-team.com & http://stack-terrorist.com Script : KwsPHP Module ConcoursPhoto Bug : Remote SQL Injection Exploit Dork :...

KwsPHP Module jeuxflash (cat) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================ KwsPHP Module jeuxflash cat Remote SQL Injection Vulnerability ================================================================ KwsPHP Module jeuxflash Remote SQL Injection...

KwsPHP Module ConcoursPhoto (C_ID) SQL Injection Vulnerability

No description provided by source. KwsPHP Module ConcoursPhoto Remote SQL Injection Exploit AUTHOR : Stack-Terrorist v40 Email : [email protected] Home : http://v4-team.com & http://stack-terrorist.com Script : KwsPHP Module ConcoursPhoto Bug : Remote SQL Injection Exploit Dork :...

KwsPHP Module jeuxflash 1.0 - 'cat' SQL Injection

KwsPHP Module jeuxflash Remote SQL Injection Exploit AUTHOR : HouSSamix From H-T Team Script : KwsPHP Module jeuxflash Version : last version Bug : Remote SQL Injection Exploit Dork : inurl:index.php?mod=jeuxflash EXPLOITS :...

KwsPHP Module ConcoursPhoto 2.0 - 'C_ID' SQL Injection

KwsPHP Module ConcoursPhoto Remote SQL Injection Exploit AUTHOR : Stack-Terrorist v40 Email : [email protected] Home : http://v4-team.com & http://stack-terrorist.com Script : KwsPHP Module ConcoursPhoto Bug : Remote SQL Injection Exploit Dork : inurl:index.php?mod=ConcoursPhoto EXPLOITS :...

KwsPHP Module Galerie (id_gal) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================= KwsPHP Module Galerie idgal Remote SQL Injection Vulnerability ================================================================= KwsPHP v1.3.456 galerieSQL Injection DORK 1 ...

KwsPHP Module Archives (id) Remote SQL Injection Vulnerability

No description provided by source. KwsPHP v1.3.456 archivesSQL Injection AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 BLOG : http://my.opera.com/SQL-Injection/blog/ MAiL : [email protected] DORK 1 : allinurl: "index.php?mod=archives" EXPLOiT 1:...