Sql injection

SQL injection vulnerability in Netref 4.0 allows remote attackers to execute arbitrary SQL commands via the id parameter to 1 ficheproduct.php and 2 presentation.php...

CVE-2008-5561

SQL injection vulnerability in Netref 4.0 allows remote attackers to execute arbitrary SQL commands via the id parameter to 1 ficheproduct.php and 2 presentation.php...

CVE-2008-5561

The connected documents confirm CVE-2008-5561 as a SQL injection vulnerability in Netref 4.0. The issue affects the application’s fiche_product.php and presentation.php endpoints, where an unsafely handled id parameter enables remote attackers to execute arbitrary SQL commands. Root cause cited i...

Netref 4.0 Multiple Remote SQL Injection Vulnerabilities

No description provided by source. SuB-ZeRo Dz-hackers Netref 4.0 Remote SQL Injection Vulnerability ----------------------------------------------------------------------------------------------------------- +Discovred by : SuB-ZeRo +Vendor URL : www.netref.net +downloader :...

Netref 4.0 - Multiple SQL Injections

Netref 4.0 - Multiple SQL Injections SuB-ZeRo Dz-hackers Netref 4.0 Remote SQL Injection Vulnerability ----------------------------------------------------------------------------------------------------------- +Discovred by : SuB-ZeRo +Vendor URL : www.netref.net +downloader :...

Netref 4.0 Multiple Remote SQL Injection Vulnerabilities

Exploit for unknown platform in category web applications ======================================================== Netref 4.0 Multiple Remote SQL Injection Vulnerabilities ======================================================== Netref 4.0 Remote SQL Injection Vulnerability...

Netref 4.0 SQL Injection

SuB-ZeRo Dz-hackers Netref 4.0 Remote SQL Injection Vulnerability ----------------------------------------------------------------------------------------------------------- +Discovred by : SuB-ZeRo +Vendor URL : www.netref.net +downloader : http://www.phpscripts-fr.net/scripts/download.php?id=62...

Netref 4.0 - Multiple SQL Injections

SuB-ZeRo Dz-hackers Netref 4.0 Remote SQL Injection Vulnerability ----------------------------------------------------------------------------------------------------------- +Discovred by : SuB-ZeRo +Vendor URL : www.netref.net +downloader : http://www.phpscripts-fr.net/scripts/download.php?id=62...

CVE-2006-5618

Directory traversal vulnerability in script/catforaff.php in Netref 4 allows remote attackers to read arbitrary files via a .. dot dot sequence in the addirect parameter...

CVE-2006-5618

CVE-2006-5618 is a Directory traversal vulnerability in Netref 4 affecting the file script/cat_for_aff.php, exploitable via a .. sequence in the ad_direct parameter to read arbitrary files. The NVD summary confirms the vulnerability class and impact (partial confidentiality impact) with a network...

CVE-2006-5618

Directory traversal vulnerability in script/catforaff.php in Netref 4 allows remote attackers to read arbitrary files via a .. dot dot sequence in the addirect parameter...

Netref 4 (cat_for_aff.php) Source Code Disclosure Exploit

No description provided by source. % Response.Buffer = True % % On Error Resume Next % % Server.ScriptTimeout = 100 % % '=============================================================================================== ' =option.php Reader 'Script Name: Netref 4 catforaff.php Source Code Disclosure...

Netref 4 (cat_for_aff.php) Source Code Disclosure Exploit

Exploit for unknown platform in category web applications ========================================================= Netref 4 catforaff.php Source Code Disclosure Exploit ========================================================= option.php Reader 'Script Name: Netref 4 catforaff.php Source Code...

Netref 4 - 'cat_for_aff.php' Source Code Disclosure

option.php Reader 'Script Name: Netref 4 catforaff.php Source Code Disclosure 'Coded by : ajann 'Author : ajann 'Contact : : 'ExploitName: exploit4.asp 'Note : exploit file name =exploit4.asp 'Note : http://target/path/script/catforaff.php?addirect=../etc/passwd |etc... 'Using : Write Target afte...

Netref 3.0 - 'index.php' SQL Injection

source: https://www.securityfocus.com/bid/15862/info Netref is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the application, access or modi...

Netref 3.0 - index.php SQL Injection

Netref 3.0 - index.php SQL Injection source: https://www.securityfocus.com/bid/15862/info Netref is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to...

CVE-2005-4198

SQL injection vulnerability in index.php in Netref 3.0 allows remote attackers to execute arbitrary SQL commands via the cat parameter. NOTE: the provenance of this issue is unknown; the details were obtained solely from third party sources...

CVE-2005-4198

CVE-2005-4198 describes a SQL injection vulnerability in Netref 3.0’s index.php, exploitable via the cat parameter to execute arbitrary SQL commands remotely. The issue’s provenance is unspecified, as notes indicate the details were obtained from third‑party sources. The NVD entry lists a CVSS v2...

CVE-2005-4198

SQL injection vulnerability in index.php in Netref 3.0 allows remote attackers to execute arbitrary SQL commands via the cat parameter. NOTE: the provenance of this issue is unknown; the details were obtained solely from third party sources...

Netref Cat_for_gen.PHP Remote PHP Script Injection Vulnerability

There is a vulnerability in the installed version of Netref that enables a remote attacker to pass arbitrary PHP script code through the SPDX-FileCopyrightText: 2005 Josh Zlatin-Amishav Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective righ...