CVE-2010-0720

SQL injection vulnerability in news.php in Erotik Auktionshaus allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2010-0723

CVE-2010-0723 is a SQL injection vulnerability in news.php of Ero Auktion 2.0 and 2010. The vulnerability is triggered via the id parameter, allowing remote attackers to execute arbitrary SQL commands. The NVD entry assigns a base score of 7.5 (HIGH) with network attack vector and low complexity,...

CVE-2010-0722

The CVE-2010-0722 entry affects Php Auktion Pro: a SQL injection in news.php where the id parameter allows remote execution of arbitrary SQL. The issue is documented in NVD with a CVSS v2 base score of 7.5 (HIGH, NETWORK attack vector, LOW complexity, no authentication). The vulnerability impact ...

CVE-2010-0720

CVE-2010-0720 describes an SQL injection in Erotik Auktionshaus's news.php where the vulnerable input is the id parameter. Remote attackers can cause arbitrary SQL commands to be executed. Affected component: news.php (.ID parameter). Root cause: improper input handling in the id parameter. Impac...

Php Auktion Pro SQL (news.php) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ========================================================== Php Auktion Pro SQL news.php SQL Injection Vulnerability ==========================================================...

Top Auktion (news.php) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================== Top Auktion news.php SQL Injection Vulnerability ================================================== ----------------------------Information------------------------------------------------...

Ero Auktion v2.0 (news.php) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ======================================================= Ero Auktion v2.0 news.php SQL Injection Vulnerability =======================================================...

Ero Auktion 2.0 - 'news.php' SQL Injection

----------------------------Information---------------------------------------- +Autor : Easy Laster +Date : 21.10.2010 +Script : Ero Auktion V.2.0 SQL Injection news.php +Download : ----- +Price : 34,90€ +Language :PHP +Discovered by Easy Laster +Security Group 4004-Security-Project +Greetz to...

Chief Content Management System (news.php) SQL Injection

Exploit for unknown platform in category web applications ======================================================== Chief Content Management System news.php SQL Injection ======================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-...

Auktionshaus 4 - news.php SQL Injection

Auktionshaus 4 - news.php SQL Injection Auktionshaus V.4 SQL Injection news.php | | ||| | | | | | -| .'| || | | | -| | | -| | || ||,|||| ||||| ||| ||||| Script: Auktionshaus V.4 Vulnerabilities SQL Injection Language: PHP Download: buy this script Founder: ea$y laster Peace to -tmh- ,0qwl ,Crypte...

Erotik Auktionshaus - 'news.php' SQL Injection

Erotik Auktionshaus SQL Injection news.php | | ||| | | | | | -| .'| || | | | -| | | -| | || ||,|||| ||||| ||| ||||| Script: Erotik Auktionshaus news.php Vulnerabilities SQL Injection Language: PHP Download: buy this script Founder: ea$y laster Peace to -tmh- ,0qwl ,Crypter ,Dr.ChAoS ,dremicz...

Auktionshaus Gelb 3 - 'news.php' SQL Injection

AuktionshausGelb V.3 SQL Injection news.php | | ||| | | | | | -| .'| || | | | -| | | -| | || ||,|||| ||||| ||| ||||| Script: Auktionshaus Gelb V.3 Vulnerabilities SQL Injection Language: PHP Download: buy this script Founder: ea$y laster Peace to -tmh- ,0qwl ,Crypter ,Dr.ChAoS ,dremicz ,eddy14...

uGround <= 1.0b SQL Injection Vulnerability

Exploit for unknown platform in category web applications =========================================== uGround = 1.0b SQL Injection Vulnerability =========================================== uGround v1.0b SQL Injection | | ||| | | | | | -| .'| || | | | -| | | -| | || ||,|||| ||||| ||| ||||| Script:...

Auktionshaus 4 - 'news.php' SQL Injection

Auktionshaus V.4 SQL Injection news.php | | ||| | | | | | -| .'| || | | | -| | | -| | || ||,|||| ||||| ||| ||||| Script: Auktionshaus V.4 Vulnerabilities SQL Injection Language: PHP Download: buy this script Founder: ea$y laster Peace to -tmh- ,0qwl ,Crypter ,Dr.ChAoS ,dremicz ,eddy14 ,HANNIBAL...

uGround 1.0b - SQL Injection

uGround v1.0b SQL Injection | | ||| | | | | | -| .'| || | | | -| | | -| | || ||,|||| ||||| ||| ||||| Script: uGround v1.0b SQL Injection news.php Vulnerabilities SQL Injection Language: PHP Download: buy this script Founder: ea$y laster Peace to -tmh- ,0qwl ,Crypter ,Dr.ChAoS ,dremicz ,eddy14...

Hispanic Digital Network SQL Injection

============================================================================== o Hispanic Digital Network Blind SQL Injection Vulnerability Software : Hispanic Digital Network Vendor : http://www.hdnweb.com/ Author : NoGe Contact : nogedotcodeatgmaildotcom Blog : http://evilc0de.blogspot.com/...

Sql injection

Multiple SQL injection vulnerabilities in ITechBids 8.0 allow remote attackers to execute arbitrary SQL commands via the 1 userid parameter to feedback.php, 2 cateid parameter to category.php, 3 id parameter to news.php, and 4 productid parameter to itechd.php. NOTE: the sellersothersitem.php,...

中易广告联盟系统(ZYADS) sql注入和本地包含漏洞

在index/news.php 1-31行 ? includeonce"top.php"; $newsid = intval$GET'id'; $totype = addslashes$GET'type'; if $totype=='index' $totypes =" and totype=1"; if $totype=='webuser' $totypes =" and totype!=3"; if $totype=='webadver' $totypes =" and totype!=2"; $newssql = 'select from zyadsnews WHERE id ='...

CVE-2009-3252

CVE-2009-3252 involves multiple SQL injection vulnerabilities in Rock Band CMS 0.10, specifically in news.php. The flaw allows remote attackers to execute arbitrary SQL commands via the (1) year and (2) id parameters, indicating unsafe handling of dynamic queries in the news listing logic. The im...

CVE-2009-3148

Multiple SQL injection vulnerabilities in PortalXP Teacher Edition 1.2 allow remote attackers to execute arbitrary SQL commands via the id parameter to 1 calendar.php, 2 news.php, and 3 links.php; and the 4 assignmentid parameter to assignments.php...