EUVD-2008-3699

Malware in sbrugna...

Sql injection

SQL injection vulnerability in product.php in PHPBasket allows remote attackers to execute arbitrary SQL commands via the proid parameter...

CVE-2008-3713

SQL injection vulnerability in product.php in PHPBasket allows remote attackers to execute arbitrary SQL commands via the proid parameter...

CVE-2008-3713

SQL injection vulnerability in product.php in PHPBasket allows remote attackers to execute arbitrary SQL commands via the proid parameter...

CVE-2008-3713

The CVE-2008-3713 entry describes a SQL injection vulnerability in PHPBasket’s product.php, exploitable via the pro_id parameter to execute arbitrary SQL commands. This is tied to the PHPBasket component/file (product.php) and is caused by improper handling of the pro_id input. The provided refer...

PHPBasket 'pro_id' SQL注入漏洞

BUGTRAQ ID: 30726 CNCAN ID：CNCAN-2008081902 PHPBasket是一款基于PHP的WEB应用程序。 PHPBasket不正确处理用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，可能获得敏感信息或操作数据库。 问题由于'product.php'脚本对用户提交给'proid'参数缺少过滤，构建恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息或操作数据库。 PHPBasket 目前没有解决方案提供： http://www.phpbasket.com/...

PHPBasket (product.php pro_id) SQL Injection Vulnerability

No description provided by source. . . | / | | \ \ | / / |\ \ \ |/ // / /\ \ / |/ \ / // | / | | / \ \ / / // \ / \ |/| || \\ /|\ / / / / \ / \ / / / \ | | /\ /\ / \ | \ // est.2007 / / forum.darkc0de.com --- d3hydr8 - jeed - baltazar - P47r1ck - C1c4Tr1Z - beenu --- rsauron -...

phpbasket-sql.txt

. . | / | | \ \ | / / |\ \ \ |/ // / /\ \ / |/ \ / // | / | | / \ /|\ / / / / \ / \ / / / \ | | /\ /\ / \ | \ // est.2007 / / forum.darkc0de.com --- d3hydr8 - jeed - baltazar - P47r1ck - C1c4Tr1Z - beenu --- rsauron - letsgorun - K1u - DON - OutLawz - MAGE --- Author: r45c4l and...

PHPBasket (product.php pro_id) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ========================================================== PHPBasket product.php proid SQL Injection Vulnerability ========================================================== App Name: PHPBasket Soft.Site: http://www.phpbasket.com/ Dork:...

PHPBasket - pro_id SQL Injection

PHPBasket - proid SQL Injection . . | / | | \ \ | / / |\ \ \ |/ // / /\ \ / |/ \ / // | / | | / \ /|\ / / / / \ / \ / / / \ | | /\ /\ / \ | \ // est.2007 / / forum.darkc0de.com --- d3hydr8 - jeed - baltazar - P47r1ck - C1c4Tr1Z - beenu --- rsauron - letsgorun - K1u - DON - OutLawz...

PHPBasket - 'pro_id' SQL Injection

. . | / | | \ \ | / / |\ \ \ |/ // / /\ \ / |/ \ / // | / | | / \ /|\ / / / / \ / \ / / / \ | | /\ /\ / \ | \ // est.2007 / / forum.darkc0de.com --- d3hydr8 - jeed - baltazar - P47r1ck - C1c4Tr1Z - beenu --- rsauron - letsgorun - K1u - DON - OutLawz - MAGE --- Author: r45c4l and...