71 matches found
Sql injection
Multiple SQL injection vulnerabilities in Adult Script 1.6.5 and earlier allow remote attackers to execute arbitrary SQL commands via the id parameter to 1 videolinkcount.php or 2 links.php...
CVE-2007-6576
CVE-2007-6576 affects Adult Script 1.6.5 and earlier. It describes multiple SQL injection vulnerabilities allowing remote attackers to execute arbitrary SQL commands via the id parameter to videolink_count.php or links.php. The entry lists CVSS2 base score 7.5 (HIGH) with network access, no authe...
Adult Script 1.6.5 - Multiple SQL Injections
Adult Script 1.6.5 - Multiple SQL Injections --------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg...
CVE-2007-6164
Multiple SQL injection vulnerabilities in Eurologon CMS allow remote attackers to execute arbitrary SQL commands via the id parameter to 1 reviews.php, 2 links.php and 3 articles.php...
PHPBB links.php Remote SQL Injection
No description provided by source. ?php PHPBB links.php Remote SQL Injection By Love Fly thanks Flyh4t,Spr1t3 [email protected] www.cnsst.org / www.sebug.net =phpBB 2.022 use LWP::UserAgent; use HTTP::Request::Common; use Time::HiRes; CONFIGURAZIONE EXPLOIT $sito =...
phpBB links.php SQL注入漏洞
phpBB 是一款基于PHP的WEB应用程序。 phpBB 不正确过滤用户提交的输入,远程攻击者可以利用漏洞进行SQL注入攻击,可获得敏感信息或操作数据库。 问题是links.php脚本对用户提交的cat参数缺少过滤,提交恶意SQL查询作为参数数据,可更改原来的SQL逻辑,获得敏感信息或操作数据库。 http://www.phpbb.com/ http://sebug.net/exploit/2589/...
net-finity (links.php) Remote SQL Injection Vulnerability
|S n I p E r - S A . C o m| SSSSS NNN NN II PPPPPPP EEEEEEEEE RRRRR SS NN NN NN II PP P EE RR RR S NN NN NN II PP P EE RR R SS NN NN NN II PPPPPPP EE RR RR SSSS NN NN NN II PPP EEEEEEE RRRR SS NN NN NN II PP EE RRRR S NN NN NN II PP EE RR RR SS NN NNN II PP EE RR RR SSSSS NN NNN II PP EEEEEEEEEE ...
net-finity - 'links.php' SQL Injection
|S n I p E r - S A . C o m| SSSSS NNN NN II PPPPPPP EEEEEEEEE RRRRR SS NN NN NN II PP P EE RR RR S NN NN NN II PP P EE RR R SS NN NN NN II PPPPPPP EE RR RR SSSS NN NN NN II PPP EEEEEEE RRRR SS NN NN NN II PP EE RRRR S NN NN NN II PP EE RR RR SS NN NNN II PP EE RR RR SSSSS NN NNN II PP EEEEEEEEEE ...
net-finity (links.php) Remote SQL Injection Vulnerability
Exploit for unknown platform in category web applications ========================================================= net-finity links.php Remote SQL Injection Vulnerability ========================================================= SSSSS NNN NN II PPPPPPP EEEEEEEEE RRRRR SS NN NN NN II PP P EE RR R...
net-finity - links.php SQL Injection
net-finity - links.php SQL Injection |S n I p E r - S A . C o m| SSSSS NNN NN II PPPPPPP EEEEEEEEE RRRRR SS NN NN NN II PP P EE RR RR S NN NN NN II PP P EE RR R SS NN NN NN II PPPPPPP EE RR RR SSSS NN NN NN II PPP EEEEEEE RRRR SS NN NN NN II PP EE RRRR S NN NN NN II PP EE RR RR SS NN NNN II PP EE...
phpBB Advanced Links Mod links.php SQL注入漏洞
phpBB Advanced Links Mod是一款基于PHP的WEB应用程序。 phpBB Advanced Links Mod不正确过滤用户提交的输入,远程攻击者可以利用漏洞进行SQL注入攻击,可获得敏感信息或操作数据库。 问题是'links.php'脚本对用户提交的WEB参数缺少过滤,提交恶意SQL查询作为参数数据,可更改原来的SQL逻辑,获得敏感信息或操作数据库。 Advanced Links Mod Advanced Links Mod 1.2.2 目前没有解决方案提供: http://www.phpbb.com/community/viewtopic.php?t=11083...
CVE-2007-4653
CVE-2007-4653 is a SQL injection vulnerability in links.php from the Links MOD (≤1.2.2) used with phpBB ≤2.0.22. The flaw allows remote attackers to modify the start parameter in a search action and execute arbitrary SQL commands. The vulnerability affects the specified combinations (Links MOD ≤1...
CVE-2007-4653
SQL injection vulnerability in links.php in the Links MOD 1.2.2 and earlier for phpBB 2.0.22 and earlier allows remote attackers to execute arbitrary SQL commands via the start parameter in a search action...
phpBB Links MOD 1.2.2 Remote SQL Injection Exploit
Exploit for unknown platform in category web applications ================================================== phpBB Links MOD 1.2.2 Remote SQL Injection Exploit ================================================== !/usr/bin/perl print q phpBB Insert URL = without http = ; $server = ; chop $server;...
CVE-2006-4757
Multiple SQL injection vulnerabilities in the admin section in e107 0.7.5 allow remote authenticated administrative users to execute arbitrary SQL commands via the 1 linkopentype, 2 linkrender, 3 linkclass, and 4 linkid parameters in a links.php; the 5 searchquery parameter in b users.php; and th...
CVE-2006-4598
Multiple SQL injection vulnerabilities in links.php in ssLinks 1.22 allow remote attackers to execute arbitrary SQL commands via the 1 go parameter and 2 id parameter in a rate action...
CVE-2006-4598
Multiple SQL injection vulnerabilities in links.php in ssLinks 1.22 allow remote attackers to execute arbitrary SQL commands via the 1 go parameter and 2 id parameter in a rate action...
Sql injections in e107 [Admin section]
Hi, There are several sql injections in e107 0.7.5 admin section : I The "linkopentype", "linkrender" and "linkclass" parameters are passed to "dbInsert" function without checking : File /e107admin/links.php, Line 496 : $sql-dbInsert"links", "0, '$linkname', '$linkurl', '$linkdescription',...
CVE-2006-4505
NX5Linx 1.0 is affected by CVE-2006-4505: a CRLF injection in links.php allows remote attackers to inject arbitrary HTTP headers and perform HTTP response splitting via the url parameter. The connected sources also describe broader NX5Linkx issues (e.g., link.php exposure and additional vulnerabi...
CVE-2006-3932
Gonafish LinksCaffe 3.0 is affected by a SQL injection in links.php, exploitable via the cat parameter, allowing remote attackers to execute arbitrary SQL commands. The vulnerability is documented in CVE-2006-3932 with notes that provenance is from third-party information. According to the availa...