phpMyRecipes 1.x.x XSS / CSRF / SQL Injection

Product: phpMyRecipes version 1.x.x Vulnerability: Multiple SQL Injection, XSS and CSRF Vulnerabilities Impact: High Authors: Rafay Baloch And Sikandar Ali Company: RHAinfoSEC Website: http://rhainfosec.com Introduction ============ "PhpMyRecipes is a simple application for storing and retrieving...

phpMyRecipes 1.2.2 SQL Injection

SQL Injection vulnerability in rid parameter Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...

phpMyRecipes 1.2.2 Cross Site Scripting

Exploit title: phpMyRecipes 1.2.2 Persistent XSS Date: 2/2013 Author: PDS - [email protected] Severity: medium Software link: https://php-myrecipes.svn.sourceforge.net/svnroot/php-myrecipes/phpMyRecipes-main addrecipe.php and editrecipe.php are vulnerable to persistent cross site scriptin...

phpMyRecipes - Multiple HTML Injection Vulnerabilities

source: https://www.securityfocus.com/bid/58160/info phpMyRecipes is prone to multiple HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input. Attacker-supplied HTML and script code could be executed in the context of the affected site, potentially allowing the...

phpMyRecipes - Multiple HTML Injection Vulnerabilities

phpMyRecipes - Multiple HTML Injection Vulnerabilities source: https://www.securityfocus.com/bid/58160/info phpMyRecipes is prone to multiple HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input. Attacker-supplied HTML and script code could be executed in the...

PHPMyRecipes SQL Injection Vulnerability

PHPMyRecipes is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

phpMyRecipes 1.2.2 SQL Injection

phpMyRecipes 1.2.2 SQL Injection Exploit By cr4wl3r http://bastardlabs.info Script: http://sourceforge.net/projects/php-myrecipes/files/ Demo: http://bastardlabs.info/demo/phpMyRecipes.png Tested: Ubuntu Linux Bugs found in viewrecipe.php $rid = $GET'rid'; if ! $result = mysqlquery"SELECT...

phpMyRecipes 1.2.2 SQL Injection Vulnerability

phpMyRecipes version 1.2.2 remote SQL injection exploit. phpMyRecipes 1.2.2 SQL Injection Exploit By cr4wl3r http://bastardlabs.info Script: http://sourceforge.net/projects/php-myrecipes/files/ Demo: http://bastardlabs.info/demo/phpMyRecipes.png Tested: Ubuntu Linux Bugs found in viewrecipe.php...

PHPMyRecipes 1.2.2 - viewrecipe.php?r_id SQL Injection

PHPMyRecipes 1.2.2 - viewrecipe.php?rid SQL Injection phpMyRecipes 1.2.2 SQL Injection Exploit By cr4wl3r http://bastardlabs.info Script: http://sourceforge.net/projects/php-myrecipes/files/ Demo: http://bastardlabs.info/demo/phpMyRecipes.png Tested: Ubuntu Linux Bugs found in viewrecipe.php $rid...

PHPMyRecipes 1.2.2 - 'viewrecipe.php?r_id' SQL Injection

phpMyRecipes 1.2.2 SQL Injection Exploit By cr4wl3r http://bastardlabs.info Script: http://sourceforge.net/projects/php-myrecipes/files/ Demo: http://bastardlabs.info/demo/phpMyRecipes.png Tested: Ubuntu Linux Bugs found in viewrecipe.php $rid = $GET'rid'; if ! $result = mysqlquery"SELECT...