form2list page.php SQL Injection

! ! ! OOOO O OOOOOOOOO ! !O O O O O ! !O O O ! !O OOOO OOOO OOOOOO OOOO OOO OO O OOOO OO OO OOOO ! !O OOO OOO O O O O OO O O O O OO O O O ! !O OO OO O O OOOOOO O O O O O O OOOOOO ! !O O OOOO O O O O O O O O O O O ! ! OOOO OO OOOOOO OOOO OOOOOO OOOOOOOOO OOOO OOO OOO OOOO ! ! OO ! ! OO ! ! OO Prou...

form2list - 'page.php?id' SQL Injection

! ! ! OOOO O OOOOOOOOO ! !O O O O O ! !O O O ! !O OOOO OOOO OOOOOO OOOO OOO OO O OOOO OO OO OOOO ! !O OOO OOO O O O O OO O O O O OO O O O ! !O OO OO O O OOOOOO O O O O O O OOOOOO ! !O O OOOO O O O O O O O O O O O ! ! OOOO OO OOOOOO OOOO OOOOOO OOOOOOOOO OOOO OOO OOO OOOO ! ! OO ! ! OO ! ! OO Prou...

Vlinks 1.1.6 - id SQL Injection

Vlinks 1.1.6 - id SQL Injection !x! Informations: Name : vlinks Download : http://www.vlinks.org/ =http://www.vlinks.org/vlinks-v1.1.6.rar Vulnerability : Sql Injection Author : JIKOJAWAD Contact : [email protected] Site : No-ExploiT.CoM/Forum langague arabic Notes : 3arabi Muslim Maghribi blad...

Vlinks 1.1.6 - 'id' SQL Injection

!x! Informations: Name : vlinks Download : http://www.vlinks.org/ =http://www.vlinks.org/vlinks-v1.1.6.rar Vulnerability : Sql Injection Author : JIKOJAWAD Contact : [email protected] Site : No-ExploiT.CoM/Forum langague arabic Notes : 3arabi Muslim Maghribi bladi blad lmgharba kamlin Dini Din...

Vlinks 1.1.6 SQL Injection

!x! Informations: Name : vlinks Download : http://www.vlinks.org/ =http://www.vlinks.org/vlinks-v1.1.6.rar Vulnerability : Sql Injection Author : JIKOJAWAD Contact : [email protected] Site : No-ExploiT.CoM/Forum langague arabic Notes : 3arabi Muslim Maghribi bladi blad lmgharba kamlin Dini Din...

RedPeach CMS SQL Injection

REDPEACH CMS - SQL Injection Vulnerability http://www.redpeach.de/ Vulnerability discovered by: LidlosesAuge Greetz to: -=Player=- , Suicide, g4ms3, enco, Palme, GPM, karamble, Free-Hack Date: 23.12.2008 Admin Panel: Target/admin/login.php Description: The Files "index.php" and "page.php" contain...

Easyedit CMS - 'page.php?intPageID' SQL Injection

source: https://www.securityfocus.com/bid/32369/info Easyedit is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the application, access or...

CVE-2008-4172: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in page.php in Cars & Vehicle aka Cars-Vehicle Script allows remote attackers to execute arbitrary SQL commands via the lnkid parameter...

web4ughana-sql.txt

. . | / | | \ \ | / / |\ \ \ |/ // / /\ \ / |/ \ / // | / | | / \ /|\ / / / / \ / \ / / / \ | | /\ /\ / \ | \ // est.2007 / / forum.darkc0de.com d3hydr8 - rsauron - baltazar - sinner01 - r45c4l - beenu And all darkc0de.com members Author: P47r1ck Home : www.darkc0de.com Email :...

Websens CMSbright 'page.php' SQL注入漏洞

BUGTRAQ ID: 30946 CNCAN ID：CNCAN-2008090205 Websens CMSbright是一款基于PHP的WEB应用程序。 Websens CMSbright不正确处理用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，可能获得敏感信息或操作数据库。 问题由于'page.php'脚本对用户提交给'idrubpage'参数缺少过滤，构建恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息或操作数据库。 Websens CMSbright 目前没有解决方案提供： http://www.cmsbright.com/public/page.ph...

cmsbright-sql.txt

------------------------------------------- Script : CMSbright .. site : http://www.cmsbright.com/ Author : BorN To K!LL Dork : powered by CMSbright © websens ------------------------------------------- Exploit : public/page.php?idrubpage=SQL Example :...

CVE-2007-3652

SQL injection vulnerability in class/page.php in Farsi Script aka FaScript FaName 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: this might be the same issue as CVE-2008-0328...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Farsi Script aka FaScript FaName 1.0 allow remote attackers to inject arbitrary web script or HTML via the 1 key or 2 desc parameter to index.php, or 3 the name parameter to page.php...

CVE-2007-3651: Exposure of Sensitive Information to an Unauthorized Actor

class/page.php in Farsi Script aka FaScript FaName 1.0 allows remote attackers to obtain sensitive information via a '; quote semicolon sequence in the id parameter, which reveals the installation path in an error message...

CVE-2007-3652: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in class/page.php in Farsi Script aka FaScript FaName 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: this might be the same issue as CVE-2008-0328...

CVE-2007-3652

SQL injection vulnerability in class/page.php in Farsi Script aka FaScript FaName 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: this might be the same issue as CVE-2008-0328...

CVE-2007-3653

Multiple cross-site scripting XSS vulnerabilities in Farsi Script aka FaScript FaName 1.0 allow remote attackers to inject arbitrary web script or HTML via the 1 key or 2 desc parameter to index.php, or 3 the name parameter to page.php...

CVE-2007-3653: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Farsi Script aka FaScript FaName 1.0 allow remote attackers to inject arbitrary web script or HTML via the 1 key or 2 desc parameter to index.php, or 3 the name parameter to page.php...

CVE-2008-2899

Unspecified vulnerability in includes/classes/page.php in j00lean-CMS 1.03 has unknown impact and attack vectors...

CVE-2008-2899

Technical details for CVE-2008-2899 are not publicly provided in the supplied documents. The initial description is generic, and connected records do not expose affected product specifics, root cause, or remediation.