1335 matches found
CVE-2009-2307
CVE-2009-2307 affects MAXdev MDPro (aka MD-Pro) CWGuestBook module 2.1 and earlier. The vulnerability is an SQL injection via the rid parameter in a viewrecords action to modules.php, enabling remote data manipulation as described in the CVE entry. Connected documents corroborate the vulnerabilit...
MD-Pro 1.083.x Survey Module (pollID) Blind SQL Injection Vulnerability
Exploit for unknown platform in category web applications ======================================================================= MD-Pro 1.083.x Survey Module pollID Blind SQL Injection Vulnerability ======================================================================= !Informationschema:...
MD-Pro 1.083.x - Survey Module 'pollID' Blind SQL Injection
!Informationschema: Product: MDPro v 1.083.x site: www.maxdev.com Vuln: Blind $QL Injection pollID Author: XaDoS thanks to S3rg3770 dork: inurl:modules.php?op= "pollID" "Powered By MDPro" Vuln: PollID http://www.site.com/MDPropath/modules.php?name=Surveys&op=results&pollID=SQL or...
Solaris Update for md 116669-36
Check for the Version of md OpenVAS Vulnerability Test Solaris Update for md 116669-36 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of the GNU...
Solaris Update for md 116669-36
Check for the Version of md OpenVAS Vulnerability Test Solaris Update for md 116669-36 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of the GNU...
Solaris Update for md 122371-10
Check for the Version of md OpenVAS Vulnerability Test Solaris Update for md 122371-10 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of the GNU...
Solaris Update for md 122371-10
Check for the Version of md OpenVAS Vulnerability Test Solaris Update for md 122371-10 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of the GNU...
CVE-2008-4602
Directory traversal vulnerability in index.php in Post Affiliate Pro 2.0 allows remote authenticated users to read and possibly execute arbitrary local files via a .. dot dot in the md parameter...
Important: Red Hat Security Advisory: kernel security and bug fix update
Updated kernel packages that fix various security issues and several bugs are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages contain the Linux kernel, the core of any Linux...
kernel security and bug fix update
2.6.18-92.1.13.0.1.el5 - NET Add entropy support to e1000 and bnx2 John Sobecki orabug 6045759 - splice Fix bad unlockpage in error case Jens Axboe orabug 6263574 - NET fix netpoll race Tina Yang orabugz 5791 2.6.18-92.1.13.el5 - md fix crashes in iteraterdev Doug Ledford 460128 455471 - sound...
Joomla Component EasyBook 1.1 (gbid) SQL Injection Exploit
Exploit for unknown platform in category web applications ========================================================== Joomla Component EasyBook 1.1 gbid SQL Injection Exploit ========================================================== !/usr/bin/perl use IO::Socket; use strict; INFO Example: Host:...
Solaris 9 (x86) : 122371-15
SunOS 5.9x86: md Patch. Date this patch was last updated by Sun : Sep/29/11 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...
CVE-2007-5222
CVE-2007-5222 is a SQL injection vulnerability in MAXdev MDPro (MD-Pro) 1.0.76 via a Referer header containing the substring "Firefox ID=", enabling remote attackers to inject arbitrary SQL. The affected component is index.php; root cause is crafted input in Referer header. Impact is partial disc...
MD-Pro 1.0.76 - index.php Firefox ID SQL Injection
MD-Pro 1.0.76 - index.php Firefox ID SQL Injection source: https://www.securityfocus.com/bid/25864/info MD-Pro is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an...
MD-Pro 1.0.76 - 'index.php' Firefox ID SQL Injection
source: https://www.securityfocus.com/bid/25864/info MD-Pro is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the application, access or modi...
CVE-2007-3938
The CVE-2007-3938 entry concerns MAXdev MDPro (MD-Pro) prior to version 1.0.8x (before 20070720) where the index.php topicid parameter in the Topics module is not properly sanitized. The flaw allows an unauthenticated remote attacker to influence SQL queries executed by topics_userapi.php, potent...
MD-Pro < 1.0.82 index.php topicid Parameter SQL Injection
Binary data 4143.prm...
Md-Pro <= 1.0.8x (Topics topicid) Remote SQL Injection Vulnerability
Exploit for unknown platform in category web applications ==================================================================== Md-Pro = 1.0.8x Topics topicid Remote SQL Injection Vulnerability ====================================================================...
Md-Pro 1.0.8x - Topics topicid SQL Injection
Md-Pro 1.0.8x - Topics topicid SQL Injection !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! Site: http://www.maxdev.com Download: http://www.maxdev.com/mod-Areafiles-display-lid-510-cid-1.phtml Dork: "Powered by Md-Pro" !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!...
Md-Pro <= 1.0.8x (Topics topicid) Remote SQL Injection Vulnerability
No description provided by source. !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! Site: http://www.maxdev.com Download: http://www.maxdev.com/mod-Areafiles-display-lid-510-cid-1.phtml Dork: "Powered by Md-Pro" !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!...