CVE-2007-4952

SQL injection vulnerability in article.php in OmniStar Article Manager allows remote attackers to execute arbitrary SQL commands via the pageid parameter in a favorite op action, a different vector than CVE-2006-5917...

omnistar-sql.txt

/bin/bash Omnistar Article Manager Software article.php Remote SQL Injection Exploit Exploit Coded By : Cold z3ro http://Hackteach.org Exploit : /article.php?op=favorite&articleid=4&pageid=-1'//union//select//name,1//from//user/...

Omnistar Article Manager Software (article.php) SQL Injection Exploit

Exploit for unknown platform in category web applications ===================================================================== Omnistar Article Manager Software article.php SQL Injection Exploit ===================================================================== /bin/bash Omnistar Article...

Omnistar Article Manager Software - article.php SQL Injection

Omnistar Article Manager Software - article.php SQL Injection /bin/bash Omnistar Article Manager Software article.php Remote SQL Injection Exploit Exploit Coded By : Cold z3ro http://Hackteach.org Exploit : /article.php?op=favorite&articleid=4&pageid=-1'//union//select//name,1//from//user/...

Remote file inclusion

PHP remote file inclusion vulnerability in adm/mystatistics.php in Omnistar Lib2 PHP 0.2 allows remote attackers to execute arbitrary PHP code via a URL in the DOCUMENTROOT parameter...

CVE-2007-4341

PHP remote file inclusion vulnerability in adm/mystatistics.php in Omnistar Lib2 PHP 0.2 allows remote attackers to execute arbitrary PHP code via a URL in the DOCUMENTROOT parameter...

CVE-2007-4341

CVE-2007-4341 describes a PHP remote file inclusion vulnerability in the adm/my_statistics.php module of Omnistar Lib2 PHP 0.2. The underlying issue allows an attacker to cause remote code execution by supplying a crafted URL in the DOCUMENT_ROOT parameter. Affected software is Omnistar Lib2 PHP ...

CVE-2006-5917

Multiple SQL injection vulnerabilities in OmniStar Article Manager allow remote attackers to execute arbitrary SQL commands via the 1 articleid parameter in a articles/comments.php and b articles/article.php, and the 2 pageid parameter in c articles/pages.php...

CVE-2006-5917

Multiple SQL injection vulnerabilities in OmniStar Article Manager allow remote attackers to execute arbitrary SQL commands via the 1 articleid parameter in a articles/comments.php and b articles/article.php, and the 2 pageid parameter in c articles/pages.php...

CVE-2006-5917

Affected software: OmniStar Article Manager. Vulnerability details: Multiple SQL injection vulnerabilities allow remote attackers to execute arbitrary SQL via (1) article_id in articles/comments.php and articles/article.php, and (2) page_id in articles/pages.php. Root cause: improper handling of ...

omnistar-SQL.txt

vendor site:http://www.omnistararticle.com/ product :omnistar article manager bug:injection sql risk : high path: /articles/comments.php?articleid='sql /articles/article.php?op=save&articleid='sql /articles/pages.php?pageid='sql laurent gaffié & benjamin mossé http://s-a-p.ca/ contact:...

omnistar article manager [multiples injection sql]

vendor site:http://www.omnistararticle.com/ product :omnistar article manager bug:injection sql risk : high path: /articles/comments.php?articleid='sql /articles/article.php?op=save&articleid='sql /articles/pages.php?pageid='sql laurent gaffiй & benjamin mossй http://s-a-p.ca/ contact:...

Omnistar Article Manager - Multiple SQL Injections

Omnistar Article Manager - Multiple SQL Injections source: https://www.securityfocus.com/bid/20990/info Omnistar Article Manager is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful...

CVE-2005-3880

Multiple SQL injection vulnerabilities in Omnistar KBase 4.0 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 articleid parameter in users/comments.php, 2 categoryid and 3 id parameters in users/kb.php...

CVE-2005-3880

Omnistar KBase 4.0 and earlier contain SQL injection vulnerabilities in the web front end. Specifically, the parameters (1) article_id in users/comments.php, and (2) category_id and (3) id in users/kb.php allow remote attackers to modify the underlying SQL commands. This relates to the CVE-2005-3...

CVE-2005-3880

Multiple SQL injection vulnerabilities in Omnistar KBase 4.0 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 articleid parameter in users/comments.php, 2 categoryid and 3 id parameters in users/kb.php...

Omnistar KBase SQL inj, vuln.

Omnistar KBase SQL inj, vuln. Vuln. dicovered by : r0t Date: 28 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/omnistar-kbase-sql-inj-vuln.html Vendor:http://www.omnistarkbase.com/ affected version:4.0 and prior Product Description: Omnistar KBase is a dynamic knowledgebase...

CVE-2005-3840

SQL injection vulnerability in kb.php in Omnistar Live 5.2 and earlier allows remote attackers to execute arbitrary SQL commands via the 1 id and 2 categoryid parameter. NOTE: due to a typo, an Internet Explorer issue was incorrectly assigned this identifier, but the correct identifier is...

CVE-2005-3840

CVE-2005-3840 describes a SQL injection vulnerability in Omnistar Live (kb.php) affecting version 5.2 and earlier. The issue arises from unsafely processing user-supplied input for the id and category_id parameters, enabling remote attackers to execute arbitrary SQL commands. The description note...

CVE-2005-3840

SQL injection vulnerability in kb.php in Omnistar Live 5.2 and earlier allows remote attackers to execute arbitrary SQL commands via the 1 id and 2 categoryid parameter. NOTE: due to a typo, an Internet Explorer issue was incorrectly assigned this identifier, but the correct identifier is...