CVE-2010-0720

CVE-2010-0720 describes an SQL injection in Erotik Auktionshaus's news.php where the vulnerable input is the id parameter. Remote attackers can cause arbitrary SQL commands to be executed. Affected component: news.php (.ID parameter). Root cause: improper input handling in the id parameter. Impac...

CVE-2010-0722

The CVE-2010-0722 entry affects Php Auktion Pro: a SQL injection in news.php where the id parameter allows remote execution of arbitrary SQL. The issue is documented in NVD with a CVSS v2 base score of 7.5 (HIGH, NETWORK attack vector, LOW complexity, no authentication). The vulnerability impact ...

CVE-2010-0722

SQL injection vulnerability in news.php in Php Auktion Pro allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2010-0720

SQL injection vulnerability in news.php in Erotik Auktionshaus allows remote attackers to execute arbitrary SQL commands via the id parameter...

Top Auktion (news.php) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================== Top Auktion news.php SQL Injection Vulnerability ================================================== ----------------------------Information------------------------------------------------...

Php Auktion Pro SQL (news.php) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ========================================================== Php Auktion Pro SQL news.php SQL Injection Vulnerability ==========================================================...

Ero Auktion v2.0 (news.php) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ======================================================= Ero Auktion v2.0 news.php SQL Injection Vulnerability =======================================================...

Ero Auktion 2.0 - 'news.php' SQL Injection

----------------------------Information---------------------------------------- +Autor : Easy Laster +Date : 21.10.2010 +Script : Ero Auktion V.2.0 SQL Injection news.php +Download : ----- +Price : 34,90€ +Language :PHP +Discovered by Easy Laster +Security Group 4004-Security-Project +Greetz to...

Chief Content Management System (news.php) SQL Injection

Exploit for unknown platform in category web applications ======================================================== Chief Content Management System news.php SQL Injection ======================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-...

Auktionshaus 4 - news.php SQL Injection

Auktionshaus 4 - news.php SQL Injection Auktionshaus V.4 SQL Injection news.php | | ||| | | | | | -| .'| || | | | -| | | -| | || ||,|||| ||||| ||| ||||| Script: Auktionshaus V.4 Vulnerabilities SQL Injection Language: PHP Download: buy this script Founder: ea$y laster Peace to -tmh- ,0qwl ,Crypte...

uGround <= 1.0b SQL Injection Vulnerability

Exploit for unknown platform in category web applications =========================================== uGround = 1.0b SQL Injection Vulnerability =========================================== uGround v1.0b SQL Injection | | ||| | | | | | -| .'| || | | | -| | | -| | || ||,|||| ||||| ||| ||||| Script:...

Erotik Auktionshaus - 'news.php' SQL Injection

Erotik Auktionshaus SQL Injection news.php | | ||| | | | | | -| .'| || | | | -| | | -| | || ||,|||| ||||| ||| ||||| Script: Erotik Auktionshaus news.php Vulnerabilities SQL Injection Language: PHP Download: buy this script Founder: ea$y laster Peace to -tmh- ,0qwl ,Crypter ,Dr.ChAoS ,dremicz...

Auktionshaus 4 - 'news.php' SQL Injection

Auktionshaus V.4 SQL Injection news.php | | ||| | | | | | -| .'| || | | | -| | | -| | || ||,|||| ||||| ||| ||||| Script: Auktionshaus V.4 Vulnerabilities SQL Injection Language: PHP Download: buy this script Founder: ea$y laster Peace to -tmh- ,0qwl ,Crypter ,Dr.ChAoS ,dremicz ,eddy14 ,HANNIBAL...

Auktionshaus Gelb 3 - 'news.php' SQL Injection

AuktionshausGelb V.3 SQL Injection news.php | | ||| | | | | | -| .'| || | | | -| | | -| | || ||,|||| ||||| ||| ||||| Script: Auktionshaus Gelb V.3 Vulnerabilities SQL Injection Language: PHP Download: buy this script Founder: ea$y laster Peace to -tmh- ,0qwl ,Crypter ,Dr.ChAoS ,dremicz ,eddy14...

uGround 1.0b - SQL Injection

uGround v1.0b SQL Injection | | ||| | | | | | -| .'| || | | | -| | | -| | || ||,|||| ||||| ||| ||||| Script: uGround v1.0b SQL Injection news.php Vulnerabilities SQL Injection Language: PHP Download: buy this script Founder: ea$y laster Peace to -tmh- ,0qwl ,Crypter ,Dr.ChAoS ,dremicz ,eddy14...

Hispanic Digital Network SQL Injection

============================================================================== o Hispanic Digital Network Blind SQL Injection Vulnerability Software : Hispanic Digital Network Vendor : http://www.hdnweb.com/ Author : NoGe Contact : nogedotcodeatgmaildotcom Blog : http://evilc0de.blogspot.com/...

Sql injection

Multiple SQL injection vulnerabilities in ITechBids 8.0 allow remote attackers to execute arbitrary SQL commands via the 1 userid parameter to feedback.php, 2 cateid parameter to category.php, 3 id parameter to news.php, and 4 productid parameter to itechd.php. NOTE: the sellersothersitem.php,...

中易广告联盟系统(ZYADS) sql注入和本地包含漏洞

在index/news.php 1-31行 ? includeonce"top.php"; $newsid = intval$GET'id'; $totype = addslashes$GET'type'; if $totype=='index' $totypes =" and totype=1"; if $totype=='webuser' $totypes =" and totype!=3"; if $totype=='webadver' $totypes =" and totype!=2"; $newssql = 'select from zyadsnews WHERE id ='...

CVE-2009-3252

CVE-2009-3252 involves multiple SQL injection vulnerabilities in Rock Band CMS 0.10, specifically in news.php. The flaw allows remote attackers to execute arbitrary SQL commands via the (1) year and (2) id parameters, indicating unsafe handling of dynamic queries in the news listing logic. The im...

CVE-2009-3148

PortalXP Teacher Edition 1.2 is affected by multiple SQL injection vulnerabilities. The issue allows remote attackers to inject arbitrary SQL via the id parameter to calendar.php, news.php, and links.php, and via the assignment_id parameter to assignments.php. These details are consistently descr...