37 matches found
EUVD-2006-6778
Malware in sbrugna...
EUVD-2008-6997
Malware in sbrugna...
EUVD-2009-0728
Malware in sbrugna...
PHP-Nuke My_eGallery <= 2.7.9 - Remote SQL Injection Vulnerability
No description provided by source. Aria-Security Team http://Aria-Security.Net ----------------------------- Shoutz: Aura, Null, imm02tal, Kinglet, and our staff PHP-Nuke MyeGallery gid Remote SQL Injection Dork: inurl:modules.php?name=MyeGallery...
Sql injection
SQL injection vulnerability in the MyeGallery module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the gid parameter in a showgall action to modules.php. NOTE: this issue was disclosed by an unreliable researcher, so the details might be incorrect...
CVE-2008-7038
SQL injection vulnerability in the MyeGallery module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the gid parameter in a showgall action to modules.php. NOTE: this issue was disclosed by an unreliable researcher, so the details might be incorrect...
CVE-2008-7038
CVE-2008-7038 describes a SQL injection in the My_eGallery module for PHP-Nuke. The vulnerability is triggered by manipulating the gid parameter in a showgall action to modules.php, allowing remote execution of arbitrary SQL commands. The description notes that the issue was disclosed by an unrel...
MDPro My_eGallery模块pid参数SQL注入漏洞
BUGTRAQ ID: 33871 CVECAN ID: CVE-2009-0728 MDPro是一款开放源码的内容管理系统。 MDPro的index.php文件没有正确地过滤对pid参数的输入参数，如果module设置为MyeGallery且do设置为showpic，远程攻击者就可以通过提交恶意请求执行SQL注入攻击。 MAXdev MyeGallery 3.1.1g 厂商补丁： MAXdev ------ 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...
CVE-2009-0728
SQL injection vulnerability in the MyeGallery module for MAXdev MDPro MD-Pro and Postnuke allows remote attackers to execute arbitrary SQL commands via the pid parameter in a showpic action to index.php...
Sql injection
SQL injection vulnerability in the MyeGallery module for MAXdev MDPro MD-Pro and Postnuke allows remote attackers to execute arbitrary SQL commands via the pid parameter in a showpic action to index.php...
CVE-2009-0728
SQL injection vulnerability in the MyeGallery module for MAXdev MDPro MD-Pro and Postnuke allows remote attackers to execute arbitrary SQL commands via the pid parameter in a showpic action to index.php...
CVE-2009-0728
The CVE-2009-0728 issue affects MAXdev MDPro (MD-Pro) with the My_eGallery module. The root cause is improper input filtering of the pid parameter in index.php when module=My_eGallery and do=showpic, enabling a remote SQL injection that can execute arbitrary SQL commands. Exploitation details are...
MDPro My_eGallery SQL Injection
!/usr/bin/perl $host, PeerPort = 80, Proto = 'tcp' or die $!; $packet .= "GET /$inject HTTP/1.1\r\n"; $packet .= "Host: $host\r\n"; $packet .= "User-Agent: Lynx textmode\r\n"; $packet .= "Connection: close\r\n\r\n"; $socket-send$packet; while $content .= $; close$socket; if $content = /.+?/i prin...
MDPro Module My_eGallery - 'pid' SQL Injection
!/usr/bin/perl $host, PeerPort = 80, Proto = 'tcp' or die $!;...
MDPro Module My_eGallery - pid SQL Injection
MDPro Module MyeGallery - pid SQL Injection !/usr/bin/perl $host, PeerPort = 80, Proto = 'tcp' or die $!;...
xoopsegal-sql.txt
XOOPS Module MyeGallery 3.04 download=http://webscripts.softpedia.com/script/Modules/Other-Modules/My-eGallery-dev-8113.html AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 MAİL : [email protected] DORKS 1 : allinurl :"modules/myegallery" EXPLOIT :...
XOOPS Module My_eGallery 3.04 (gid) SQL Injection Vulnerability
No description provided by source. XOOPS Module MyeGallery 3.04 download=http://webscripts.softpedia.com/script/Modules/Other-Modules/My-eGallery-dev-8113.html AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 MA陌L : [email protected] DORKS 1 : allinurl :"modules/myegallery...
XOOPS Module My_eGallery 3.04 - gid SQL Injection
XOOPS Module MyeGallery 3.04 - gid SQL Injection XOOPS Module MyeGallery 3.04 download=http://webscripts.softpedia.com/script/Modules/Other-Modules/My-eGallery-dev-8113.html AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 MAÄ°L : [email protected] DORKS 1 : allinurl...
XOOPS Module My_eGallery 3.04 (gid) SQL Injection Vulnerability
Exploit for unknown platform in category web applications =============================================================== XOOPS Module MyeGallery 3.04 gid SQL Injection Vulnerability =============================================================== XOOPS Module MyeGallery 3.04...
XOOPS Module My_eGallery 3.04 - 'gid' SQL Injection
XOOPS Module MyeGallery 3.04 download=http://webscripts.softpedia.com/script/Modules/Other-Modules/My-eGallery-dev-8113.html AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 MAÄ°L : [email protected] DORKS 1 : allinurl :"modules/myegallery" EXPLOIT :...