CVE-2008-7120

SQL injection vulnerability in Mr. CGI Guy Hot Links SQL-PHP 3 and earlier allows remote attackers to execute arbitrary SQL commands via the news.php parameter...

CVE-2008-7120

CVE-2008-7120 : SQL injection in Mr. CGI Guy Hot Links SQL-PHP 3 and earlier allows remote attackers to execute arbitrary SQL via the news.php parameter. The vulnerability is described as V2 CVSS base score 7.5 (HIGH) with network attack vector, low complexity, no authentication needed, and parti...

CVE-2008-7121

CVE-2008-7121 describes an XSS vulnerability in Mr. CGI Guy Hot Links SQL-PHP 3 and earlier, where remote attackers can inject arbitrary web script or HTML through the search bar. The affected component is the SQL-PHP-based search functionality in the product, with exploitation relying on imprope...

CVE-2008-7120: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Mr. CGI Guy Hot Links SQL-PHP 3 and earlier allows remote attackers to execute arbitrary SQL commands via the news.php parameter...

Hot Links SQL-PHP 3 (report.php) Multiple Vulnerabilities

No description provided by source. /\ \ /\ \ \ /\ /\ \ //\ \ \ \ \ \ \ \ \ \ \ /',\ \ \ \ \ \ \ \ /\ /'\ /'\ \ \ \ /\ ,\ /, \ \ \ \ ,\ \ \ \ \ // / // /\//\///\/\ \ \/\ // // // //////// //// security breakd0wn! Title: Hot Links SQL-PHP 3 report.php Multiple...

hotlinks-sql.txt

. . | / | | \ \ | / / |\ \ \ |/ // / /\ \ / |/ \ / // | / | | / \ /|\ / / / / \ / \ / / / \ | | /\ /\ / \ | \ // est.2007 / / forum.darkc0de.com --d3hydr8 -rsauron-baltazar -sinner01 -C1c4Tr1Z - beenu ---QKrun1x-P47tr1ck - FeDeReR -MAGE -JeTFyrE and all darkc0de members ---...

Hot Links SQL-PHP 3 - report.php Multiple Vulnerabilities

Hot Links SQL-PHP 3 - report.php Multiple Vulnerabilities /\ \ /\ \ \ /\ /\ \ //\ \ \ \ \ \ \ \ \ \ \ /',\ \ \ \ \ \ \ \ /\ /'\ /'\ \ \ \ /\ ,\ /, \ \ \ \ ,\ \ \ \ // / // /\//\///\/\ \ \/\ // // // //////// //// security breakd0wn! Title: Hot Links SQL-PHP 3...

CVE-2001-0042: Undefined Security Weakness

PHP 3.x PHP3 on Apache 1.3.6 allows remote attackers to read arbitrary files via a modified .. dot dot attack containing "%5c" encoded backslash sequences...

CVE-2001-0042

PHP 3.x PHP3 on Apache 1.3.6 allows remote attackers to read arbitrary files via a modified .. dot dot attack containing "%5c" encoded backslash sequences...

CVE-2000-0967

CVE-2000-0967 affects PHP 3 and PHP 4 where user-supplied format strings are not properly sanitized in error log messages, enabling remote command execution via crafted error output. The vulnerability applies to PHP installations that log errors/warnings (format-string attacks via syslog/vsnprint...