171 matches found
paFileDB 3.6 (search.php) Remote SQL Injection Vulnerability
No description provided by source. Site: http://www.phparena.net/pafiledb Description: SQL injection categories in includes/search.php Code: $results = $db-GetArray"SELECT FROM ".$dbPrefix."files WHERE ".$searchin." AND filecatid IN ".implode',',$POST'categories'.""; Comment:"ouuch" SQL: UNION...
CVE-2007-3808
SQL injection vulnerability in includes/search.php in paFileDB 3.6 allows remote attackers to execute arbitrary SQL commands via the categories parameter in a search action to index.php, a different vector than CVE-2005-2000...
Sql injection
SQL injection vulnerability in includes/search.php in paFileDB 3.6 allows remote attackers to execute arbitrary SQL commands via the categories parameter in a search action to index.php, a different vector than CVE-2005-2000...
CVE-2007-3808
PaFileDB 3.6 is affected by an SQL injection in includes/search.php via the categories[] parameter in a search action to index.php, as per CVE-2007-3808. The root cause is unsanitized input in the search categories array, enabling remote SQL execution. This vector is described as different from C...
CVE-2007-3808
SQL injection vulnerability in includes/search.php in paFileDB 3.6 allows remote attackers to execute arbitrary SQL commands via the categories parameter in a search action to index.php, a different vector than CVE-2005-2000...
pafiledb-sql.txt
Site: http://www.phparena.net/pafiledb Description: SQL injection categories in includes/search.php Code: $results = $db-GetArray"SELECT FROM ".$dbPrefix."files WHERE ".$searchin." AND filecatid IN ".implode',',$POST'categories'.""; Comment:"ouuch" SQL: UNION SELECT ALL...
paFileDB includes/search.php categories Parameter SQL Injection
Binary data 4136.prm...
paFileDB includes/search.php categories Parameter SQL Injection
The version of paFileDB installed on the remote host fails to sanitize user-supplied input to the 'categories' parameter before using it in the 'includes/search.php' script to make database queries. An unauthenticated attacker can exploit this issue to manipulate database queries, which could lea...
[Full-disclosure] paFileDB 3.6 (search.php) Remote SQL Injection
Site: http://www.phparena.net/pafiledb Description: SQL injection categories in includes/search.php Code: $results = $db-GetArray"SELECT FROM ".$dbPrefix."files WHERE ".$searchin." AND filecatid IN ".implode',', $POST'categories'.""; Comment:"ouuch" SQL: UNION SELECT ALL...
paFileDB 3.6 (search.php) Remote SQL Injection Vulnerability
Exploit for unknown platform in category web applications ============================================================ paFileDB 3.6 search.php Remote SQL Injection Vulnerability ============================================================ Site: http://www.phparena.net/pafiledb Description: SQL...
paFileDB 3.6 - 'search.php' SQL Injection
Site: http://www.phparena.net/pafiledb Description: SQL injection categories in includes/search.php Code: $results = $db-GetArray"SELECT FROM ".$dbPrefix."files WHERE ".$searchin." AND filecatid IN ".implode',',$POST'categories'.""; Comment:"ouuch" SQL: UNION SELECT ALL...
paFileDB 3.6 - search.php SQL Injection
paFileDB 3.6 - search.php SQL Injection Site: http://www.phparena.net/pafiledb Description: SQL injection categories in includes/search.php Code: $results = $db-GetArray"SELECT FROM ".$dbPrefix."files WHERE ".$searchin." AND filecatid IN ".implode',',$POST'categories'.""; Comment:"ouuch" SQL: UNI...
mxBB Module pafileDB 2.0.1b Remote File Include Vulnerability
No description provided by source. +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ mxBB Module pafileDB 2.0.1b Remote File Include Vulnerability +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Download:...
mxBB Module pafiledb <= 2.0.1b Remote File Include Vulnerability
Exploit for unknown platform in category web applications ================================================================ mxBB Module pafiledb = 2.0.1b Remote File Include Vulnerability ================================================================...
mxBB Module pafiledb <= 2.0.1b Remote File Include Vulnerability
No description provided by source. +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ mxBB Module pafileDB 2.0.1b Remote File Include Vulnerability +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Download:...
mxBB Module pafiledb 2.0.1b - Remote File Inclusion
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ mxBB Module pafileDB 2.0.1b Remote File Include Vulnerability +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Download: http://www.mx-system.com/modules/mxpafiledb/dload.php?action=download&fileid=15 by bd0rk || SOH-Crew...
mxBB Module pafiledb 2.0.1b - Remote File Inclusion
mxBB Module pafiledb 2.0.1b - Remote File Inclusion +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ mxBB Module pafileDB 2.0.1b Remote File Include Vulnerability +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Download:...
PafileDB Login SQL injection =)
PafileDB Login SQL injection = author : koray & [email protected] Risk : High Class : Remote Vulnerable Script : pafileDB Version : 3.5.2 / 3.5.3 google : powered by pafiledb 3.5.3/2 greetz : www.cigicigi.net & redhackers Vulnerable; include/admin/auth.php c0de ; if isset$COOKIE'pafiledbuser' &&...
paFileDB 3.5.23.5.3 - Remote Authentication Bypass SQL Injection
paFileDB 3.5.23.5.3 - Remote Authentication Bypass SQL Injection PafileDB Login SQL injection = author : koray & [email protected] Risk : High Class : Remote Vulnerable Script : pafileDB Version : 3.5.2 / 3.5.3 google : powered by pafiledb 3.5.3/2 greetz : www.cigicigi.net & redhackers Vulnerabl...
paFileDB 3.5.2/3.5.3 Remote Login Bypass SQL Injection Vulnerability
No description provided by source. PafileDB Login SQL injection = author : koray & [email protected] Risk : High Class : Remote Vulnerable Script : pafileDB Version : 3.5.2 / 3.5.3 google : powered by pafiledb 3.5.3/2 greetz : www.cigicigi.net & redhackers Vulnerable; include/admin/auth.php c0de...