72 matches found
Sql injection
SQL injection vulnerability in mail.php in PHPenpals 1.1 and earlier allows remote attackers to execute arbitrary SQL commands via the ID parameter. NOTE: the profile.php vector is already covered by CVE-2006-0074...
CVE-2009-1814
SQL injection vulnerability in mail.php in PHPenpals 1.1 and earlier allows remote attackers to execute arbitrary SQL commands via the ID parameter. NOTE: the profile.php vector is already covered by CVE-2006-0074...
CVE-2009-1814
CVE-2009-1814 describes an SQL injection in mail.php of PHPenpals (v1.1 and earlier) allowing remote SQL command execution via the ID parameter. Consequences and patch details are not provided here beyond noting that the profile.php vector is covered by CVE-2006-0074; the connected records indica...
CVE-2009-0340
CVE-2009-0340 affects Simple PHP Newsletter 1.5. Multiple directory traversal vulnerabilities allow remote attackers to read arbitrary files via a ".." in the olang parameter to (1) mail.php and (2) mailbar.php. Root cause: improper validation of the olang parameter enables path traversal. Impact...
Simple PHP Newsletter 1.5 Local File Inclusion
--:local file include:-- --------------------------------- script:Simple PHP Newsletter 1.5 ---------------------------------------------- download from:http://quirm.net/download/23/ ---------------------------------------------- ............................................... vul:/mail.php line...
Simple PHP Newsletter 1.5 (olang) Local File Inclusion Vulnerabilities
No description provided by source. --:local file include:-- --------------------------------- script:Simple PHP Newsletter 1.5 ---------------------------------------------- download from:http://quirm.net/download/23/ ----------------------------------------------...
Simple PHP NewsLetter 1.5 - Local File Inclusion
--:local file include:-- --------------------------------- script:Simple PHP Newsletter 1.5 ---------------------------------------------- download from:http://quirm.net/download/23/ ---------------------------------------------- ............................................... vul:/mail.php line...
Sql injection
Multiple SQL injection vulnerabilities in E-Uploader Pro 1.0 aka Uploader PRO, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 id parameter to a img.php, b file.php, c mail.php, d thumb.php, e zip.php, and f zipit.php, and 2 the view parameter t...
CVE-2008-3490
SQL injection vulnerability in members/mail.php in E-topbiz Online Dating 3 1.0 allows remote authenticated users to execute arbitrary SQL commands via the mailid parameter in a veiw action...
Sql injection
SQL injection vulnerability in members/mail.php in E-topbiz Online Dating 3 1.0 allows remote authenticated users to execute arbitrary SQL commands via the mailid parameter in a veiw action...
Sql injection
SQL injection vulnerability in mail.php in boastMachine aka bMachine 3.1 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2008-0422
SQL injection vulnerability in mail.php in boastMachine aka bMachine 3.1 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2008-0422
CVE-2008-0422 describes a SQL injection in boastMachine (aka bMachine)
boastMachine <= 3.1 (mail.php id) SQL Injection Vulnerability
No description provided by source. ...:::::boastMachine =3.1 SQL Injection Vulnerbility ::::.... Virangar Security Team www.virangar.org www.virangar.net -------- Discoverd By :virangar security teamhadihadi special tnx to:MR.nosrati,black.shadowes,MR.hesy,Zahra & all virangar members & all hacke...
boastMachine <= 3.1 (mail.php id) SQL Injection Vulnerability
Exploit for unknown platform in category web applications ============================================================= boastMachine = 3.1 mail.php id SQL Injection Vulnerability ============================================================= ...:::::boastMachine =3.1 SQL Injection Vulnerbility...
BoastMachine 3.1 - mail.php id SQL Injection
BoastMachine 3.1 - mail.php id SQL Injection ...:::::boastMachine =3.1 SQL Injection Vulnerbility ::::.... Virangar Security Team www.virangar.org www.virangar.net -------- Discoverd By :virangar security teamhadihadi special tnx to:MR.nosrati,black.shadowes,MR.hesy,Zahra & all virangar members &...
BoastMachine 3.1 - 'mail.php' id SQL Injection
...:::::boastMachine =3.1 SQL Injection Vulnerbility ::::.... Virangar Security Team www.virangar.org www.virangar.net -------- Discoverd By :virangar security teamhadihadi special tnx to:MR.nosrati,black.shadowes,MR.hesy,Zahra & all virangar members & all hackerz greetz:to my best friend in the...
CVE-2006-5926
Multiple SQL injection vulnerabilities in mail.php in Vallheru before 1.0.7 allow remote attackers to execute arbitrary SQL commands via the 1 id or 2 to parameters. NOTE: some of these details are obtained from third party information...
CVE-2006-5926
CVE-2006-5926 affects Vallheru prior to 1.0.7, where mail.php is vulnerable to SQL injection via the (1) id or (2) to parameters. The issue allows remote attackers to execute arbitrary SQL commands. The description and references indicate this is a database query parameter abuse in the affected s...
CVE-2006-5148
Multiple PHP remote file inclusion vulnerabilities in Forum82 2.5.2b and earlier allow remote attackers to execute arbitrary PHP code via a URL in the repertorylevel parameter including scripts in /forum/ including 1 search.php, 2 message.php, 3 member.php, 4 mail.php, 5 lostpassword.php, 6...