EUVD-2008-2174

Malware in sbrugna...

EUVD-2009-4645

Malware in sbrugna...

EUVD-2009-4644

Malware in sbrugna...

phpDirectorySource Multiple Vulnerabilities

phpDirectorySource is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Sql injection

SQL injection vulnerability in search.php in phpDirectorySource 1.x allows remote attackers to execute arbitrary SQL commands via the st parameter...

CVE-2009-4681

Cross-site scripting XSS vulnerability in search.php in phpDirectorySource 1.x allows remote attackers to inject arbitrary web script or HTML via the st parameter...

CVE-2009-4680

SQL injection vulnerability in search.php in phpDirectorySource 1.x allows remote attackers to execute arbitrary SQL commands via the st parameter...

CVE-2009-4680

The concrete details show PHPDirectorySource 1.x is affected by a SQL injection in search.php via the st parameter, enabling remote execution of arbitrary SQL commands. CVE-2009-4680 is documented with exact vectors; public references (Exploit-DB, Milw0rm, SecurityFocus, Secunia) corroborate the ...

CVE-2009-4681

CVE-2009-4681 affects phpDirectorySource 1.x; the XSS flaw exists in search.php where a malicious value in the st parameter enables remote injection of arbitrary script/HTML. This CVE entry is supported by multiple references (e.g., exploits and advisories) and is listed in NVD. No explicit remed...

CVE-2009-4680

SQL injection vulnerability in search.php in phpDirectorySource 1.x allows remote attackers to execute arbitrary SQL commands via the st parameter...

CVE-2009-4681

Cross-site scripting XSS vulnerability in search.php in phpDirectorySource 1.x allows remote attackers to inject arbitrary web script or HTML via the st parameter...

CVE-2009-4680: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in search.php in phpDirectorySource 1.x allows remote attackers to execute arbitrary SQL commands via the st parameter...

CVE-2009-4681: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in search.php in phpDirectorySource 1.x allows remote attackers to inject arbitrary web script or HTML via the st parameter...

phpDirectorySource 1.0 - Cross-Site Scripting / SQL Injection

============================================================================== » ! Coder - Developer HTML / CSS / PHP / Vb6 . ! ============================================================================== » Web Business Directory 1.0 search.php Multiple Remote Vulnerabilities...

CVE-2008-2177

Multiple SQL injection vulnerabilities in phpDirectorySource 1.1.06, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 lid parameter to show.php and the 2 login parameter to admin.php...

Sql injection

Multiple SQL injection vulnerabilities in phpDirectorySource 1.1.06, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 lid parameter to show.php and the 2 login parameter to admin.php...

CVE-2008-2177

CVE-2008-2177 affects phpDirectorySource 1.1.06 with SQL injection vulnerabilities when magic_quotes_gpc is disabled. The two injectable vectors are the lid parameter to show.php and the login parameter to admin.php, allowing remote attackers to execute arbitrary SQL commands. Public sources in t...

CVE-2008-2177

Multiple SQL injection vulnerabilities in phpDirectorySource 1.1.06, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 lid parameter to show.php and the 2 login parameter to admin.php...

CVE-2008-2177: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in phpDirectorySource 1.1.06, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 lid parameter to show.php and the 2 login parameter to admin.php...

phpdirsource-sql.txt

|-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=| | | | /' \ /'\ /\ \ /'\ /\ \ | | /, \ /\/\L\ \ \ \ ,/\ /\ \ \ \ / | | //\ \ /' \ /\ //\ Kings of injection | | // | | | |-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=| Title :: SQL Injection...