117 matches found
snetworks PHP Classifieds 5.0 - Remote File Inclusion
+By CrackersChild+ Script.......: SNETWORKS PHP CLASSIFIEDS Page.........: http://www.snetworks.biz/ Author.......: CrackersChild | [email protected] & [email protected] Class........: Remote File Ä°nclude Vulnerability Demo.........: http://xxxclassifieds.com/classifieds/...
CVE-2007-2254
CVE-2007-2254 affects PHP Classifieds 6.04 (admin/setup/level2.php). The vulnerability is a PHP remote file inclusion that allows an attacker to execute arbitrary PHP code via a URL supplied to the dir parameter, indicating a remote code execution path. Root cause is improper handling of the dir ...
CVE-2006-5828
SQL injection vulnerability in detail.php in DeltaScripts PHP Classifieds 7.1 and earlier allows remote attackers to execute arbitrary SQL commands via the userid parameter...
CVE-2006-5828
SQL injection vulnerability in detail.php in DeltaScripts PHP Classifieds 7.1 and earlier allows remote attackers to execute arbitrary SQL commands via the userid parameter...
CVE-2006-5828
CVE-2006-5828 affects DeltaScripts PHP Classifieds before the 7.2/7.1 release: the vulnerable file is detail.php, where the user_id parameter is used in an SQL query, enabling remote attackers to execute arbitrary SQL commands. The entry explicitly notes a SQL injection vulnerability in DeltaScri...
PHP Classifieds <= 7.1 (detail.php) Remote SQL Injection Exploit
Exploit for unknown platform in category web applications ================================================================ PHP Classifieds = 7.1 detail.php Remote SQL Injection Exploit ================================================================ !/usr/bin/perl Script Name: Php Classifieds = 7...
PHP Classifieds 7.1 - 'detail.php' SQL Injection
!/usr/bin/perl Script Name: Php Classifieds newProto = "tcp", PeerAddr = "$classifiedsserver", PeerPort = "$classifiedsport" || die "\n+ Connection failed...\n"; print $classifieds "...
PHP Classifieds catid_search及catid变量远程SQL注入漏洞
PHP Classifieds是一款基于WEB的PHP编写的目录分类程序。 PHP Classifieds对用户提交给的参数缺少正确充分的过滤，远程攻击者可以利用此漏洞非授权操作数据库。 PHP Classifieds的index.php和search.php脚本对用户提交catidsearch或catid参数数据缺少充分过滤，远程攻击者可以通过在输入数据中插入特定的SQL命令来非授权获取对数据库的访问。 DeltaScripts PHP Classifieds = 7.1 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...
CVE-2006-5520
PHP remote file inclusion vulnerability in functions.php in DeltaScripts PHP Classifieds 7.1 allows remote attackers to execute arbitrary PHP code via a URL in the setpath parameter...
PHPClassifieds7.1.txt
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= PHP Classifieds 7.1 - Remote File Include Vulnerability =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Download : http://softadmin.deltascripts.com/downloadget.php?id=32...
PHP Classifieds 7.1 - Remote File Include Vulnerability
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= PHP Classifieds 7.1 - Remote File Include Vulnerability =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Download : http://softadmin.deltascripts.com/downloadget.php?id=32...
CVE-2006-5208
Multiple SQL injection vulnerabilities in PHP Classifieds 7.1 allow remote attackers to execute arbitrary SQL commands via 1 the catidsearch parameter in search.php and 2 the catid parameter in index.php...
CVE-2006-5208
Multiple SQL injection vulnerabilities in PHP Classifieds 7.1 allow remote attackers to execute arbitrary SQL commands via 1 the catidsearch parameter in search.php and 2 the catid parameter in index.php...
CVE-2006-5208
CVE-2006-5208 affects PHP Classifieds 7.1. It contains SQL injection vulnerabilities in two parameters: catid_search (search.php) and catid (index.php). The underlying issue is unsanitized input allowing remote attackers to execute arbitrary SQL commands. Reported impact is that an attacker can r...
PHP Classifieds 7.1 - index.php SQL Injection
PHP Classifieds 7.1 - index.php SQL Injection ---- Credit: Kzar [email protected] kzar.co.uk/exploits/phpclassifiedsexploit ---- App Name: PHP Classifieds = 7.1 App URL: www.deltascripts.com/phpclassifieds Problem: Multiple SQL Injection exploits ---- Exploit: search.php?catidsearch=sql...
PHP Classifieds 7.1 (index.php) Remote SQL Injection Vulnerability
No description provided by source. ---- Credit: Kzar [email protected] kzar.co.uk/exploits/phpclassifiedsexploit ---- App Name: PHP Classifieds = 7.1 App URL: www.deltascripts.com/phpclassifieds Problem: Multiple SQL Injection exploits ---- Exploit: search.php?catidsearch=sql index.php?catid=sql --...
PHP Classifieds 7.1 - 'index.php' SQL Injection
---- Credit: Kzar [email protected] kzar.co.uk/exploits/phpclassifiedsexploit ---- App Name: PHP Classifieds = 7.1 App URL: www.deltascripts.com/phpclassifieds Problem: Multiple SQL Injection exploits ---- Exploit: search.php?catidsearch=sql index.php?catid=sql ---- Example: Puts Username and...
PHP Classifieds 7.1 (index.php) Remote SQL Injection Vulnerability
---- Credit: Kzar [email protected] kzar.co.uk/exploits/phpclassifiedsexploit ---- App Name: PHP Classifieds = 7.1 App URL: www.deltascripts.com/phpclassifieds Problem: Multiple SQL Injection exploits ---- Exploit: search.php?catidsearch=sql index.php?catid=sql ---- Example: Puts Username and...
CVE-2006-3329
SQL injection vulnerability in search.php in PHP/MySQL Classifieds PHP Classifieds allows remote attackers to execute arbitrary SQL commands via the rate parameter...
CVE-2006-3330
The CVE-2006-3330 entry describes a Cross-site Scripting (XSS) vulnerability in AddAsset1.php of PHP/MySQL Classifieds (PHP Classifieds). The weakness allows remote attackers to influence the application via the ProductName (Title), url, and Description parameters, potentially related to issues i...