EUVD-2011-5083

Malware in sbrugna...

CVE-2011-5183

Multiple SQL injection vulnerabilities in OrderSys 1.6.4 and earlier allow remote attackers to execute arbitrary SQL commands via the whereclause parameter to 1 index.php, 2 indexlong.php, or 3 indexshort.php in ordering/interfacecreator/...

OrderSys <= 1.6.4 - SQL Injection

No description provided by source. ------------------------------------------------------------------------ OrderSys = 1.6.4 Sql Injection Vulnerabilities ------------------------------------------------------------------------ author............: muuratsalo Revshell.com contact...........:...

CVE-2011-5183

Multiple SQL injection vulnerabilities in OrderSys 1.6.4 and earlier allow remote attackers to execute arbitrary SQL commands via the whereclause parameter to 1 index.php, 2 indexlong.php, or 3 indexshort.php in ordering/interfacecreator/...

Sql injection

Multiple SQL injection vulnerabilities in OrderSys 1.6.4 and earlier allow remote attackers to execute arbitrary SQL commands via the whereclause parameter to 1 index.php, 2 indexlong.php, or 3 indexshort.php in ordering/interfacecreator/...

CVE-2011-5183

Multiple SQL injection vulnerabilities in OrderSys 1.6.4 and earlier allow remote attackers to execute arbitrary SQL commands via the whereclause parameter to 1 index.php, 2 indexlong.php, or 3 indexshort.php in ordering/interfacecreator/...

CVE-2011-5183

OrderSys 1.6.4 and earlier is affected by multiple SQL injection vulnerabilities. The root cause is unsafe handling of the where_clause parameter in ordering/interface_creator/ scripts (index.php, index_long.php, index_short.php), allowing remote attackers to inject and execute arbitrary SQL comm...

CVE-2011-5183: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in OrderSys 1.6.4 and earlier allow remote attackers to execute arbitrary SQL commands via the whereclause parameter to 1 index.php, 2 indexlong.php, or 3 indexshort.php in ordering/interfacecreator/...

PT-2012-2160

Name of the Vulnerable Software and Affected Versions OrderSys versions 1.6.4 and earlier Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the where clause parameter to API endpoints such as "index.php", "index long.php", or "index short.php" i...

XSS and SQL Injection Vulnerabilities in OrderSys

Information -------------------- Name : XSS and SQL Injection Vulnerabilities in OrderSys Software : OrderSys 1.6.4 and possibly below. Vendor Homepage : http://www.bioinformatics.org/phplabware/labwiki/index.php Vulnerability Type : Cross-Site Scripting and SQL Injection Severity : Critical...

OrderSys 1.6.4 Cross Site Scripting / SQL Injection Vulnerabilities

Exploit for php platform in category web applications Information -------------------- Name : XSS and SQL Injection Vulnerabilities in OrderSys Software : OrderSys 1.6.4 and possibly below. Vendor Homepage : http://www.bioinformatics.org/phplabware/labwiki/index.php Vulnerability Type : Cross-Sit...

OrderSys 1.6.4 - Multiple SQL Injections / Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/55147/info OrderSys is prone to multiple SQL-injection vulnerabilities and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input. Exploiting these vulnerabilities could allow an attacker to steal...

OrderSys 1.6.4 Cross Site Scripting / SQL Injection

Information -------------------- Name : XSS and SQL Injection Vulnerabilities in OrderSys Software : OrderSys 1.6.4 and possibly below. Vendor Homepage : http://www.bioinformatics.org/phplabware/labwiki/index.php Vulnerability Type : Cross-Site Scripting and SQL Injection Severity : Critical...

OrderSys 1.6.4 - Multiple SQL Injections Multiple Cross-Site Scripting Vulnerabilities

OrderSys 1.6.4 - Multiple SQL Injections Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/55147/info OrderSys is prone to multiple SQL-injection vulnerabilities and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize...

OrderSys &lt;= 1.6.4 Sql Injection Vulnerabilities

Dear All, I have found multiple sql injection vulnerabilities in OrderSys = 1.6.4. The vendor knows the vulnerabilities and he is fixing them as stated in the enclosed advisory. See also http://www.bioinformatics.org/phplabware/labwiki/index.php?page=releasenotes Since the developer is currently...

OrderSys 1.6.4 - SQL Injection

OrderSys 1.6.4 - SQL Injection ------------------------------------------------------------------------ OrderSys = 1.6.4 Sql Injection Vulnerabilities ------------------------------------------------------------------------ author............: muuratsalo Revshell.com contact...........:...

OrderSys 1.6.4 - SQL Injection

------------------------------------------------------------------------ OrderSys = 1.6.4 Sql Injection Vulnerabilities ------------------------------------------------------------------------ author............: muuratsalo Revshell.com contact...........: muuratsaloatgmaildotcom...

OrderSys 1.6.4 SQL Injection

------------------------------------------------------------------------ OrderSys = 1.6.4 Sql Injection Vulnerabilities ------------------------------------------------------------------------ author............: muuratsalo Revshell.com contact...........: muuratsaloatgmaildotcom...

OrderSys <= 1.6.4 SQL Injection

Exploit for php platform in category web applications ------------------------------------------------------------------------ OrderSys = 1.6.4 Sql Injection Vulnerabilities ------------------------------------------------------------------------ author............: muuratsalo Revshell.com...