CVE-2008-4353

CVE-2008-4353 describes an SQL injection vulnerability in the Linkarity product, specifically in the link.php script where the cat_id parameter is unsafely used in SQL queries. The issue allows remote attackers to execute arbitrary SQL commands against the vulnerable system. The description notes...

CVE-2008-4353: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in link.php in Linkarity allows remote attackers to execute arbitrary SQL commands via the catid parameter. NOTE: although one component of Linkarity is distributable PHP code, this issue might be site-specific. If so, it should not be included in CVE...

linkarity-sql.txt

================================================================================ Linkarity link.php Remote SQL Injection Vulnerability ================================================================================ Discovered By: Egypt Coder home : WWW.Sec-Area.com Mail: [email protected]...

Links Pile - 'link.php' SQL Injection

source: https://www.securityfocus.com/bid/29223/info Links Pile is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify...

Pligg CMS 9.9.0 - Cross-Site Scripting Local File Inclusion SQL Injection

Pligg CMS 9.9.0 - Cross-Site Scripting Local File Inclusion SQL Injection GulfTech Security Research July 30, 2008 Vendor : Pligg LLC URL : http://www.pligg.com/ Version : Pligg alertdocument.cookie; The above example link would display the end users cookie to them. Of course this can also be use...

Linkspile - cat_id SQL Injection

Linkspile - catid SQL Injection Remote SQL Injection Vulnerabilities Linkspile link.php Author : HaCkeREgY C0NTACT : [email protected] H^OME : www.PAL-HaCkeR.com & ATSDP.COM Script Name : Linkspile Download : http://www.linkspile.com Price : $399.00 ======= Buy iT :...

CVE-2008-2096: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in BackLinkSpider allows remote attackers to execute arbitrary SQL commands via the catid parameter to a site-specific component name such as link.php or backlinkspider.php...

Sql injection

SQL injection vulnerability in suggest-link.php in eSyndiCat Link Exchange Script allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2007-6543: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in suggest-link.php in eSyndiCat Link Exchange Script allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2006-4503

NX5Linx/NX5Linkx 1.0 is affected by CVE-2006-4503 due to a directory traversal in link.php where the logo parameter is not sanitized, allowing an attacker to read arbitrary files on the server. The vulnerability is confirmed in publicly shared advisories for NX5Linkx (eVuln EV0138) which lists NX...

CVE-2006-4503: Undefined Security Weakness

Directory traversal vulnerability in link.php in NX5Linx 1.0 allows remote attackers to read arbitrary files via the logo parameter...

CVE-2005-4221: Undefined Security Weakness

SQL injection vulnerability in link.php in Arab Portal System 2 Beta 2 allows remote attackers to execute arbitrary SQL commands via the 1 PHPSESSID session ID or 2 REQUESTURI query string...

Arab Portal 2.0 - 'Link.php' SQL Injection

source: https://www.securityfocus.com/bid/15820/info Arab Portal is prone to multiple SQL injection vulnerabilities. These are due to a lack of proper sanitization of user-supplied input before using it in an SQL query. Successful exploitation could result in a compromise of the application,...