Lucene search
+L

164 matches found

Packet Storm
Packet Storm
•added 2009/09/15 12:00 a.m.•44 views

PHP Pro Bid Blind SQL Injection

!/usr/bin/perl //////////////////////////////////\\\\\\\\\\\\\\\\\ \\\\\\\\\\\\\\\\\////////////////////////////////// o PHP Pro Bid Blind SQL Injection Exploit Software : PHP Pro Bid Vendor : http://www.phpprobid.com/ Author : NoGe Contact :...

0.7AI score
SaveExploits0
seebug.org
seebug.org
•added 2009/09/14 12:00 a.m.•41 views

PHP Pro Bid Remote Blind SQL Injection Exploit

No description provided by source. !/usr/bin/perl //////////////////////////////////\\\\\\\\\\\\\\\\\ \\\\\\\\\\\\\\\\\////////////////////////////////// o PHP Pro Bid Blind SQL Injection Exploit Software : PHP Pro Bid Vendor : http://www.phpprobid.com/ Author :...

7.1AI score
SaveExploits0
zdt
zdt
•added 2009/09/14 12:00 a.m.•35 views

PHP Pro Bid Remote Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ============================================== PHP Pro Bid Remote Blind SQL Injection Exploit ============================================== !/usr/bin/perl //////////////////////////////////\\\\\\\\\\\\\\\\\...

7.1AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2009/09/14 12:00 a.m.•47 views

PHP Pro Bid - Blind SQL Injection

!/usr/bin/perl //////////////////////////////////\\\\\\\\\\\\\\\\\ \\\\\\\\\\\\\\\\\////////////////////////////////// o PHP Pro Bid Blind SQL Injection Exploit Software : PHP Pro Bid Vendor : http://www.phpprobid.com/ Author : NoGe Contact :...

7.5CVSS5.8AI score0.00961EPSS
SaveExploits2
exploitpack
exploitpack
•added 2009/09/14 12:00 a.m.•33 views

PHP Pro Bid - Blind SQL Injection

PHP Pro Bid - Blind SQL Injection !/usr/bin/perl //////////////////////////////////\\\\\\\\\\\\\\\\\ \\\\\\\\\\\\\\\\\////////////////////////////////// o PHP Pro Bid Blind SQL Injection Exploit Software : PHP Pro Bid Vendor : http://www.phpprobid.com/ Author :...

0.7AI score
SaveExploits0
Prion
Prion
•added 2009/03/19 10:30 a.m.•17 views

Remote file inclusion

PHP remote file inclusion vulnerability in includes/classimage.php in PHP Pro Bid 6.05, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the fileExtension parameter. NOTE: the provenance of this information is unknown; the details are obtained...

6.8CVSS7.8AI score0.01795EPSS
SaveExploits0References4Affected Software1
NVD
NVD
•added 2009/03/19 10:30 a.m.•25 views

CVE-2009-0970

PHP remote file inclusion vulnerability in includes/classimage.php in PHP Pro Bid 6.05, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the fileExtension parameter. NOTE: the provenance of this information is unknown; the details are obtained...

6.8CVSS7.3AI score0.01795EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2009/03/19 10:00 a.m.•31 views

CVE-2009-0970

PHP remote file inclusion vulnerability in includes/classimage.php in PHP Pro Bid 6.05, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the fileExtension parameter. NOTE: the provenance of this information is unknown; the details are obtained...

7.3AI score0.01795EPSS
SaveExploits0References4
CVE
CVE
•added 2009/03/19 10:00 a.m.•55 views

CVE-2009-0970

PHP Pro Bid 6.05 contains a remote file inclusion vulnerability in includes/class_image.php that is exploitable when register_globals is enabled. An attacker can supply a URL in the fileExtension parameter to cause the remote code to be executed (arbitrary PHP code). The description comes from CV...

6.8CVSS7.5AI score0.01795EPSS
SaveExploits0References4Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/03/19 12:00 a.m.•6 views

CVE-2009-0970: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in includes/classimage.php in PHP Pro Bid 6.05, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the fileExtension parameter. NOTE: the provenance of this information is unknown; the details are obtained...

6.8CVSS6.4AI score0.01795EPSS
SaveExploits0References2
Prion
Prion
•added 2009/02/03 11:30 a.m.•25 views

Sql injection

Multiple SQL injection vulnerabilities in PHP Pro Bid PPB 6.04 allow remote attackers to execute arbitrary SQL commands via the 1 orderfield and 2 ordertype parameters to categories.php and unspecified other components. NOTE: some of these details are obtained from third party information...

7.5CVSS9.3AI score0.00971EPSS
SaveExploits2References4Affected Software1
NVD
NVD
•added 2009/02/03 11:30 a.m.•23 views

CVE-2008-6043

Multiple SQL injection vulnerabilities in PHP Pro Bid PPB 6.04 allow remote attackers to execute arbitrary SQL commands via the 1 orderfield and 2 ordertype parameters to categories.php and unspecified other components. NOTE: some of these details are obtained from third party information...

7.5CVSS8.6AI score0.00971EPSS
SaveExploits2References4
Cvelist
Cvelist
•added 2009/02/03 11:00 a.m.•33 views

CVE-2008-6043

Multiple SQL injection vulnerabilities in PHP Pro Bid PPB 6.04 allow remote attackers to execute arbitrary SQL commands via the 1 orderfield and 2 ordertype parameters to categories.php and unspecified other components. NOTE: some of these details are obtained from third party information...

8.6AI score0.00971EPSS
SaveExploits2References4
CVE
CVE
•added 2009/02/03 11:00 a.m.•59 views

CVE-2008-6043

CVE-2008-6043 describes multiple SQL injection vulnerabilities in PHP Pro Bid (PPB) 6.04 . Remote attackers can execute arbitrary SQL commands via the order_field and order_type parameters to categories.php (and unspecified other components). The entry notes the details are partially from third-p...

7.5CVSS6.7AI score0.00971EPSS
SaveExploits2References4Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/02/03 12:00 a.m.•6 views

CVE-2008-6043: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in PHP Pro Bid PPB 6.04 allow remote attackers to execute arbitrary SQL commands via the 1 orderfield and 2 ordertype parameters to categories.php and unspecified other components. NOTE: some of these details are obtained from third party information...

7.5CVSS6.4AI score0.00971EPSS
SaveExploits2References2
securityvulns
securityvulns
•added 2008/09/20 12:00 a.m.•123 views

PHP pro bid v 6.04 SQL injection

Affected software: PHP pro bid v 6.04 as at 2008-09-11 Vendor description: The Leading Proffessional sic Auction Script Software available online today written in PHP/ Mysql Impact: SQL injection Description: categories.php and other pages of php pro bid accept user-supplied order-by and ASC/DESC...

7.8AI score
SaveExploits0
exploitpack
exploitpack
•added 2008/09/19 12:00 a.m.•22 views

PHP Pro Bid 5.2.46.04 - Multiple SQL Injections

PHP Pro Bid 5.2.46.04 - Multiple SQL Injections source: https://www.securityfocus.com/bid/31263/info PHP Pro Bid is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied input before using it in an SQL query. Exploiting these issues could allow an...

0.4AI score
SaveExploits0
Packet Storm
Packet Storm
•added 2008/09/19 12:00 a.m.•27 views

phpprobid-sql.txt

Affected software: PHP pro bid v 6.04 as at 2008-09-11 Vendor description: The Leading Proffessional sic Auction Script Software available online today written in PHP/ Mysql Impact: SQL injection Description: categories.php and other pages of php pro bid accept user-supplied order-by and ASC/DESC...

7.4AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2008/09/19 12:00 a.m.•33 views

PHP Pro Bid 5.2.4/6.04 - Multiple SQL Injections

source: https://www.securityfocus.com/bid/31263/info PHP Pro Bid is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied input before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the application, access ...

7.5CVSS5.8AI score0.00971EPSS
SaveExploits2
Exploit DB
Exploit DB
•added 2006/07/25 12:00 a.m.•27 views

PHP Pro Bid 5.2.4 - 'auctionsearch.php?advsrc' Cross-Site Scripting

source: https://www.securityfocus.com/bid/19158/info PHP Pro Bid is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues, because the application fails to properly sanitize user-supplied input. A successful exploit of these vulnerabilities...

4.3CVSS5.8AI score0.01927EPSS
SaveExploits2
Rows per page
Query Builder