109 matches found
CVE-2010-2139
SQL injection vulnerability in pages.php in Multishop CMS allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2010-2139
SQL injection vulnerability in pages.php in Multishop CMS allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2010-2139: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in pages.php in Multishop CMS allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
Multi Vendor Mail SQL Injection
============================================================ Multi Vendor Mall pages.php SQL Injection Vulnerability ============================================================ + Multi Vendor Mall pages.php SQL Injection Vulnerability + By NewbieCampuz + Published: 2010-05-24 Pukul 22.00 WIB +...
Multi Vendor Mall - itemdetail.php? shop.php SQL Injection
Multi Vendor Mall - itemdetail.php? shop.php SQL Injection ------------------------------------------------------------------------------------------- Multi Vendor Mall itemdetail.php & shop.php SQL Injection Vulnerability...
Multi Vendor Mall - 'pages.php' SQL Injection
============================================================ Multi Vendor Mall pages.php SQL Injection Vulnerability ============================================================ + Multi Vendor Mall pages.php SQL Injection Vulnerability + By NewbieCampuz + Published: 2010-05-24 Pukul 22.00 WIB +...
Lizard Cart - Multiple SQL Injections
Lizard Cart - Multiple SQL Injections Exploit Title: Lizard Cart Multiple SQL Injection Exploit Date: 20-12-2009 Author: cr4wl3r Software Link: http://sourceforge.net/projects/lizardcart/ Version: N/A Tested on: GNU/LINUX Code detail.php $dbResult = mysqlquery"select from products where id='$id'"...
Lizard Cart Multiple SQL Injection Exploit
No description provided by source. Exploit Title: Lizard Cart Multiple SQL Injection Exploit Date: 20-12-2009 Author: cr4wl3r Software Link: http://sourceforge.net/projects/lizardcart/ Version: N/A Tested on: GNU/LINUX Code detail.php $dbResult = mysqlquery"select from products where id='$id'"; P...
Lizard Cart - Multiple SQL Injections
Exploit Title: Lizard Cart Multiple SQL Injection Exploit Date: 20-12-2009 Author: cr4wl3r Software Link: http://sourceforge.net/projects/lizardcart/ Version: N/A Tested on: GNU/LINUX Code detail.php $dbResult = mysqlquery"select from products where id='$id'"; PoC lizardcartpath/detail.php?id=SQL...
Lizard Cart Multiple SQL Injection Exploit
Exploit for unknown platform in category web applications ========================================== Lizard Cart Multiple SQL Injection Exploit ========================================== Exploit Title: Lizard Cart Multiple SQL Injection Exploit Date: 20-12-2009 Author: cr4wl3r Software Link:...
CVE-2008-6198: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in pages.php in Custom Pages 1.0 plugin for MyBulletinBoard MyBB allows remote attackers to execute arbitrary SQL commands via the page parameter...
spitfirephoto Pro pages.php Sql Injection
Author: Beenu Arora Home : www.BeenuArora.com Email : [email protected] Share the c0de! Title: spitfirephoto Pro pages.php Sql Injection Vendor: http://http://www.spitfirephoto.com/ Paid Script d0rk:Powered by Spitfire Photo Pro Live Demo:...
spitfirephoto-sql.txt
Author: Beenu Arora Home : www.BeenuArora.com Email : [email protected] Share the c0de! Title: spitfirephoto Pro pages.php Sql Injection Vendor: http://http://www.spitfirephoto.com/ Paid Script d0rk:Powered by Spitfire Photo Pro Live Demo:...
CVE-2008-4488: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in ap-pages.php in Atarone CMS 1.2.0 allows remote attackers to inject arbitrary web script or HTML via the 1 name and 2 id parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
Sql injection
Multiple SQL injection vulnerabilities in phpMyRealty PMR 1.0.9 and earlier allow remote attackers to execute arbitrary SQL commands via 1 the id parameter in pages.php and 2 the pricemax parameter in search.php...
CVE-2008-3861
CVE-2008-3861 affects phpMyRealty 1.0.7 and 1.0.9 (and earlier). The vulnerability is multiple SQL injection flaws caused by insufficient input sanitization in user-supplied data, enabling remote attackers to inject SQL via two parameters: id in pages.php and price_max in search.php. OpenVAS entr...
CVE-2008-3861: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in phpMyRealty PMR 1.0.9 and earlier allow remote attackers to execute arbitrary SQL commands via 1 the id parameter in pages.php and 2 the pricemax parameter in search.php...
CVE-2008-3497: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in pages.php in MyPHP CMS 0.3.1 allows remote attackers to execute arbitrary SQL commands via the pid parameter...
Ready2Edit (pages.php menuid) Remote SQL Injection Vulnerability
No description provided by source. Viva IslaM Viva IslaM Remote SQL Injection Vulnerability Ready2Edit pages.php menuid AuTh0r : Mr.SQL H0ME : WwW.PaL-HaCkEr.CoM & WwW.ATsDp.CoM Em@il : [email protected] !! SYRIAN HaCkErS !! Script : Ready2Edit site : www.skylinewebnapps.com -:: SQL ::- www.site.com...
Ready2Edit (pages.php menuid) Remote SQL Injection Vulnerability
Exploit for unknown platform in category web applications ================================================================ Ready2Edit pages.php menuid Remote SQL Injection Vulnerability ================================================================ Viva IslaM Viva IslaM Remote SQL Injection...