CVE-2010-1109

Multiple SQL injection vulnerabilities in index.php in phpMySport 1.4, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 v2 parameter in a member view action, 2 v1 parameter in a news action, 3 v1 parameter in an information action, 4 v2 parameter...

CVE-2010-1109

Multiple SQL injection vulnerabilities in index.php of phpMySport 1.4 allow remote attackers to execute arbitrary SQL commands when magic_quotes_gpc is disabled. Exploitable via several parameters across different actions: v2 in member view, v1 in news, v1 in information, and v2 in team, club, or...

CVE-2010-1110: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in phpMySport 1.4 allows remote attackers to list arbitrary directories via a .. dot dot in the currentfolder parameter...

CVE-2010-1109: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in index.php in phpMySport 1.4, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 v2 parameter in a member view action, 2 v1 parameter in a news action, 3 v1 parameter in an information action, 4 v2 parameter...

phpMySport 1.4 SQL Injection

Multiple Vulnerabilities in phpMySport v1.4 Name Multiple Vulnerabilities in phpMySport Systems Affected phpMySport v1.4 site http://phpmysport.sourceforge.net/en/ Author Amol Naik amolnaik4atgmail.com Date 18/01/2010 OVERVIEW phpMySport v1.4 is vulnerable to following issues: 1. Multiple SQL...

PhpMySport 1.4 (XSS/SQL) Multiple Remote Vulnerabilities

No description provided by source. + PhpMySport v. 1.4 Multiple Remote Vulnerabilities XSS\SQL + Discovered by XaDoS - xados at hotmail dot it Th4nKs AlpHaNiX -Product site: http://phpmysport.sourceforge.net -Version vuln: 1.4latest and maybe + COD3: The code vuln is at page /memberlist.php SQL a...

PhpMySport 1.4 XSS / SQL Injection

PhpMySport v. 1.4 Multiple Remote Vulnerabilities XSS\SQL + Discovered by XaDoS - xados at hotmail dot it Th4nKs AlpHaNiX -Product site: http://phpmysport.sourceforge.net -Version vuln: 1.4latest and maybe $QLXSSalertdocu...

phpmysport 1.4 - Cross-Site Scripting SQL Injection

phpmysport 1.4 - Cross-Site Scripting SQL Injection + PhpMySport v. 1.4 Multiple Remote Vulnerabilities XSS\SQL + Discovered by XaDoS - xados at hotmail dot it Th4nKs AlpHaNiX -Product site: http://phpmysport.sourceforge.net -Version vuln: 1.4latest and maybe $QLXSS There are some pages vuln.. fo...

phpmysport 1.4 - Cross-Site Scripting / SQL Injection

PhpMySport v. 1.4 Multiple Remote Vulnerabilities XSS\SQL + Discovered by XaDoS - xados at hotmail dot it Th4nKs AlpHaNiX -Product site: http://phpmysport.sourceforge.net -Version vuln: 1.4latest and maybe $QLXSSalertdocument.cook...

PhpMySport 1.4 (XSS/SQL) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ======================================================== PhpMySport 1.4 XSS/SQL Multiple Remote Vulnerabilities ======================================================== + PhpMySport v. 1.4 Multiple Remote Vulnerabilities XSS\SQL + -Product...

phpmysport-rfi.txt

------=Part134509048419.1173540747323 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Content-Disposition: inline Application : phpMySport CMS URL : http://phpmysport.sourceforge.net/en/ Variable menu.php includeonceROOT."/team/sqlteam.php";...