Banex PHP MySQL Banner Exchange 2.21 - members.php?cfg_root Remote File Inclusion

Banex PHP MySQL Banner Exchange 2.21 - members.php?cfgroot Remote File Inclusion source: https://www.securityfocus.com/bid/19240/info PHP MySQL Banner Exchange is prone to multiple SQL-injection vulnerabilities and a remote file-include vulnerability because it fails to properly sanitize...

Banex PHP MySQL Banner Exchange 2.21 - 'signup.php?site_name' SQL Injection

source: https://www.securityfocus.com/bid/19240/info PHP MySQL Banner Exchange is prone to multiple SQL-injection vulnerabilities and a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit the SQL-injection vulnerabilities to...

CVE-2006-3330

Cross-site scripting XSS vulnerability in AddAsset1.php in PHP/MySQL Classifieds PHP Classifieds allows remote attackers to execute arbitrary SQL commands via the 1 ProductName "Title" field, 2 url, and 3 Description parameters, possibly related to issues in add1.php...

CVE-2006-3329

SQL injection vulnerability in search.php in PHP/MySQL Classifieds PHP Classifieds allows remote attackers to execute arbitrary SQL commands via the rate parameter...

CVE-2006-3329

The CVE-2006-3329 entry concerns a SQL injection in search.php of PHP/MySQL Classifieds (PHP Classifieds). The vulnerability is exploitable via the rate parameter, potentially affecting data confidentiality, integrity, and availability as indicated by CVSS v2 base metrics (AV:N/AC:L/Au:N/C:P/I:P/...

CVE-2006-3330

The CVE-2006-3330 entry describes a Cross-site Scripting (XSS) vulnerability in AddAsset1.php of PHP/MySQL Classifieds (PHP Classifieds). The weakness allows remote attackers to influence the application via the ProductName (Title), url, and Description parameters, potentially related to issues i...

CosmicShoppingCart (search.php) Remote SQL Injection Vulnerability

Software: CosmicShoppingCart www.cosmicphp.com Risk: Medium Discovered by: Vympel Marcelo Almeida Background: CosmicShoppingCart is a PHP / MySQL e-commerce system. It is a fully customizable, shopping cart designed. SQL injections have been found, they could be exploited by users to retrieve the...

CosmicShoppingCart (search.php) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================== CosmicShoppingCart search.php Remote SQL Injection Vulnerability ================================================================== Software: CosmicShoppingCart...

CVE-2006-2042

Adobe Dreamweaver 8 before 8.0.2 and MX 2004 can generate code that allows SQL injection attacks in the 1 ColdFusion, 2 PHP mySQL, 3 ASP, 4 ASP.NET, and 5 JSP server models...

Sql injection

Adobe Dreamweaver 8 before 8.0.2 and MX 2004 can generate code that allows SQL injection attacks in the 1 ColdFusion, 2 PHP mySQL, 3 ASP, 4 ASP.NET, and 5 JSP server models...

CVE-2006-2042

Adobe Dreamweaver 8 before 8.0.2 and MX 2004 can generate code that allows SQL injection attacks in the 1 ColdFusion, 2 PHP mySQL, 3 ASP, 4 ASP.NET, and 5 JSP server models...

Clansys 1.1 (showid) - SQL Injection

Internet Security | |---==============================================================---| title: clansys 1.1 remote sql injection release: 2006-04-10 author: snatcher snatcher at gmx.ch country: switzerland |+| application: clansys 1.1 description: a php / mysql based clan content management...

XBrite Members 1.1 - id SQL Injection

XBrite Members 1.1 - id SQL Injection "Powered By XBrite Mem...

Claroline <= 1.7.4 (scormExport.inc.php) Remote Code Execution Exploit

Exploit for unknown platform in category web applications ====================================================================== Claroline works with registerglobals = On & allowurlfopen = On\r\n\r\n"; echo "dork: "Powered by Claroline" -demo\r\n\r\n"; if $argc5 echo "Usage: php ".$argv0." host...

CVE-2006-0692

Multiple SQL injection vulnerabilities in Carey Briggs PHP/MYSQL Timesheet 1 and 2 allow remote attackers to execute arbitrary SQL commands via the 1 yr, 2 month, 3 day, and 4 job parameters in a index.php and b changehrs.php...

CVE-2006-0692

Multiple SQL injection vulnerabilities in Carey Briggs PHP/MYSQL Timesheet 1 and 2 allow remote attackers to execute arbitrary SQL commands via the 1 yr, 2 month, 3 day, and 4 job parameters in a index.php and b changehrs.php...

Direct News SQL inj.

Direct News SQL inj. Vuln. discovered by : r0t Date: 17 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/direct-news-sql-inj.html vendor: http://www.direct-news.net affected version: 4.9 and prior Product Description: Direct News 4.9 is an easy-to-use CMS based on php-mysql. Its rea...

phpYellowTM Pro Edition SQL inj. vuln.

phpYellowTM Pro Edition SQL inj. vuln. Vuln. dicovered by : r0t Date: 3 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/phpyellowtm-pro-edition-sql-inj-vuln.html Vendor:http://phpyellow.com/ affected version: phpYellowTM Pro Edition 5.33 and phpYellowTM Lite Edition 5.33 Product...

Free ClickBank Search Engine SQL inj. vuln.

Free ClickBank Search Engine SQL inj. vuln. Vuln. dicovered by : r0t Date: 1 dec. 2005 Orginal advisory:http://pridels.blogspot.com/2005/12/free-clickbank-search-engine-sql-inj.html Vendor:http://phpfreebies.com/free-clickbank-search-engine-script.php affected version:1.0 and prior Product...

WowBB 1.65 vuln.

WowBB 1.65 vuln. Vuln. dicovered by : r0t Date: 26 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/wowbb-165-sql-vuln.html Vendor:http://www.wowbb.com affected version: 1.65 and prior Product description: WowBB is PHP/MySQL powered forum software that offers innovative features suc...