CVE-2008-1759

SQL injection vulnerability in the jeuxflash module for KwsPHP allows remote attackers to execute arbitrary SQL commands via the cat parameter to index.php, a different vector than CVE-2007-4922...

CVE-2008-1758

The CVE-2008-1758 entry documents a SQL injection in the ConcoursPhoto module of KwsPHP, exploitable via the C_ID parameter to index.php. Impact is stated as partial confidentiality, integrity, and availability (CVSS v2 base score 7.5). Connected sources (NVD, CVE List, PRION, etc.) confirm remot...

CVE-2008-1759

CVE-2008-1759 describes an SQL injection in the jeuxflash module for KwsPHP. The vulnerability allows remote attackers to pass arbitrary SQL commands through the cat parameter to index.php, representing a different vector from CVE-2007-4922. The description in the provided documents specifies the...

CVE-2008-1757: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in index.php in the ConcoursPhoto module for KwsPHP 1.0 allows remote attackers to inject arbitrary web script or HTML via the VIEW parameter...

CVE-2008-1759: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the jeuxflash module for KwsPHP allows remote attackers to execute arbitrary SQL commands via the cat parameter to index.php, a different vector than CVE-2007-4922...

CVE-2008-1758: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the ConcoursPhoto module for KwsPHP allows remote attackers to execute arbitrary SQL commands via the CID parameter to index.php...

KwsPHP Module ConcoursPhoto XSS

AUTHOR : H-T Team Script : KwsPHP Module ConcoursPhoto Bug : XSS Dork : inurl:index.php?mod=ConcoursPhoto XPL http://server.com/Path/index.php?mod=ConcoursPhoto&VIEW=XSS = HouSSaMix + ToXiC350 = H-T Team...

kwsphparc-sql.txt

KwsPHP v1.3.456 archivesSQL Injection AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 BLOG : http://my.opera.com/SQL-Injection/blog/ MAiL : [email protected] DORK 1 : allinurl: "index.php?mod=archives" EXPLOiT 1:...

kwsphpjeux-sql.txt

KwsPHP Module jeuxflash Remote SQL Injection Exploit AUTHOR : HouSSamix From H-T Team Script : KwsPHP Module jeuxflash Version : last version Bug : Remote SQL Injection Exploit Dork : inurl:index.php?mod=jeuxflash EXPLOITS :...

kwsphpconcor-sql.txt

KwsPHP Module ConcoursPhoto Remote SQL Injection Exploit AUTHOR : Stack-Terrorist v40 Email : [email protected] Home : http://v4-team.com & http://stack-terrorist.com Script : KwsPHP Module ConcoursPhoto Bug : Remote SQL Injection Exploit Dork : inurl:index.php?mod=ConcoursPhoto EXPLOITS :...

KwsPHP 1.0 ConcoursPhoto Module - VIEW Cross-Site Scripting

KwsPHP 1.0 ConcoursPhoto Module - VIEW Cross-Site Scripting source: https://www.securityfocus.com/bid/28612/info KwsPHP is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code ...

kwsphpgal-sql.txt

KwsPHP v1.3.456 galerieSQL Injection AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 BLOG : http://my.opera.com/SQL-Injection/blog/ MAiL : [email protected] DORK 1 : allinurl: "index.php?mod=galerie"action=gal EXPLOiT :...

KwsPHP 1.0 ConcoursPhoto Module - 'VIEW' Cross-Site Scripting

source: https://www.securityfocus.com/bid/28612/info KwsPHP is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the...

KwsPHP 1.3.456 Module Galerie - id_gal SQL Injection

KwsPHP 1.3.456 Module Galerie - idgal SQL Injection KwsPHP v1.3.456 galerieSQL Injection AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 BLOG : http://my.opera.com/SQL-Injection/blog/ MAiL : [email protected] DORK 1 : allinurl: "index.php?mod=galerie"action=gal EXPLOiT :...

KwsPHP Module Galerie (id_gal) Remote SQL Injection Vulnerability

No description provided by source. KwsPHP v1.3.456 galerieSQL Injection AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 BLOG : http://my.opera.com/SQL-Injection/blog/ MAiL : [email protected] DORK 1 : allinurl: "index.php?mod=galerie"action=gal EXPLOiT :...

KwsPHP 1.3.456 Module Archives - id SQL Injection

KwsPHP 1.3.456 Module Archives - id SQL Injection KwsPHP v1.3.456 archivesSQL Injection AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 BLOG : http://my.opera.com/SQL-Injection/blog/ MAiL : [email protected] DORK 1 : allinurl: "index.php?mod=archives" EXPLOiT 1:...

KwsPHP 1.3.456 Module Galerie - 'id_gal' SQL Injection

KwsPHP v1.3.456 galerieSQL Injection AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 BLOG : http://my.opera.com/SQL-Injection/blog/ MAiL : [email protected] DORK 1 : allinurl: "index.php?mod=galerie"action=gal EXPLOiT :...

KwsPHP 1.3.456 Module Archives - 'id' SQL Injection

KwsPHP v1.3.456 archivesSQL Injection AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 BLOG : http://my.opera.com/SQL-Injection/blog/ MAiL : [email protected] DORK 1 : allinurl: "index.php?mod=archives" EXPLOiT 1:...

KwsPHP Module ConcoursPhoto 2.0 - C_ID SQL Injection

KwsPHP Module ConcoursPhoto 2.0 - CID SQL Injection KwsPHP Module ConcoursPhoto Remote SQL Injection Exploit AUTHOR : Stack-Terrorist v40 Email : [email protected] Home : http://v4-team.com & http://stack-terrorist.com Script : KwsPHP Module ConcoursPhoto Bug : Remote SQL Injection Exploit Dork :...

KwsPHP Module ConcoursPhoto (C_ID) SQL Injection Vulnerability

No description provided by source. KwsPHP Module ConcoursPhoto Remote SQL Injection Exploit AUTHOR : Stack-Terrorist v40 Email : [email protected] Home : http://v4-team.com & http://stack-terrorist.com Script : KwsPHP Module ConcoursPhoto Bug : Remote SQL Injection Exploit Dork :...