EUVD-2009-0457

Malware in sbrugna...

Sql injection

Multiple SQL injection vulnerabilities in parents/login.php in Online Grades 3.2.4, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 uname or 2 pass parameter...

CVE-2009-0479

The CVE-2009-0479 entry concerns Online Grades 3.2.4, specifically the admin/admin_login.php component, where the (1) uname and (2) pword parameters are susceptible to SQL injection. Remote attackers could execute arbitrary SQL commands via these inputs, indicating a classic backend query manipul...

CVE-2009-0453

CVE-2009-0453 affects Online Grades 3.2.4. The vulnerability allows remote attackers to disclose configuration information by requesting phpinfo.php, which invokes phpinfo(). The root cause is exposure of PHP configuration via the phpinfo output. Documented impact is information disclosure (parti...

CVE-2009-0453

Online Grades 3.2.4 allows remote attackers to obtain configuration information via a direct request to phpinfo.php, which calls the phpinfo function...

Online Grades 3.2.4 (Auth Bypass) SQL Injection Vulnerability

No description provided by source. 0x01 Informations: Script : Online Grades 3.2.4 Download : http://www.onlinegrades.org Vulnerability : Auth Bypass - Php Info Disclosure Author : x0r Contact : [email protected] \ [email protected] Website : NULL 0x02 Bug: /parents/login.php $username = $POST'uname...

Online Grades 3.2.4 - Authentication Bypass

Online Grades 3.2.4 - Authentication Bypass 0x01 Informations: Script : Online Grades 3.2.4 Download : http://www.onlinegrades.org Vulnerability : Auth Bypass - Php Info Disclosure Author : x0r Contact : [email protected] \ [email protected] Website : NULL 0x02 Bug: /parents/login.php $username =...

Online Grades 3.2.4 SQL Injection

0x01 Informations: Script : Online Grades 3.2.4 Download : http://www.onlinegrades.org Vulnerability : Auth Bypass - Php Info Disclosure Author : x0r Contact : [email protected] \ [email protected] Website : NULL 0x02 Bug: /parents/login.php $username = $POST'uname'; $pword = $POST'pass'; $mysqlquer...

Online Grades 3.2.4 - Authentication Bypass

0x01 Informations: Script : Online Grades 3.2.4 Download : http://www.onlinegrades.org Vulnerability : Auth Bypass - Php Info Disclosure Author : x0r Contact : [email protected] \ [email protected] Website : NULL 0x02 Bug: /parents/login.php $username = $POST'uname'; $pword = $POST'pass'; $mysqlquer...