PG Real Estate - Authentication Bypass

PG Real Estate Solution Auth Bypass ---------------------------------------------------------- Discovered By: ZoRLu msn: [email protected] Date: 23.11.2008 Home: www.z0rlu.blogspot.com Kucuk Bir Rica: Lutfen Demolarý Hacklemeyin pls dont make hack demos N0T: YALNIZLIK, YiTiRDi ANLAMINI...

CVE-2008-4751: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in index.php in iPei Guestbook 2.0 allows remote attackers to inject arbitrary web script or HTML via the pg parameter, a different vector than CVE-2005-4597...

CVE-2008-4709: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in newsread.php in Pilot Group PG eTraining allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-4665

SQL injection vulnerability in PG Matchmaking allows remote attackers to execute arbitrary SQL commands via the id parameter to 1 newsread.php and 2 giftsshow.php...

Sql injection

SQL injection vulnerability in PG Matchmaking allows remote attackers to execute arbitrary SQL commands via the id parameter to 1 newsread.php and 2 giftsshow.php...

CVE-2008-4665

SQL injection vulnerability in PG Matchmaking allows remote attackers to execute arbitrary SQL commands via the id parameter to 1 newsread.php and 2 giftsshow.php...

CVE-2008-4665

CVE-2008-4665 affects PG Matchmaking. The vulnerability is a SQL injection in the id parameter of two PHP scripts (news_read.php and gifts_show.php), allowing remote attackers to execute arbitrary SQL commands. Root cause: improper input handling leading to SQL injection. Impact: high (partial co...

CVE-2008-4665: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in PG Matchmaking allows remote attackers to execute arbitrary SQL commands via the id parameter to 1 newsread.php and 2 giftsshow.php...

PG Matchmaking Script Multiple SQL Injection Vulnerabilities

Exploit for unknown platform in category web applications ============================================================ PG Matchmaking Script Multiple SQL Injection Vulnerabilities ============================================================ product home: datingpro.com dork:find it Exploit1:...

PG Matchmaking Script - Multiple SQL Injections

PG Matchmaking Script - Multiple SQL Injections ================================================================================================================== SSSSS NN N AA K K EEEEE SSSSS TTTTTTTTT EEEEE AA MM MM S N N N A A K K E S T E A A M M M M SSSSS N N N AAAAAA KKK EEEEE SSSSS T EEEEE...

PG Matchmaking Script Multiple SQL Injection Vulnerabilities

No description provided by source. ================================================================================================================== SSSSS NN N AA K K EEEEE SSSSS TTTTTTTTT EEEEE AA MM MM S N N N A A K K E S T E A A M M M M SSSSS N N N AAAAAA KKK EEEEE SSSSS T EEEEE AAAAAA M M M ...

CVE-2007-6057

PHP remote file inclusion vulnerability in index.php in datecomm Social Networking Script aka Myspace Clone Script allows remote attackers to execute arbitrary PHP code via a URL in the pg parameter...

CVE-2007-6057: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in index.php in datecomm Social Networking Script aka Myspace Clone Script allows remote attackers to execute arbitrary PHP code via a URL in the pg parameter...

CVE-2007-3451: Undefined Security Weakness

PHP remote file inclusion vulnerability in admin/index.php in 6ALBlog allows remote authenticated administrators to execute arbitrary PHP code via a URL in the pg parameter...

CVE-2007-2341: Undefined Security Weakness

PHP remote file inclusion vulnerability in suite/index.php in phpBandManager 0.8 allows remote attackers to execute arbitrary PHP code via a URL in the pg parameter...

CVE-2006-6629

lib/WeBWorK/PG/Translator.pm in WeBWorK Program Generation PG Language before 2.3.1 uses an insufficiently restrictive regular expression to determine valid macro filenames, which allows attackers to load arbitrary macro files whose names contain the strings 1 dangerousMacros.pl, 2 PG.pl, or 3...

CVE-2006-6629

lib/WeBWorK/PG/Translator.pm in WeBWorK Program Generation PG Language before 2.3.1 uses an insufficiently restrictive regular expression to determine valid macro filenames, which allows attackers to load arbitrary macro files whose names contain the strings 1 dangerousMacros.pl, 2 PG.pl, or 3...

CVE-2006-6629

The CVE-2006-6629 issue affects WeBWorK PG Language prior to version 2.3.1. It concerns lib/WeBWorK/PG/Translator.pm, where an insufficiently restrictive regular expression to validate macro filenames allows loading of arbitrary macro files whose names contain the strings dangerousMacros.pl, PG.p...

CVE-2006-6629: Undefined Security Weakness

lib/WeBWorK/PG/Translator.pm in WeBWorK Program Generation PG Language before 2.3.1 uses an insufficiently restrictive regular expression to determine valid macro filenames, which allows attackers to load arbitrary macro files whose names contain the strings 1 dangerousMacros.pl, 2 PG.pl, or 3...

CVE-2006-2839

Directory traversal vulnerability in PG Problem Editor module PGProblemEditor.pm in WeBWorK Online Homework Delivery System 2.2.0 and earlier allows remote attackers to read and write files outside of the templates directory...