nitrotech 0.0.3a (rfi/sql) Multiple Vulnerabilities

No description provided by source. Name: Nitrotech 0.0.3a Multiple Remote Vulnerabilities Download: http://sourceforge.net/project/downloading.php?groupname=nitrotech&filename=nitrotech003a.zip&usemirror=garr Author: Osirys, thanks to x0r Contact: [email protected] Nitrotech cms is vulnerable to...

Sql injection

SQL injection vulnerability in members.php in PHPBridges allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2012-6525

The CVE-2012-6525 entry concerns a SQL injection in PHPBridges’ members.php that allows remote attackers to execute arbitrary SQL via the id parameter. Affected software component: PHPBridges (members.php). Root cause: input handling elsewhere in the code accepts id as-is, enabling injection; exp...

CVE-2011-5200

Multiple SQL injection vulnerabilities in DeDeCMS, possibly 5.6, allow remote attackers to execute arbitrary SQL commands via the id parameter to 1 list.php, 2 members.php, or 3 book.php...

PhpBridges Blog System members.php SQL injection and fix-vulnerability warning-the black bar safety net

Title: PhpBridges Blog System SQL Injection Vulnerability Author: 3spi0n Program website: https://launchpad.net/phpbridges Test platform: BackTrack 5 - Win7 Ultimate Development language: Php $The defect file: members.php $ Test site: www.badguest.cn /members. php? id=2" SQL Injection Dar bi...

PHPBridges Blog System - members.php SQL Injection

PHPBridges Blog System - members.php SQL Injection Exploit Title: PhpBridges Blog System SQL Injection Vulnerability Date: 18/01/2012 - 04.19 Author: 3spi0n Software Website: https://launchpad.net/phpbridges Tested On: BackTrack 5 - Win7 Ultimate Platform: Php $ Vulnerable File: members.php $ Dem...

PhpBridges Blog System members.php SQL Injection

Exploit for php platform in category web applications Exploit Title: PhpBridges Blog System SQL Injection Vulnerability Date: 18/01/2012 - 04.19 Author: 3spi0n Software Website: https://launchpad.net/phpbridges Tested On: BackTrack 5 - Win7 Ultimate Platform: Php $ Vulnerable File: members.php $...

PhpBridges Blog System SQL Injection

Exploit Title: PhpBridges Blog System SQL Injection Vulnerability Date: 18/01/2012 - 04.19 Author: 3spi0n Software Website: https://launchpad.net/phpbridges Tested On: BackTrack 5 - Win7 Ultimate Platform: Php $ Vulnerable File: members.php $ Demo Sites: fantasticas.odisseias.net/members.php?id=2...

Multiple Vulnerabilities in ReOS

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in ReOS which could be exploited to perform SQL injection attacks and compromise vulnerable system. 1 SQL injection vulnerabilities in ReOS 1.1 The vulnerability exists due to input sanitation errors in the...

Sql injection

SQL injection vulnerability in members.php in Arab Portal 2.2, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the by parameter in the msearch action...

ArabPortal v2.2.x Remote SQL Injection Vulnerability

Exploit for php platform in category web applications ==================================================== ArabPortal v2.2.x Remote SQL Injection Vulnerability ==================================================== Software Link: http://www.arab-portal.info/download.php?action=download&fileid=127...

Sql injection

SQL injection vulnerability in includes/content/membercontent.php in BandSite CMS 1.1.4 allows remote attackers to execute arbitrary SQL commands via the memid parameter to members.php...

PHP-fusion-6-01-18 (members.php) disclosure ways

================================================ PHP-fusion-6-01-18 members.php disclosure ways ================================================ 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' /' / /' 0 0 /, // ,/ / 1 1 // /' / // /' / /' 0 0 / / / / / / 1 1 / / ...

PHP-Fusion members.php Disclosure

================================================ PHP-fusion-6-01-18 members.php disclosure ways ================================================ 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /...

CVE-2009-2120

CVE-2009-2120 affects TekBase All-in-One 3.1, with multiple SQL injection vulnerabilities that let remote authenticated users execute arbitrary SQL commands. Affected vectors include the (1) ids parameter to admin.php and the (2) y parameter to members.php, among others. At least one vector is no...

CVE-2009-0593

SQL injection vulnerability in members.php in plx Auto Reminder 3.7 allows remote authenticated users to execute arbitrary SQL commands via the id parameter in a newar action...

Sql injection

SQL injection vulnerability in members.php in plx Auto Reminder 3.7 allows remote authenticated users to execute arbitrary SQL commands via the id parameter in a newar action...

CVE-2009-0593

SQL injection vulnerability in members.php in plx Auto Reminder 3.7 allows remote authenticated users to execute arbitrary SQL commands via the id parameter in a newar action...

CVE-2009-0593

CVE-2009-0593 : A SQL injection in plx Auto Reminder 3.7 affects members.php (newar action). Described as exploitable by remote authenticated users via the id parameter. CVSSv2 base score 6.5 (MEDIUM). No further technical details or patch/remediation information are provided in the connected doc...

Directory traversal

Directory traversal vulnerability in members.php in ScriptsEz Mini Hosting Panel allows remote attackers to read arbitrary local files via a .. dot dot in the dir parameter in a view action...