CVE-2008-1644

The vulnerability is in Sava’s Link Manager 2.0, specifically in viewlinks.php. It is a SQL injection flaw exploitable via the category parameter, enabling remote attackers to execute arbitrary SQL commands. The description does not provide patch or remediation details, and no exploitation status...

CVE-2008-1653

CVE-2008-1653 describes a directory traversal vulnerability in the web app Sava’s Link Manager 2.0 . The flaw occurs in index.php , allowing remote attackers to include and execute arbitrary local files by manipulating the q parameter (directory traversal sequences). This is consistently reported...

JiRos Link Manager 1.0 - 'viewlinks.asp?categoryId' SQL Injection

source: https://www.securityfocus.com/bid/21226/info JiRos Links Manager is prone to multiple input-validation vulnerabilities, including SQL- and HTML-injection issues, because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to steal...

WordPress 1.2.x SQL Injection Advisory

Module: wp-admin/link-manager.php Bug Type: SQL-Injection Example: http://wordpress-site.org/wp-admin/link-manager.php?linkid=3133720UNION20SELECT20ID 20as20linkid,userlogin20AS20linkurl,userpass20AS20linkname,NU LL,NULL,NULL, NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL20FROM20wpusers20WHERE...