PhotoPost PHP Pro 3.x/4.x showgallery.php Multiple Parameter SQL Injection

No description provided by source. source: http://www.securityfocus.com/bid/9994/info Multiple SQL injection, cross-site scripting and HTML injection vulnerabilities have been identified in the application, which may allow an attacker to execute arbitrary HTML or script code in a user's browser...

PHP Pro Bid 5.2.4 auctionsearch.php advsrc Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/19158/info PHP Pro Bid is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues, because the application fails to properly sanitize user-supplied input. A successful...

PHP Pro Bid 5.2.4/6.04 Multiple SQL Injection Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/31263/info PHP Pro Bid is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied input before using it in an SQL query. Exploiting these issues could allow an attacker to...

DeltaScripts PHP Pro Publish 2.0 - Multiple Cross-Site Scripting Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/18243/info PHP Pro Publish is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to...

All Enthusiast PhotoPost PHP Pro 5.0 adm-photo.php Arbitrary Image Manipulation

No description provided by source. source: http://www.securityfocus.com/bid/12779/info PhotoPost PHP Pro is a web-based image gallery application written in PHP. It can be implemented on any platform that supports PHP script execution. Multiple remote vulnerabilities affect All Enthusiast PhotoPo...

News Script PHP Pro (fckeditor) File Upload Vulnerability

Exploit for php platform in category web applications » Title : News Script PHP Pro fckeditor File Upload Vulnerability » Script : News Script PHP Pro » TestedON: linux/php » Download: http://newsscriptphp.com/ » Author : Net.Edit0r » Email : email protected » Date : 2010-12-26 » Version ...

News Script PHP Pro Shell Upload

============================================================================== » News Script PHP Pro fckeditor File Upload Vulnerability ============================================================================== » Title : News Script PHP Pro fckeditor File Upload Vulnerability » Script : News...

News Script PHP Pro - FCKeditor Arbitrary File Upload

News Script PHP Pro - FCKeditor Arbitrary File Upload ============================================================================== » News Script PHP Pro fckeditor File Upload Vulnerability ============================================================================== » Title : News Script PHP P...

News Script PHP Pro - 'FCKeditor' Arbitrary File Upload

============================================================================== » News Script PHP Pro fckeditor File Upload Vulnerability ============================================================================== » Title : News Script PHP Pro fckeditor File Upload Vulnerability » Script : News...

PHP Pro Bid 6.0 SQL Injection

Securitylab.ir Application Info: Name: PHP Pro Bid Vendor: http://www.phpprobid.com Version: 6.0 Vulnerability Info: Type: SQL Injection Risk: Medium Vulnerability: http://site.com/auctiondetails.php? name = item name & auctionid = item ID and 1 = 2 union select concat username, 0x3a, password,...

CVE-2009-3336

SQL injection vulnerability in auctiondetails.php in PHP Pro Bid allows remote attackers to execute arbitrary SQL commands via the auctionid parameter...

Sql injection

SQL injection vulnerability in auctiondetails.php in PHP Pro Bid allows remote attackers to execute arbitrary SQL commands via the auctionid parameter...

CVE-2009-3336

SQL injection vulnerability in auctiondetails.php in PHP Pro Bid allows remote attackers to execute arbitrary SQL commands via the auctionid parameter...

CVE-2009-3336

CVE-2009-3336 describes an SQL injection in auction_details.php of PHP Pro Bid, exploitable via the auction_id parameter to allow remote SQL execution. The vulnerability is confirmed by multiple sources (NVD, CVE list, PRION/CVELIST) with a base score of 7.5 (HIGH). The connected documents do not...

PHP Pro Bid Blind SQL Injection

!/usr/bin/perl //////////////////////////////////\\\\\\\\\\\\\\\\\ \\\\\\\\\\\\\\\\\////////////////////////////////// o PHP Pro Bid Blind SQL Injection Exploit Software : PHP Pro Bid Vendor : http://www.phpprobid.com/ Author : NoGe Contact :...

PHP Pro Bid Remote Blind SQL Injection Exploit

No description provided by source. !/usr/bin/perl //////////////////////////////////\\\\\\\\\\\\\\\\\ \\\\\\\\\\\\\\\\\////////////////////////////////// o PHP Pro Bid Blind SQL Injection Exploit Software : PHP Pro Bid Vendor : http://www.phpprobid.com/ Author :...

PHP Pro Bid Remote Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ============================================== PHP Pro Bid Remote Blind SQL Injection Exploit ============================================== !/usr/bin/perl //////////////////////////////////\\\\\\\\\\\\\\\\\...

PHP Pro Bid - Blind SQL Injection

!/usr/bin/perl //////////////////////////////////\\\\\\\\\\\\\\\\\ \\\\\\\\\\\\\\\\\////////////////////////////////// o PHP Pro Bid Blind SQL Injection Exploit Software : PHP Pro Bid Vendor : http://www.phpprobid.com/ Author : NoGe Contact :...

PHP Pro Bid - Blind SQL Injection

PHP Pro Bid - Blind SQL Injection !/usr/bin/perl //////////////////////////////////\\\\\\\\\\\\\\\\\ \\\\\\\\\\\\\\\\\////////////////////////////////// o PHP Pro Bid Blind SQL Injection Exploit Software : PHP Pro Bid Vendor : http://www.phpprobid.com/ Author :...

Remote file inclusion

PHP remote file inclusion vulnerability in includes/classimage.php in PHP Pro Bid 6.05, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the fileExtension parameter. NOTE: the provenance of this information is unknown; the details are obtained...