CVE-2008-0714

CVE-2008-0714 affects Mihalism Multi Host via the vulnerable file users.php in the lost_password_go flow, where the username parameter is susceptible to SQL injection . The underlying issue is improper input handling, enabling remote attackers to execute arbitrary SQL commands. Public references ...

Mihalism Multi Host Download (Username) Blind SQL Injection Exploit

No description provided by source. ?php / Moubik Romanian Security Team - http://rstzone.org presents Mihalism Multi Host Download - Blind SQL Injection Attack Thanks to Vladii for telling me about the CMS. Thanks to Shocker for telling Vladii about the CMS. Shoutz to Kw3rln, Bankai, Slick,...

Mihalism Multi Host Download - Username Blind SQL Injection

Mihalism Multi Host Download - Username Blind SQL Injection ?php / Moubik Romanian Security Team - http://rstzone.org presents Mihalism Multi Host Download - Blind SQL Injection Attack Thanks to Vladii for telling me about the CMS. Thanks to Shocker for telling Vladii about the CMS. Shoutz to...

Mihalism Multi Host Download (Username) Blind SQL Injection Exploit

Exploit for unknown platform in category web applications =================================================================== Mihalism Multi Host Download Username Blind SQL Injection Exploit =================================================================== ?php / Mihalism Multi Host Download -...

Mihalism Multi Host Download - 'Username' Blind SQL Injection

query"SELECT FROM ".SQLUSERSTABLE." WHERE username = '".$POST'username'."'"; Line 112: $DB-query"INSERT INTO ".SQLUSERSTABLE." VALUES'', '".$POST'username'."', '".md5$POST'userpass1'."', '', '".$SERVER'REMOTEADDR'."', '".$POST'useremail'."', '".$POST'private'."', '".time."', 'NORMAL',...

CVE-2007-6653

Directory traversal vulnerability in download.php in Mihalism Multi Host 2.0.7 allows remote attackers to read arbitrary files via a .. dot dot in the file parameter...

Directory traversal

Directory traversal vulnerability in download.php in Mihalism Multi Host 2.0.7 allows remote attackers to read arbitrary files via a .. dot dot in the file parameter...

CVE-2007-6653

Directory traversal vulnerability in download.php in Mihalism Multi Host 2.0.7 allows remote attackers to read arbitrary files via a .. dot dot in the file parameter...

CVE-2007-6653

Directory traversal vulnerability in download.php in Mihalism Multi Host 2.0.7 allows remote attackers to read arbitrary files via a .. dot dot in the file parameter...

CVE-2007-6653

The CVE-2007-6653 entry describes a Directory traversal vulnerability in Mihalism Multi Host 2.0.7, affecting the download.php script. The vulnerability allows remote attackers to read arbitrary files by manipulating the file parameter with a .. (dot dot) sequence. Documented impact is read acces...

Mihalism Multi Host 2.0.7 download.php Remote File Disclosure Vuln

No description provided by source. &nbs...

Mihalism Multi Host 2.0.7 - 'download.php' Remote File Disclosure

Mihalism Multi Host v2.0.7 download.php Remote File Disclosure Vuln Script Page : : POC : /Script/download.php?file=../../../../../../../../../../../etc/passwd D0rkS : Powered by Mihalism Multi Host v2.0.7 Powered by Mihalism Multi Host v2.0.5 Powered by Mihalism Multi Host v2.0.4 Powered by...

Mihalism Multi Host 2.0.7 - download.php Remote File Disclosure

Mihalism Multi Host 2.0.7 - download.php Remote File Disclosure Mihalism Multi Host v2.0.7 download.php Remote File Disclosure Vuln Script Page : : POC : /Script/download.php?file=../../../../../../../../../../../etc/passwd D0rkS : Powered by Mihalism Multi Host v2.0.7 Powered by Mihalism Multi...

Mihalism Multi Host 2.0.7 download.php Remote File Disclosure Vuln

Exploit for unknown platform in category web applications ================================================================== Mihalism Multi Host 2.0.7 download.php Remote File Disclosure Vuln ================================================================== Mihalism Multi Host v2.0.7 download.ph...

mhfp-sql.txt

--------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg --------------------------------------------------------------- Multi Host...