159 matches found
PHP Live! 3.2.1/2 (x) Remote Blind SQL Injection Exploit
Exploit for unknown platform in category web applications ======================================================== PHP Live! 3.2.1/2 x Remote Blind SQL Injection Exploit ======================================================== !/usr/bin/perl Original discover author banner PhpLive 3.2.1/2 x Blind...
PHP Live! <= 3.2.2 (questid) Remote SQL Injection Vulnerability
Exploit for unknown platform in category web applications =============================================================== PHP Live! = 3.2.2 questid Remote SQL Injection Vulnerability =============================================================== Modified version: skys !Info! PHP Live! © OSI Cod...
PHP Live! 3.2.2 - 'questid' SQL Injection (2)
Original author: Found by Xar of h4ck-y0u, Greets to Don & ViSiOn Modified version: skys Contact: skysbsbatgmail.com !Info! PHP Live! © OSI Codes Inc. enables live help and live customer support communication directly from your website. With PHP Live!, you can provide one-on-one chat assistance ...
PHP Live! 3.2.1/2 (x) Remote Blind SQL Injection Vulnerability
No description provided by source. PhpLive 3.2.1/2 x Blind SQL injection -X | |/ / || |/ | / | \ \ \ / / | \ / / \ | ' | | || | / | \ // / / / | , / ||\|||| ||| // // / // Red n'black i dress eagle on my chest. It's good to be an ALBANIAN Keep my head up high for that flag i die. Im...
PHP Live! 3.2.1/2 (x) Remote Blind SQL Injection Vulnerability
Exploit for unknown platform in category web applications ============================================================== PHP Live! 3.2.1/2 x Remote Blind SQL Injection Vulnerability ============================================================== PhpLive 3.2.1/2 x Blind SQL injection -X | |/ / || |...
Unfixed XSS vulnerability at www.osicodesinc.com
Security researcher LostBrilliance, has submitted on 30/06/2009 a cross-site-scripting XSS vulnerability affecting www.osicodesinc.com, which at the time of submission ranked 408711 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 01/07/2009. It...
CVE-2008-3764
Eval injection vulnerability in globalsoff.php in Turnkey PHP Live Helper 2.0.1 and earlier allows remote attackers to execute arbitrary PHP code via the test parameter, and probably arbitrary parameters, to chat.php...
Sql injection
Eval injection vulnerability in globalsoff.php in Turnkey PHP Live Helper 2.0.1 and earlier allows remote attackers to execute arbitrary PHP code via the test parameter, and probably arbitrary parameters, to chat.php...
Code injection
Variable overwrite vulnerability in libsecure.php in Turnkey PHP Live Helper 2.0.1 and earlier, when registerglobals is enabled, allows remote attackers to overwrite arbitrary variables related to the db config file. NOTE: this can be leveraged for code injection by overwriting the language file...
CVE-2008-3763
Variable overwrite vulnerability in libsecure.php in Turnkey PHP Live Helper 2.0.1 and earlier, when registerglobals is enabled, allows remote attackers to overwrite arbitrary variables related to the db config file. NOTE: this can be leveraged for code injection by overwriting the language file...
CVE-2008-3762
SQL injection vulnerability in onlinestatushtml.php in Turnkey PHP Live Helper 2.0.1 and earlier allows remote attackers to execute arbitrary SQL commands via the dep parameter, related to lack of input sanitization in the get function in global.php...
CVE-2008-3762
CVE-2008-3762 is a SQL injection in Turnkey PHP Live Helper 2.0.1 and earlier. The vulnerability arises from lack of input sanitization in the get function (global.php), allowing remote attackers to execute arbitrary SQL via the dep parameter in onlinestatus_html.php. Connected sources confirm th...
CVE-2008-3764
CVE-2008-3764 describes an eval injection in Turnkey PHP Live Helper (PHP Live Helper) 2.0.1 and earlier. The vulnerability resides in globalsoff.php and allows remote attackers to execute arbitrary PHP code via the test parameter (and likely other parameters) passed to chat.php. This is a remote...
CVE-2008-3763
CVE-2008-3763 describes a variable overwrite vulnerability in libsecure.php of Turnkey PHP Live Helper 2.0.1 and earlier. When register_globals is enabled, remote attackers can overwrite arbitrary variables related to the db config file, potentially enabling code injection by overwriting the lang...
PHP Live Helper <= 2.0.1 Multiple Remoet Vulnerabilities
No description provided by source. GulfTech Security Research August 16, 2008 Vendor : Turnkey Web Tools, Inc URL : http://www.turnkeywebtools.com Version : PHP Live Helper = 2.0.1 Risk : Multiple Vulnerabilities Description: PHP Live Helper is an online support system written in php that allows...
PHP Live Helper <= 2.0.1 Multiple Remote Vulnerabilities
No description provided by source. GulfTech Security Research August 16, 2008 Vendor : Turnkey Web Tools, Inc URL : http://www.turnkeywebtools.com Version : PHP Live Helper = 2.0.1 Risk : Multiple Vulnerabilities Description: PHP Live Helper is an online support system written in php that allows...
PHP Live Helper 2.0.1 - Multiple Vulnerabilities
GulfTech Security Research August 16, 2008 Vendor : Turnkey Web Tools, Inc URL : http://www.turnkeywebtools.com Version : PHP Live Helper DBsite-queryfirst"SELECT FROM ". $this-dbprefix.$table." where ".$from."='$id'"; if isarray$result foreach $result as $key = $val $info$key = stripslashes$val;...
phplivehelper-sqlexec.txt
GulfTech Security Research August 16, 2008 Vendor : Turnkey Web Tools, Inc URL : http://www.turnkeywebtools.com Version : PHP Live Helper DBsite-queryfirst"SELECT FROM ". $this-dbprefix.$table." where ".$from."='$id'"; if isarray$result foreach $result as $key = $val $info$key = stripslashes$val;...
PHP Live! Helper < 2.1.0 Multiple Vulnerabilities
Binary data 4627.prm...
PHP Live Helper <= 2.0.1 Multiple Remote Vulnerabilities
Exploit for unknown platform in category web applications ======================================================== PHP Live Helper DBsite-queryfirst"SELECT FROM ". $this-dbprefix.$table." where ".$from."='$id'"; if isarray$result...