EUVD-2008-6492

Malware in sbrugna...

EUVD-2017-7404

Malware in sbrugna...

CVE-2017-15988

CVE-2017-15988 concerns the Nice PHP FAQ Script , where an unsafe handling of the GET parameter nice_theme in index.php leads to SQL injection. The root cause is lack of input sanitization/parameterization, enabling an attacker to inject SQL commands via the nice_theme parameter. Impact per sourc...

CVE-2017-15988

Nice PHP FAQ Script allows SQL Injection via the index.php nicetheme parameter, a different vulnerability than CVE-2008-6525...

Nice PHP FAQ Script - nice_theme SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Nice PHP FAQ Script - SQL Injection Dork: N/A Vendor Homepage: http://www.nicephpscripts.com/ Software http://www.nicephpscripts.com/demophpscript-PHP-FAQ-Script-Knowledgebase-Script.htm Demo:...

Nice PHP FAQ Script - 'nice_theme' SQL Injection

Exploit Title: Nice PHP FAQ Script - SQL Injection Dork: N/A Date: 30.10.2017 Vendor Homepage: http://www.nicephpscripts.com/ Software http://www.nicephpscripts.com/demophpscript-PHP-FAQ-Script-Knowledgebase-Script.htm Demo: http://www.nicephpscripts.com/scripts/faqscript/ Version: N/A Category:...

Nice PHP FAQ Script - nice_theme SQL Injection

Nice PHP FAQ Script - nicetheme SQL Injection Exploit Title: Nice PHP FAQ Script - SQL Injection Dork: N/A Date: 30.10.2017 Vendor Homepage: http://www.nicephpscripts.com/ Software http://www.nicephpscripts.com/demophpscript-PHP-FAQ-Script-Knowledgebase-Script.htm Demo:...

CVE-2008-6525

SQL injection vulnerability in the Admin Panel in Nice PHP FAQ Script Knowledge base Script allows remote attackers to execute arbitrary SQL commands via the Password parameter aka the pass field...

Sql injection

SQL injection vulnerability in the Admin Panel in Nice PHP FAQ Script Knowledge base Script allows remote attackers to execute arbitrary SQL commands via the Password parameter aka the pass field...

CVE-2008-6525

The CVE CVE-2008-6525 affects the Nice PHP FAQ Script Admin Panel and is caused by an SQL injection in the Password field (pass). Remote attackers can execute arbitrary SQL commands through this input vector. Exploitation is supported by external references (e.g., Exploit-DB). No remediation deta...