EUVD-2008-1412

Malware in sbrugna...

EUVD-2007-0371

Malware in sbrugna...

phpBP <= RC3 (2.204) (sql/cmd) Remote Code Execution Exploit

No description provided by source. ? // //Kacper & str0ke Settings $exploitname = phpBP = RC3 2.204 sql/cmd Remote Code Execution Exploit; $scriptname = phpBP RC3 2.204; $scriptsite = http://www.phpbp.com/; $dork = 'Silnik strony jest chroniony prawami autorskimi PHP BP Team'; //to work exploit y...

phpBP <= RC3 (2.204) FIX4 Remote SQL Injection Vulnerability

No description provided by source. .-----------------------------------------------------------------------------. | vuln.: phpBP = RC3 2.204 FIX4 Remote SQL Injection Vulnerability | | download: http://www.phpbp.com/ | | dork: PHP BP Team | | | | author: [email protected] | | homepage:...

Sql injection

SQL injection vulnerability in includes/functions/banners-external.php in phpBP 2 RC3 2.204 FIX 4 allows remote attackers to execute arbitrary SQL commands via the id parameter in a bannerout action...

CVE-2008-1408

SQL injection vulnerability in includes/functions/banners-external.php in phpBP 2 RC3 2.204 FIX 4 allows remote attackers to execute arbitrary SQL commands via the id parameter in a bannerout action...

CVE-2008-1408

phpBP 2 RC3 (2.204) FIX 4 contains a SQL injection in includes/functions/banners-external.php via the id parameter in a banner_out action. This allows remote attackers to execute arbitrary SQL commands. The affected component is the phpBP banner_out flow, and the root cause is unsafely concatenat...

CVE-2008-1408

SQL injection vulnerability in includes/functions/banners-external.php in phpBP 2 RC3 2.204 FIX 4 allows remote attackers to execute arbitrary SQL commands via the id parameter in a bannerout action...

phpBP id参数远程SQL注入漏洞

BUGTRAQ ID: 28272 PHPBP是在波兰广泛使用的网站内容管理系统。 PHPBP的includes/functions/banners-external.php脚本文件中没有正确地验证对id参数的输入，允许远程攻击者通过提交特制的SQL查询请求执行SQL注入攻击。 以下是有漏洞的代码段： ... 3 function bannerout //zlicza ilosc klikniec na banner 4 5 global $conf; 6 7 if$GET'id' 8 9 SQLvalidate$POST'id'; 10 11 $db = new dbquery; 12...

phpBP &lt;= RC3 (2.204) FIX4 Remote SQL Injection Vulnerability

No description provided by source. .-----------------------------------------------------------------------------. | vuln.: phpBP = RC3 2.204 FIX4 Remote SQL Injection Vulnerability | | download: http://www.phpbp.com/ | | dork: "PHP BP Team" | | &nbsp...

phpbp-sql.txt

.-----------------------------------------------------------------------------. | vuln.: phpBP HACKBOX.pl query"SELECT FROM $confprefixbanners WHERE id=$GETid" or $db-errFILE, LINE; 13 14 if$db-numrows==0 15 16 redirect'index.php?module=error?error=bannerserror2'; 17 exit; 18 19 20...

phpBP RC3 (2.204) FIX4 - SQL Injection

phpBP RC3 2.204 FIX4 - SQL Injection .-----------------------------------------------------------------------------. | vuln.: phpBP HACKBOX.pl query"SELECT FROM $confprefixbanners WHERE id=$GETid" or $db-errFILE, LINE; 13 14 if$db-numrows==0 15 16...

phpBP RC3 (2.204) FIX4 - SQL Injection

.-----------------------------------------------------------------------------. | vuln.: phpBP HACKBOX.pl query"SELECT FROM $confprefixbanners WHERE id=$GETid" or $db-errFILE, LINE; 13 14 if$db-numrows==0 15 16 redirect'index.php?module=error?error=bannerserror2'; 17 exit; 18 19 20...

phpBP <= RC3 (2.204) FIX4 Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================ phpBP HACKBOX.pl query"SELECT FROM $confprefixbanners WHERE id=$GETid" or $db-errFILE, LINE; 13 14 if$db-numrows==0 15 16 redirect'index.php?module=error?error=bannerserror2'; 17...

CVE-2007-0369

SQL injection vulnerability in phpBP RC3 2.204 and earlier allows remote attackers to execute arbitrary SQL commands via the comment forum...

Unrestricted file upload

Unrestricted file upload vulnerability in index.php in phpBP RC3 2.204 and earlier allows remote administrators to inject arbitrary PHP code into an upload/banners/ file via a banners add operation that uploads the PHP code through an imageform parameter specifying a multiple-extension filename...

Sql injection

SQL injection vulnerability in phpBP RC3 2.204 and earlier allows remote attackers to execute arbitrary SQL commands via the comment forum...

CVE-2007-0369

The CVE-2007-0369 entry concerns the PHP-based bulletin board script phpBP RC3 (2.204) and earlier. Affected component is the comment forum handling input in the application’s SQL queries, with root cause described as an SQL injection vulnerability. The consequence is that remote attackers could ...

CVE-2007-0369

SQL injection vulnerability in phpBP RC3 2.204 and earlier allows remote attackers to execute arbitrary SQL commands via the comment forum...

CVE-2007-0370

CVE-2007-0370 describes an unrestricted file upload in index.php of phpBP RC3 (2.204) and earlier. A remote attacker can inject arbitrary PHP code into upload/banners/ by uploading a crafted filename (e.g., .jpg.vil.gif.php) via a banners add operation, causing the code to be stored under a diffe...