phpauctiongpl-sql.txt

|| | | PHPAuction GPL Enhanced V2.51 profile.php id Remote SQL Injection Vulnerability | | |---------------------Hussin X----------------------| | | Author: Hussin X | | Home : www.tryag.cc/cc | | email: darkangelg85atYahooDoTcom | | | | | | | | script : http://phpauctions.info/ | | DorK : /: ||...

PHPAuction GPL Enhanced 2.51 (profile.php) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ====================================================================== PHPAuction GPL Enhanced 2.51 profile.php SQL Injection Vulnerability ====================================================================== || | | PHPAuction GPL Enhanc...

phpAuction GPL Enhanced 2.51 - 'profile.php' SQL Injection

|| | | PHPAuction GPL Enhanced V2.51 profile.php id Remote SQL Injection Vulnerability | | |---------------------Hussin X----------------------| | | Author: Hussin X | | Home : www.tryag.cc/cc | | email: darkangelg85atYahooDoTcom | | | | | | | | script : http://phpauctions.info/ | | DorK : /: ||...

CVE-2008-2900

SQL injection vulnerability in item.php in PHPAuction 3.2 allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

SQL injection vulnerability in item.php in PHPAuction 3.2 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-2900

SQL injection vulnerability in item.php in PHPAuction 3.2 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-2900

PHPAuction 3.2 is affected by an SQL injection in item.php, exploitable via the id parameter to allow remote execution of arbitrary SQL commands. This is the underlying root cause reported in CVE-2008-2900 and is reflected across NVD and CVE records. No explicit remediation or patched version is ...

CVE-2008-2900: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in item.php in PHPAuction 3.2 allows remote attackers to execute arbitrary SQL commands via the id parameter...

phpAuction 3.2.1 (item.php id) Remote SQL Injection Vulnerability

No description provided by source. phpauction-gpl Version3.2 Version SQL Injection Vulnerability ======================================================== Author: Hussin X = = Home : www.tryag.cc/cc = = &nb...

phpAuction 3.2.1 (item.php id) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================= phpAuction 3.2.1 item.php id Remote SQL Injection Vulnerability ================================================================= phpauction-gpl Version3.2 Version SQL...

PHPAuction (profile.php user_id) Remote SQL Injection Vulnerability

No description provided by source. Viva IslaM Viva IslaM Remote SQL Injection Vulnerability PHPAuction profile.php userid AuTh0r : Mr.SQL H0ME : WwW.PaL-HaCkEr.CoM & WwW.ATsDp.CoM Email : [email protected] !! SYRIAN HaCkErS !! Script : PHPAuction site : www.phpauctions.info D0rk1 : allinurl:...

phpAuction - 'profile.php' SQL Injection (2)

source: https://www.securityfocus.com/bid/29856/info PHPAuction is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify...

phpAuction 3.2.1 - 'item.php' SQL Injection

phpauction-gpl Version3.2 Version SQL Injection Vulnerability ======================================================== Author: Hussin X = = Home : www.tryag.cc/cc = = email: darkangelg85atYahooDoTcom = hussin.xathotmailDoTcom = = ======================================================== HomE scrip...

phpAuction 3.2.1 - item.php SQL Injection

phpAuction 3.2.1 - item.php SQL Injection phpauction-gpl Version3.2 Version SQL Injection Vulnerability ======================================================== Author: Hussin X = = Home : www.tryag.cc/cc = = email: darkangelg85atYahooDoTcom = hussin.xathotmailDoTcom = =...

phpAuction - profile.php SQL Injection (2)

phpAuction - profile.php SQL Injection 2 source: https://www.securityfocus.com/bid/29856/info PHPAuction is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...

phpauction-sql.txt

Viva IslaM Viva IslaM Remote SQL Injection Vulnerability PHPAuction profile.php userid AuTh0r : Mr.SQL H0ME : WwW.PaL-HaCkEr.CoM & WwW.ATsDp.CoM Email : [email protected] !! SYRIAN HaCkErS !! Script : PHPAuction site : www.phpauctions.info D0rk1 : allinurl: "profile.php?userid" auctionid D0rk2 :...

phpAuction - profile.php SQL Injection (1)

phpAuction - profile.php SQL Injection 1 Viva IslaM Viva IslaM Remote SQL Injection Vulnerability PHPAuction profile.php userid AuTh0r : Mr.SQL H0ME : WwW.PaL-HaCkEr.CoM & WwW.ATsDp.CoM Email : [email protected] !! SYRIAN HaCkErS !! Script : PHPAuction site : www.phpauctions.info D0rk1 : allinurl:...

phpAuction - 'profile.php' SQL Injection (1)

Viva IslaM Viva IslaM Remote SQL Injection Vulnerability PHPAuction profile.php userid AuTh0r : Mr.SQL H0ME : WwW.PaL-HaCkEr.CoM & WwW.ATsDp.CoM Email : [email protected] !! SYRIAN HaCkErS !! Script : PHPAuction site : www.phpauctions.info D0rk1 : allinurl: "profile.php?userid" auctionid D0rk2 :...

PHPAuction (profile.php user_id) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications =================================================================== PHPAuction profile.php userid Remote SQL Injection Vulnerability =================================================================== Viva IslaM Viva IslaM Remote SQL...

PHPauction 'include_path'远程文件包含漏洞

BUGTRAQ ID: 28284 CNCAN ID:CNCAN-2008032103 PHPauction是一款基于PHP的WEB应用程序。 PHPauction不正确检查用户提交的输入，远程攻击者可以利用漏洞以WEB权限执行任意PHP命令。 问题存在于多个脚本对用户提交的'includepath'参数缺少过滤，指定远程服务器上的任意文件作为包含对象，可导致以WEB权限执行任意PHP命令。 PHPAuction PHPAuction 2.51 目前没有解决方案提供： http://www.johnrayfield.com/phpauction/...