PHPFox 3.6.0 /user/browse/view_/ SQL注入漏洞

No description provided by source...

PHPFox v3.4.1 XSS vulnerabilities

Malicious users may inject JavaScript, VBScript, ActiveX, HTML or Flash into a vulnerable application to fool a user in order to gather data from them. An attacker can steal the session cookie and take over the account, impersonating the user. It is also possible to modify the content of the page...

CVE-2013-5121

SQL injection vulnerability in PHPFox before 3.6.0 build6 allows remote attackers to execute arbitrary SQL commands via the searchsortby parameter to user/browse/view/...

CVE-2013-5120

SQL injection vulnerability in PHPFox before 3.6.0 build4 allows remote attackers to execute arbitrary SQL commands via the searchgender parameter to user/browse/view/...

Sql injection

SQL injection vulnerability in PHPFox before 3.6.0 build6 allows remote attackers to execute arbitrary SQL commands via the searchsortby parameter to user/browse/view/...

Sql injection

SQL injection vulnerability in PHPFox before 3.6.0 build4 allows remote attackers to execute arbitrary SQL commands via the searchgender parameter to user/browse/view/...

CVE-2013-5120

PHPFox up to version 3.6.0 (build4) is affected by an SQL injection in the search[gender] parameter passed to user/browse/view_. The root cause is unsanitized input leading to arbitrary SQL execution. This affects remote attackers with network access; the vulnerability can enable partial to full ...

CVE-2013-5121

SQL injection vulnerability in PHPFox before 3.6.0 build6 allows remote attackers to execute arbitrary SQL commands via the searchsortby parameter to user/browse/view/...

CVE-2013-5121

PHPFox prior to 3.6.0 (build6) is affected by an SQL injection in the user/browse/view_ endpoint via the search[sort_by] parameter. The underlying issue is unsafeguarded SQL construction that allows remote attackers to execute arbitrary SQL commands, with potential partial impact to confidentiali...

CVE-2013-5120

SQL injection vulnerability in PHPFox before 3.6.0 build4 allows remote attackers to execute arbitrary SQL commands via the searchgender parameter to user/browse/view/...

PT-2013-5371

Name of the Vulnerable Software and Affected Versions PHPFox versions prior to 3.6.0 build6 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the searchsort by parameter to the "/user/browse/view /" API endpoint. Recommendations For versions pri...

PT-2013-5370

Name of the Vulnerable Software and Affected Versions PHPFox versions prior to 3.6.0 build4 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the searchgender parameter to the "/user/browse/view /" API endpoint. Recommendations For versions prio...

CVE-2013-5120: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in PHPFox before 3.6.0 build4 allows remote attackers to execute arbitrary SQL commands via the searchgender parameter to user/browse/view/...

CVE-2013-5121: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in PHPFox before 3.6.0 build6 allows remote attackers to execute arbitrary SQL commands via the searchsortby parameter to user/browse/view/...

PHPFox 3.4.1 Cross Site Scripting

PHPFox v3.4.1 XSS vulnerabilities ------------------------------------------------------------ == Description == - Software link: http://www.phpfox.com - Affected versions: version 3.4.1 and 3.5.1 is vulnerable. Other versions might be affected as well. - Vulnerability discovered by: Mehdi Dadkha...

PHPFox 3.6.0 (build3) - Multiple SQL Injections

PHPFox 3.6.0 build3 - Multiple SQL Injections ------------------------------------------------------------ PHPFox v3.6.0 build3 Multiple SQL Injection vulnerabilities ------------------------------------------------------------ == Description == - Software link: http://www.phpfox.com - Affected...

PHPFox 3.6.0 (build3) Multiple SQL Injection Vulnerabilities

PHPFox version 3.6.0 build 3 suffers from multiple remote SQL injection vulnerabilities. ------------------------------------------------------------ PHPFox v3.6.0 build3 Multiple SQL Injection vulnerabilities ------------------------------------------------------------ == Description == - Softwa...

PHPFox 3.6.0 (build3) - Multiple SQL Injections

------------------------------------------------------------ PHPFox v3.6.0 build3 Multiple SQL Injection vulnerabilities ------------------------------------------------------------ == Description == - Software link: http://www.phpfox.com - Affected versions: version 3.6.0 build3 is vulnerable...

PHPFox 3.6.0 SQL Injection

------------------------------------------------------------ PHPFox v3.6.0 build3 Multiple SQL Injection vulnerabilities ------------------------------------------------------------ == Description == - Software link: http://www.phpfox.com - Affected versions: version 3.6.0 build3 is vulnerable...

PhpFox 3.0.1 Cross Site Scripting

Exploit Title: phpFox Version 3.0.1 Cross site Scripting Vulnerability Google Dork: Intext:"Powered By phpFox Version 3.0.1" Date: 09/04/2012 Author: Crim3R & Ajax Security Team Home : Http://WwW.AjaxTm.com/ Vendor Home : http://www.phpfox.com/ Tested on: all ================================== +...