11 matches found
EUVD-2008-3699
Malware in sbrugna...
CVE-2008-3713
SQL injection vulnerability in product.php in PHPBasket allows remote attackers to execute arbitrary SQL commands via the proid parameter...
Sql injection
SQL injection vulnerability in product.php in PHPBasket allows remote attackers to execute arbitrary SQL commands via the proid parameter...
CVE-2008-3713
The CVE-2008-3713 entry describes a SQL injection vulnerability in PHPBasket’s product.php, exploitable via the pro_id parameter to execute arbitrary SQL commands. This is tied to the PHPBasket component/file (product.php) and is caused by improper handling of the pro_id input. The provided refer...
CVE-2008-3713
SQL injection vulnerability in product.php in PHPBasket allows remote attackers to execute arbitrary SQL commands via the proid parameter...
PHPBasket 'pro_id' SQL注入漏洞
BUGTRAQ ID: 30726 CNCAN ID:CNCAN-2008081902 PHPBasket是一款基于PHP的WEB应用程序。 PHPBasket不正确处理用户提交的输入,远程攻击者可以利用漏洞进行SQL注入攻击,可能获得敏感信息或操作数据库。 问题由于'product.php'脚本对用户提交给'proid'参数缺少过滤,构建恶意SQL查询作为参数数据,可更改原来的SQL逻辑,获得敏感信息或操作数据库。 PHPBasket 目前没有解决方案提供: http://www.phpbasket.com/...
PHPBasket (product.php pro_id) SQL Injection Vulnerability
No description provided by source. . . | / | | \ \ | / / |\ \ \ |/ // / /\ \ / |/ \ / // | / | | / \ \ / / // \ / \ |/| || \\ /|\ / / / / \ / \ / / / \ | | /\ /\ / \ | \ // est.2007 / / forum.darkc0de.com --- d3hydr8 - jeed - baltazar - P47r1ck - C1c4Tr1Z - beenu --- rsauron -...
phpbasket-sql.txt
. . | / | | \ \ | / / |\ \ \ |/ // / /\ \ / |/ \ / // | / | | / \ /|\ / / / / \ / \ / / / \ | | /\ /\ / \ | \ // est.2007 / / forum.darkc0de.com --- d3hydr8 - jeed - baltazar - P47r1ck - C1c4Tr1Z - beenu --- rsauron - letsgorun - K1u - DON - OutLawz - MAGE --- Author: r45c4l and...
PHPBasket (product.php pro_id) SQL Injection Vulnerability
Exploit for unknown platform in category web applications ========================================================== PHPBasket product.php proid SQL Injection Vulnerability ========================================================== App Name: PHPBasket Soft.Site: http://www.phpbasket.com/ Dork:...
PHPBasket - 'pro_id' SQL Injection
. . | / | | \ \ | / / |\ \ \ |/ // / /\ \ / |/ \ / // | / | | / \ /|\ / / / / \ / \ / / / \ | | /\ /\ / \ | \ // est.2007 / / forum.darkc0de.com --- d3hydr8 - jeed - baltazar - P47r1ck - C1c4Tr1Z - beenu --- rsauron - letsgorun - K1u - DON - OutLawz - MAGE --- Author: r45c4l and...
PHPBasket - pro_id SQL Injection
PHPBasket - proid SQL Injection . . | / | | \ \ | / / |\ \ \ |/ // / /\ \ / |/ \ / // | / | | / \ /|\ / / / / \ / \ / / / \ | | /\ /\ / \ | \ // est.2007 / / forum.darkc0de.com --- d3hydr8 - jeed - baltazar - P47r1ck - C1c4Tr1Z - beenu --- rsauron - letsgorun - K1u - DON - OutLawz...