CVE-2008-5197

SQL injection vulnerability in classifieds.php in PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the lid parameter in a detailadverts action...

CVE-2008-5197

The CVE-2008-5197 entry describes a SQL injection vulnerability in PHP-Fusion’s classifieds.php, exploitable via the lid parameter in a detail_adverts action. This allows remote attackers to execute arbitrary SQL commands. The affected component is a PHP-Fusion classifieds module (classifieds.php...

CVE-2008-5196

SQL injection vulnerability in kroax.php in the Kroax thekroax 4.42 and earlier module for PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the category parameter...

CVE-2008-5197

SQL injection vulnerability in classifieds.php in PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the lid parameter in a detailadverts action...

CVE-2008-5196

CVE-2008-5196 affects the Kroax PHP-Fusion module (Kroax 4.42 and earlier). The vulnerability is an SQL injection in kroax.php that allows remote attackers to execute arbitrary SQL commands via the category parameter. CVSS v2 base score is 7.5 (HIGH) with network attack vector, low attack complex...

CVE-2008-5196: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in kroax.php in the Kroax thekroax 4.42 and earlier module for PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the category parameter...

PHP-Fusion 7.00.1 (messages.php) Remote SQL Injection Exploit

No description provided by source. ?php /-------------------------------------- PHP-Fusion 7.00.1 messages.php Remote SQL Injection Exploit requires magicquotes == off coded by irk4zatyahoo.pl homepage: http://irk4z.wordpress.com greets: all friends ; --------------------------------------/ $host...

CVE-2008-5197: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in classifieds.php in PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the lid parameter in a detailadverts action...

phpfusion7001-sql.txt

\n" . " php $argv0 localhost /php-fusion/ user s3cret "SELECT database"\n". " php $argv0 localhost / user s3cret "SELECT loadfile0x2F6574632F706173737764"\n\n"; die; echo "Logging into system..."; //login to php-fusion using login and pass $logindata = send$host, array "path" =...

PHP-Fusion 7.00.1 (messages.php) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ============================================================= PHP-Fusion 7.00.1 messages.php Remote SQL Injection Exploit ============================================================= \n" . " php $argv0 localhost /php-fusion/ user s3cret...

PHP-Fusion 7.00.1 - 'messages.php' SQL Injection

\n" . " php $argv0 localhost /php-fusion/ user s3cret "SELECT database"\n". " php $argv0 localhost / user s3cret "SELECT loadfile0x2F6574632F706173737764"\n\n"; die; echo "Logging into system..."; //login to php-fusion using login and pass $logindata = send$host, array "path" =...

CVE-2008-5074

SQL injection vulnerability in index.php in the Freshlinks 1.0 RC1 module for PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the linkid parameter...

Sql injection

SQL injection vulnerability in index.php in the Freshlinks 1.0 RC1 module for PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the linkid parameter...

CVE-2008-5074

SQL injection vulnerability in index.php in the Freshlinks 1.0 RC1 module for PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the linkid parameter...

CVE-2008-5074

CVE-2008-5074 is a SQL injection vulnerability in the Freshlinks 1.0 RC1 module for PHP-Fusion . The flaw resides in index.php where the linkid parameter can be manipulated to cause arbitrary SQL commands to be executed by remote attackers. Documented details indicate an impact on data confidenti...

CVE-2008-5074: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in the Freshlinks 1.0 RC1 module for PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the linkid parameter...

CVE-2008-4521

SQL injection vulnerability in thisraidprogress.php in the World of Warcraft tracker infusion raidtrackerpanel module 2.0 for PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the INFORAIDID parameter...

Sql injection

SQL injection vulnerability in recept.php in the Recepies Recept module 1.1 for PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the katid parameter in a kategorier action. NOTE: some of these details are obtained from third party information...

Sql injection

SQL injection vulnerability in thisraidprogress.php in the World of Warcraft tracker infusion raidtrackerpanel module 2.0 for PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the INFORAIDID parameter...

CVE-2008-4527

The CVE-2008-4527 issue affects the Recepies (Recept) module for PHP-Fusion, specifically recept.php in version 1.1. The vulnerability stems from an SQL injection via the kat_id parameter in the kategorier action, allowing remote attackers to execute arbitrary SQL commands. CVSS2 base score is 7....