CVE-2008-3056

SQL injection vulnerability in the Codeon Petition cdpetition extension 0.0.2 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2008-3056

CVE-2008-3056 affects the Codeon Petition (cd_petition) extension for TYPO3 (versions ≤ 0.0.2). The root cause is an SQL injection vulnerability allowing remote attackers to execute arbitrary SQL via unspecified vectors. The NVD entry documents a high base score (7.5) with network attack vector, ...

CVE-2008-0325

SQL injection vulnerability in show.php in FaScript FaPersian Petition allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

SQL injection vulnerability in show.php in FaScript FaPersian Petition allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-0325

SQL injection vulnerability in show.php in FaScript FaPersian Petition allows remote attackers to execute arbitrary SQL commands via the id parameter...

FaScript FaPersian Petition (show.php) SQL Injection Vulnerability

No description provided by source. FaScript FaPersian Petition Remote Sql Injection BY IRCRASH AUTHOR : IRCRASH Dr.Crash &...

FaScript FaPersian Petition - SQL Injection

FaScript FaPersian Petition Remote Sql Injection BY IRCRASH AUTHOR : IRCRASH Dr.Crash Script Download : http://fascript.com/fapersianpetition.zip Injection Adress : http://Sitename/fp/show.php?id= SQL For find Username and password :...

FaScript FaPersian Petition (show.php) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================== FaScript FaPersian Petition show.php SQL Injection Vulnerability ================================================================== FaScript FaPersian Petition Remote Sql...

FaScript FaPersian Petition - SQL Injection

FaScript FaPersian Petition - SQL Injection FaScript FaPersian Petition Remote Sql Injection BY IRCRASH AUTHOR : IRCRASH Dr.Crash Script Download : http://fascript.com/fapersianpetition.zip Injection Adress : http://Sitename/fp/show.php?id= SQL For find Username and password :...

Directory traversal

Multiple directory traversal vulnerabilities in Jax Petition Book 1.0.3.06 allow remote attackers to include and execute arbitrary local files via a .. dot dot in the languagepack parameter to 1 jaxpetitionbook.php or 2 smileys.php...

CVE-2007-0335

Multiple directory traversal vulnerabilities in Jax Petition Book 1.0.3.06 allow remote attackers to include and execute arbitrary local files via a .. dot dot in the languagepack parameter to 1 jaxpetitionbook.php or 2 smileys.php...

CVE-2007-0335

CVE-2007-0335 affects Jax Petition Book 1.0.3.06. Affected component: languagepack handling in jax_petitionbook.php and smileys.php. Root cause: directory traversal via a .. in the languagepack parameter enables inclusion of arbitrary local files. Impact: remote attackers can include and execute ...

Jax Petition Book (languagepack) Remote File Include Vulnerabilities

------------------------------------------------------------------------------------------------------------------ AYYILDIZ.ORG PreSents... Script: Jax Petition Book Download: jtr.de/scripting/php/guestbook/petitionbook20v1.0.3.06.zip Contact: ilker Kandemir ilkerkandemiratmynet.com...

Re: Jax Petition Book (languagepack) Remote File Include Vulnerabilities

Actually, this can be pretty serious depending on server settings, but an improper example was given. Better one: jaxpetitionbook.php?languagepack=../../someotherallowedfileuploads/myfile.php.gif00 Many servers will have magic quotes on to defeat the null byte, but by no means all. John...

jax-rfi.txt

------------------------------------------------------------------------------------------------------------------ AYYILDIZ.ORG PreSents... Script: Jax Petition Book Download: jtr.de/scripting/php/guestbook/petitionbook%20v1.0.3.06.zip Contact: ilker Kandemir...