MDPro Surveys Module SQL Injection Vulnerability

This host is installed with MDPro and is prone to SQL Injection vulnerability. OpenVAS Vulnerability Test $Id: gbmdprosqlinjvuln.nasl 4869 2016-12-29 11:01:45Z teissa $ MDPro Surveys Module SQL Injection Vulnerability Authors: Nikita MR Copyright: Copyright c 2009 Greenbone Networks GmbH,...

MDPro Surveys Module SQL Injection Vulnerability

MDPro is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MDPro Version Detection

This script detects the installed version of MDPro. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2009-2618

SQL injection vulnerability in the Surveys aka NS-Polls module in MDPro MD-Pro 1.083.x allows remote attackers to execute arbitrary SQL commands via the pollID parameter in a results action to modules.php...

Sql injection

SQL injection vulnerability in the Surveys aka NS-Polls module in MDPro MD-Pro 1.083.x allows remote attackers to execute arbitrary SQL commands via the pollID parameter in a results action to modules.php...

CVE-2009-2618

SQL injection vulnerability in the Surveys aka NS-Polls module in MDPro MD-Pro 1.083.x allows remote attackers to execute arbitrary SQL commands via the pollID parameter in a results action to modules.php...

CVE-2009-2307

SQL injection vulnerability in the CWGuestBook module 2.1 and earlier for MAXdev MDPro aka MD-Pro allows remote attackers to execute arbitrary SQL commands via the rid parameter in a viewrecords action to modules.php...

Sql injection

SQL injection vulnerability in the CWGuestBook module 2.1 and earlier for MAXdev MDPro aka MD-Pro allows remote attackers to execute arbitrary SQL commands via the rid parameter in a viewrecords action to modules.php...

CVE-2009-2307

SQL injection vulnerability in the CWGuestBook module 2.1 and earlier for MAXdev MDPro aka MD-Pro allows remote attackers to execute arbitrary SQL commands via the rid parameter in a viewrecords action to modules.php...

CVE-2009-2307

CVE-2009-2307 affects MAXdev MDPro (aka MD-Pro) CWGuestBook module 2.1 and earlier. The vulnerability is an SQL injection via the rid parameter in a viewrecords action to modules.php, enabling remote data manipulation as described in the CVE entry. Connected documents corroborate the vulnerabilit...

MDPro Module CWGuestBook <= 2.1 Remote SQL Injection Vulnerability

No description provided by source. Author: Dante90, WaRWolFz Crew Title: 0-Day MDPRO CWGuestBook = v2.1 Mod Remote SQL Injection By Dante90 MSN: [email protected] Web: www.warwolfz.org 0-Day MDPRO CWGuestBook = v2.1 Mod Remote SQL Injection By Dante90 code...

MDPro Module CWGuestBook 2.1 - SQL Injection

MDPro Module CWGuestBook 2.1 - SQL Injection Author: Dante90, WaRWolFz Crew Title: 0-Day MDPRO CWGuestBook = v2.1 Mod Remote SQL Injection By Dante90 MSN: [email protected] Web: www.warwolfz.org 0-Day MDPRO CWGuestBook = v2.1 Mod Remote SQL Injection By Dante90 code...

MDPro Module CWGuestBook 2.1 - SQL Injection

Author: Dante90, WaRWolFz Crew Title: 0-Day MDPRO CWGuestBook = v2.1 Mod Remote SQL Injection By Dante90 MSN: [email protected] Web: www.warwolfz.org 0-Day MDPRO CWGuestBook = v2.1 Mod Remote SQL Injection By Dante90 code...

MDPro Module CWGuestBook <= 2.1 Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================== MDPro Module CWGuestBook = 2.1 Remote SQL Injection Vulnerability ================================================================== Author: Dante90, WaRWolFz Crew Title:...

MDPRO CWGuestBook 2.1 SQL Injection

Author: Dante90, WaRWolFz Crew Title: 0-Day MDPRO CWGuestBook = v2.1 Mod Remote SQL Injection By Dante90 MSN: [email protected] Web: www.warwolfz.org 0-Day MDPRO CWGuestBook = v2.1 Mod Remote SQL Injection By Dante90 code...

MD-Pro 1.083.x Blind SQL Injection

!Informationschema: Product: MDPro v 1.083.x site: www.maxdev.com Vuln: Blind $QL Injection pollID Author: XaDoS thanks to S3rg3770 dork: inurl:modules.php?op= "pollID" "Powered By MDPro" Vuln: PollID http://www.site.com/MDPropath/modules.php?name=Surveys&op=results&pollID=SQL or...

MD-Pro 1.083.x Survey Module (pollID) Blind SQL Injection Vulnerability

No description provided by source. !Informationschema: Product: MDPro v 1.083.x site: www.maxdev.com Vuln: Blind $QL Injection pollID Author: XaDoS thanks to S3rg3770 dork: inurl:modules.php?op= "pollID" "Powered By MDPro" Vuln: PollID...

MD-Pro 1.083.x - Survey Module pollID Blind SQL Injection

MD-Pro 1.083.x - Survey Module pollID Blind SQL Injection !Informationschema: Product: MDPro v 1.083.x site: www.maxdev.com Vuln: Blind $QL Injection pollID Author: XaDoS thanks to S3rg3770 dork: inurl:modules.php?op= "pollID" "Powered By MDPro" Vuln: PollID...

MDPro My_eGallery模块pid参数SQL注入漏洞

BUGTRAQ ID: 33871 CVECAN ID: CVE-2009-0728 MDPro是一款开放源码的内容管理系统。 MDPro的index.php文件没有正确地过滤对pid参数的输入参数，如果module设置为MyeGallery且do设置为showpic，远程攻击者就可以通过提交恶意请求执行SQL注入攻击。 MAXdev MyeGallery 3.1.1g 厂商补丁： MAXdev ------ 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...

CVE-2009-0728

SQL injection vulnerability in the MyeGallery module for MAXdev MDPro MD-Pro and Postnuke allows remote attackers to execute arbitrary SQL commands via the pid parameter in a showpic action to index.php...