CVE-2008-1758

The CVE-2008-1758 entry documents a SQL injection in the ConcoursPhoto module of KwsPHP, exploitable via the C_ID parameter to index.php. Impact is stated as partial confidentiality, integrity, and availability (CVSS v2 base score 7.5). Connected sources (NVD, CVE List, PRION, etc.) confirm remot...

KwsPHP Module ConcoursPhoto XSS

AUTHOR : H-T Team Script : KwsPHP Module ConcoursPhoto Bug : XSS Dork : inurl:index.php?mod=ConcoursPhoto XPL http://server.com/Path/index.php?mod=ConcoursPhoto&VIEW=XSS = HouSSaMix + ToXiC350 = H-T Team...

KwsPHP 1.0 ConcoursPhoto Module - VIEW Cross-Site Scripting

KwsPHP 1.0 ConcoursPhoto Module - VIEW Cross-Site Scripting source: https://www.securityfocus.com/bid/28612/info KwsPHP is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code ...

KwsPHP 1.0 ConcoursPhoto Module - 'VIEW' Cross-Site Scripting

source: https://www.securityfocus.com/bid/28612/info KwsPHP is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the...

kwsphpgal-sql.txt

KwsPHP v1.3.456 galerieSQL Injection AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 BLOG : http://my.opera.com/SQL-Injection/blog/ MAiL : [email protected] DORK 1 : allinurl: "index.php?mod=galerie"action=gal EXPLOiT :...

kwsphpjeux-sql.txt

KwsPHP Module jeuxflash Remote SQL Injection Exploit AUTHOR : HouSSamix From H-T Team Script : KwsPHP Module jeuxflash Version : last version Bug : Remote SQL Injection Exploit Dork : inurl:index.php?mod=jeuxflash EXPLOITS :...

kwsphparc-sql.txt

KwsPHP v1.3.456 archivesSQL Injection AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 BLOG : http://my.opera.com/SQL-Injection/blog/ MAiL : [email protected] DORK 1 : allinurl: "index.php?mod=archives" EXPLOiT 1:...

kwsphpconcor-sql.txt

KwsPHP Module ConcoursPhoto Remote SQL Injection Exploit AUTHOR : Stack-Terrorist v40 Email : [email protected] Home : http://v4-team.com & http://stack-terrorist.com Script : KwsPHP Module ConcoursPhoto Bug : Remote SQL Injection Exploit Dork : inurl:index.php?mod=ConcoursPhoto EXPLOITS :...

KwsPHP 1.3.456 Module Archives - id SQL Injection

KwsPHP 1.3.456 Module Archives - id SQL Injection KwsPHP v1.3.456 archivesSQL Injection AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 BLOG : http://my.opera.com/SQL-Injection/blog/ MAiL : [email protected] DORK 1 : allinurl: "index.php?mod=archives" EXPLOiT 1:...

KwsPHP Module jeuxflash 1.0 - cat SQL Injection

KwsPHP Module jeuxflash 1.0 - cat SQL Injection KwsPHP Module jeuxflash Remote SQL Injection Exploit AUTHOR : HouSSamix From H-T Team Script : KwsPHP Module jeuxflash Version : last version Bug : Remote SQL Injection Exploit Dork : inurl:index.php?mod=jeuxflash EXPLOITS :...

KwsPHP Module jeuxflash (cat) Remote SQL Injection Vulnerability

No description provided by source. KwsPHP Module jeuxflash Remote SQL Injection Exploit AUTHOR : HouSSamix From H-T Team Script : KwsPHP Module jeuxflash Version : last version Bug : Remote SQL Injection Exploit Dork : inurl:index.php?mod=jeuxflash EXPLOITS :...

KwsPHP Module jeuxflash 1.0 - 'cat' SQL Injection

KwsPHP Module jeuxflash Remote SQL Injection Exploit AUTHOR : HouSSamix From H-T Team Script : KwsPHP Module jeuxflash Version : last version Bug : Remote SQL Injection Exploit Dork : inurl:index.php?mod=jeuxflash EXPLOITS :...

KwsPHP 1.3.456 Module Galerie - 'id_gal' SQL Injection

KwsPHP v1.3.456 galerieSQL Injection AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 BLOG : http://my.opera.com/SQL-Injection/blog/ MAiL : [email protected] DORK 1 : allinurl: "index.php?mod=galerie"action=gal EXPLOiT :...

KwsPHP Module Galerie (id_gal) Remote SQL Injection Vulnerability

No description provided by source. KwsPHP v1.3.456 galerieSQL Injection AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 BLOG : http://my.opera.com/SQL-Injection/blog/ MAiL : [email protected] DORK 1 : allinurl: "index.php?mod=galerie"action=gal EXPLOiT :...

KwsPHP Module Galerie (id_gal) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================= KwsPHP Module Galerie idgal Remote SQL Injection Vulnerability ================================================================= KwsPHP v1.3.456 galerieSQL Injection DORK 1 ...

KwsPHP Module Archives (id) Remote SQL Injection Vulnerability

No description provided by source. KwsPHP v1.3.456 archivesSQL Injection AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 BLOG : http://my.opera.com/SQL-Injection/blog/ MAiL : [email protected] DORK 1 : allinurl: "index.php?mod=archives" EXPLOiT 1:...

KwsPHP 1.3.456 Module Archives - 'id' SQL Injection

KwsPHP v1.3.456 archivesSQL Injection AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 BLOG : http://my.opera.com/SQL-Injection/blog/ MAiL : [email protected] DORK 1 : allinurl: "index.php?mod=archives" EXPLOiT 1:...

KwsPHP Module ConcoursPhoto 2.0 - 'C_ID' SQL Injection

KwsPHP Module ConcoursPhoto Remote SQL Injection Exploit AUTHOR : Stack-Terrorist v40 Email : [email protected] Home : http://v4-team.com & http://stack-terrorist.com Script : KwsPHP Module ConcoursPhoto Bug : Remote SQL Injection Exploit Dork : inurl:index.php?mod=ConcoursPhoto EXPLOITS :...

KwsPHP Module ConcoursPhoto (C_ID) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================== KwsPHP Module ConcoursPhoto CID SQL Injection Vulnerability ============================================================== KwsPHP Module ConcoursPhoto Remote SQL Injection...

KwsPHP 1.3.456 Module Galerie - id_gal SQL Injection

KwsPHP 1.3.456 Module Galerie - idgal SQL Injection KwsPHP v1.3.456 galerieSQL Injection AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 BLOG : http://my.opera.com/SQL-Injection/blog/ MAiL : [email protected] DORK 1 : allinurl: "index.php?mod=galerie"action=gal EXPLOiT :...