814 matches found
CVE-2008-5306
An SQL injection vulnerability exists in PG Real Estate Solution: admin/index.php accepts the login_lg (username) parameter in a way that allows remote attackers to execute arbitrary SQL commands. The issue is tied to the login handling code and carries a CVSS v2 base score of 7.5 (HIGH) with par...
CVE-2008-5307
CVE-2008-5307: A SQL injection vulnerability exists in admin/index.php of the PG Roommate Finder Solution, exploitable via the login_lg parameter. The flaw enables remote attackers to execute arbitrary SQL commands. The NVD entry notes this as a high-severity issue (CVSSv2 base score 7.5; AV:N/AC...
CVE-2008-5306: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in admin/index.php in PG Real Estate Solution allows remote attackers to execute arbitrary SQL commands via the loginlg parameter username. NOTE: some of these details are obtained from third party information...
CVE-2008-5307: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in admin/index.php in PG Roommate Finder Solution allows remote attackers to execute arbitrary SQL commands via the loginlg parameter. NOTE: some of these details are obtained from third party information...
pgrealestate-sql.txt
PG Real Estate Solution Auth Bypass ---------------------------------------------------------- Discovered By: ZoRLu msn: [email protected] Date: 23.11.2008 Home: www.z0rlu.blogspot.com Kucuk Bir Rica: Lutfen Demolarý Hacklemeyin pls dont make hack demos N0T: YALNIZLIK, YiTiRDi ANLAMINI...
pgjobsite-sql.txt
PG Job Site homepage.php pollviewid Blind Sql inj. ---------------------------------------------------------- Discovered By: ZoRLu msn: [email protected] Date: 23.11.2008 Home: www.z0rlu.blogspot.com Kucuk Bir Rica: Lutfen Demolarý Hacklemeyin pls dont make hack demos N0T: YALNIZLIK, YiTiRDi...
PG Job Site (poll_view_id) Blind SQL Injection Vulnerability
No description provided by source. PG Job Site homepage.php pollviewid Blind Sql inj. ---------------------------------------------------------- Discovered By: ZoRLu msn: [email protected] Date: 23.11.2008 Home: www.z0rlu.blogspot.com Kucuk Bir Rica: Lutfen Demolarý Hacklemeyin pls dont make...
Pilot Group PG Roommate Finder Solution - Authentication Bypass
Pilot Group PG Roommate Finder Solution - Authentication Bypass PG Roomate Finder Solution Auth Bypass ---------------------------------------------------------- Discovered By: ZoRLu msn: [email protected] Date: 23.11.2008 Home: www.z0rlu.blogspot.com Kucuk Bir Rica: Lutfen Demolarý Hacklemey...
PG Job Site - Blind SQL Injection
PG Job Site - Blind SQL Injection PG Job Site homepage.php pollviewid Blind Sql inj. ---------------------------------------------------------- Discovered By: ZoRLu msn: [email protected] Date: 23.11.2008 Home: www.z0rlu.blogspot.com Kucuk Bir Rica: Lutfen Demolarý Hacklemeyin pls dont make...
Pilot Group PG Roommate Finder Solution - SQL Injection
Pilot Group PG Roommate Finder Solution - SQL Injection source: https://www.securityfocus.com/bid/32430/info Pilot Group PG Roommate is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could...
PG Roomate Finder Solution (Auth Bypass) SQL Injection Vulnerability
Exploit for unknown platform in category web applications ==================================================================== PG Roomate Finder Solution Auth Bypass SQL Injection Vulnerability ==================================================================== PG Roomate Finder Solution Auth...
PG Job Site (poll_view_id) Blind SQL Injection Vulnerability
Exploit for unknown platform in category web applications ============================================================ PG Job Site pollviewid Blind SQL Injection Vulnerability ============================================================ PG Job Site homepage.php pollviewid Blind Sql inj...
Pilot Group PG Roommate Finder Solution - SQL Injection
source: https://www.securityfocus.com/bid/32430/info Pilot Group PG Roommate is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access...
PG Job Site - Blind SQL Injection
PG Job Site homepage.php pollviewid Blind Sql inj. ---------------------------------------------------------- Discovered By: ZoRLu msn: [email protected] Date: 23.11.2008 Home: www.z0rlu.blogspot.com Kucuk Bir Rica: Lutfen Demolarý Hacklemeyin pls dont make hack demos N0T: YALNIZLIK, YiTiRDi...
PG Real Estate - Authentication Bypass
PG Real Estate Solution Auth Bypass ---------------------------------------------------------- Discovered By: ZoRLu msn: [email protected] Date: 23.11.2008 Home: www.z0rlu.blogspot.com Kucuk Bir Rica: Lutfen Demolarý Hacklemeyin pls dont make hack demos N0T: YALNIZLIK, YiTiRDi ANLAMINI...
CVE-2008-4751: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in index.php in iPei Guestbook 2.0 allows remote attackers to inject arbitrary web script or HTML via the pg parameter, a different vector than CVE-2005-4597...
CVE-2008-4709: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in newsread.php in Pilot Group PG eTraining allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2008-4665
SQL injection vulnerability in PG Matchmaking allows remote attackers to execute arbitrary SQL commands via the id parameter to 1 newsread.php and 2 giftsshow.php...
