Sql injection

SQL injection vulnerability in messages.php in PHP-Fusion 6.01.15 and 7.00.1, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the subject and msgsend parameters, a different vector than CVE-2005-3157, CVE-2005-3158, CVE-2005-3159, CVE-2005-4005, and...

CVE-2008-5335

SQL injection vulnerability in messages.php in PHP-Fusion 6.01.15 and 7.00.1, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the subject and msgsend parameters, a different vector than CVE-2005-3157, CVE-2005-3158, CVE-2005-3159, CVE-2005-4005, and...

PHP-Fusion messages.php模块SQL注入漏洞

BUGTRAQ ID: 32388 PHP-Fusion是一款基于PHP的内容管理系统。 当sendmessage设置为Send的时候，PHP-Fusion的messages.php文件中没有正确地验证对subject参数的输入便在SQL查询中使用，这允许远程攻击者通过提交恶意请求执行SQL注入攻击。 PHP-Fusion 7.00.1 PHP-Fusion ---------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://sourceforge.net/projects/php-fusion/ ?php...

CVE-2008-5197

SQL injection vulnerability in classifieds.php in PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the lid parameter in a detailadverts action...

Sql injection

SQL injection vulnerability in kroax.php in the Kroax thekroax 4.42 and earlier module for PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the category parameter...

CVE-2008-5196

SQL injection vulnerability in kroax.php in the Kroax thekroax 4.42 and earlier module for PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the category parameter...

Sql injection

SQL injection vulnerability in classifieds.php in PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the lid parameter in a detailadverts action...

CVE-2008-5196

SQL injection vulnerability in kroax.php in the Kroax thekroax 4.42 and earlier module for PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the category parameter...

CVE-2008-5197

SQL injection vulnerability in classifieds.php in PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the lid parameter in a detailadverts action...

CVE-2008-5196

CVE-2008-5196 affects the Kroax PHP-Fusion module (Kroax 4.42 and earlier). The vulnerability is an SQL injection in kroax.php that allows remote attackers to execute arbitrary SQL commands via the category parameter. CVSS v2 base score is 7.5 (HIGH) with network attack vector, low attack complex...

CVE-2008-5197

The CVE-2008-5197 entry describes a SQL injection vulnerability in PHP-Fusion’s classifieds.php, exploitable via the lid parameter in a detail_adverts action. This allows remote attackers to execute arbitrary SQL commands. The affected component is a PHP-Fusion classifieds module (classifieds.php...

PHP-Fusion 7.00.1 (messages.php) Remote SQL Injection Exploit

No description provided by source. ?php /-------------------------------------- PHP-Fusion 7.00.1 messages.php Remote SQL Injection Exploit requires magicquotes == off coded by irk4zatyahoo.pl homepage: http://irk4z.wordpress.com greets: all friends ; --------------------------------------/ $host...

phpfusion7001-sql.txt

\n" . " php $argv0 localhost /php-fusion/ user s3cret "SELECT database"\n". " php $argv0 localhost / user s3cret "SELECT loadfile0x2F6574632F706173737764"\n\n"; die; echo "Logging into system..."; //login to php-fusion using login and pass $logindata = send$host, array "path" =...

PHP-Fusion 7.00.1 (messages.php) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ============================================================= PHP-Fusion 7.00.1 messages.php Remote SQL Injection Exploit ============================================================= \n" . " php $argv0 localhost /php-fusion/ user s3cret...

PHP-Fusion 7.00.1 - 'messages.php' SQL Injection

\n" . " php $argv0 localhost /php-fusion/ user s3cret "SELECT database"\n". " php $argv0 localhost / user s3cret "SELECT loadfile0x2F6574632F706173737764"\n\n"; die; echo "Logging into system..."; //login to php-fusion using login and pass $logindata = send$host, array "path" =...

CVE-2008-5074

SQL injection vulnerability in index.php in the Freshlinks 1.0 RC1 module for PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the linkid parameter...

Sql injection

SQL injection vulnerability in index.php in the Freshlinks 1.0 RC1 module for PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the linkid parameter...

CVE-2008-5074

SQL injection vulnerability in index.php in the Freshlinks 1.0 RC1 module for PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the linkid parameter...

CVE-2008-5074

CVE-2008-5074 is a SQL injection vulnerability in the Freshlinks 1.0 RC1 module for PHP-Fusion . The flaw resides in index.php where the linkid parameter can be manipulated to cause arbitrary SQL commands to be executed by remote attackers. Documented details indicate an impact on data confidenti...

CVE-2008-4521

SQL injection vulnerability in thisraidprogress.php in the World of Warcraft tracker infusion raidtrackerpanel module 2.0 for PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the INFORAIDID parameter...