Lucene search
K

90 matches found

0day.today
0day.today
added 2009/05/26 12:0 a.m.21 views

phpBugTracker 1.0.3 (Auth Bypass) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================= phpBugTracker 1.0.3 Auth Bypass SQL Injection Vulnerability ============================================================= @email protected .--"""""--. .' '. / \ ; C4TEAM ; | | |...

7.1AI score
Exploits0
OpenVAS
OpenVAS
added 2005/11/03 12:0 a.m.11 views

phpBugTracker bug.php SQLi Vulnerability - Active Check

There is a bug in the remote version of phpBugTracker which makes it vulnerable to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2004 Noam Rathaus Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

8.3AI score
Exploits0References1
Cvelist
Cvelist
added 2005/02/19 5:0 a.m.12 views

CVE-2004-1519

SQL injection vulnerability in bug.php in phpBugTracker 0.9.1 allows remote attackers to execute arbitrary SQL commands via 1 the bugid parameter in a viewvotes operation or 2 the project parameter in an add operation...

8.3AI score0.00677EPSS
Exploits4References6
CVE
CVE
added 2005/02/19 5:0 a.m.43 views

CVE-2004-1519

The CVE-2004-1519 entry is confirmed with concrete details across connected sources: phpBugTracker 0.9.1 is affected by an SQL injection in bug.php. Specifically, the vulnerability allows remote attackers to manipulate the database via (1) the bug_id parameter in a viewvotes operation or (2) the ...

7.5CVSS8.3AI score0.00677EPSS
Exploits4References6
NVD
NVD
added 2004/12/31 5:0 a.m.7 views

CVE-2004-1519

SQL injection vulnerability in bug.php in phpBugTracker 0.9.1 allows remote attackers to execute arbitrary SQL commands via 1 the bugid parameter in a viewvotes operation or 2 the project parameter in an add operation...

7.5CVSS8.3AI score0.00677EPSS
Exploits4References6
exploitpack
exploitpack
added 2004/04/15 12:0 a.m.11 views

phpBugTracker 0.9 - bug.php Multiple SQL Injections

phpBugTracker 0.9 - bug.php Multiple SQL Injections source: https://www.securityfocus.com/bid/10153/info Reportedly phpBugTracker contains multiple input validation vulnerabilities; it is prone to multiple SQL injection, cross-site scripting and HTML injection issues. These issues are all due to ...

0.2AI score
Exploits0
Exploit DB
Exploit DB
added 2004/04/15 12:0 a.m.23 views

phpBugTracker 0.9 - 'query.php' Multiple SQL Injections

source: https://www.securityfocus.com/bid/10153/info Reportedly phpBugTracker contains multiple input validation vulnerabilities; it is prone to multiple SQL injection, cross-site scripting and HTML injection issues. These issues are all due to a failure of the application to properly sanitize us...

7.4AI score
Exploits0
Exploit DB
Exploit DB
added 2004/04/15 12:0 a.m.16 views

phpBugTracker 0.9 - 'user.php?bugid' Cross-Site Scripting

source: https://www.securityfocus.com/bid/10153/info Reportedly phpBugTracker contains multiple input validation vulnerabilities; it is prone to multiple SQL injection, cross-site scripting and HTML injection issues. These issues are all due to a failure of the application to properly sanitize us...

7.4AI score
Exploits0
exploitpack
exploitpack
added 2004/04/14 12:0 a.m.16 views

phpBugTracker 0.9.1 - Multiple Vulnerabilities

phpBugTracker 0.9.1 - Multiple Vulnerabilities phpBugTracke Multiple Vulnerabilities Vendor: Benjamin Curtis Product: phpBugTracke Version: query"delete from ".TBLBUGVOTE." where userid = $u and bugid = $bugid"; As we can see from that line of code taken from about line 30 of user.php it is clear...

0.5AI score
Exploits0
Exploit DB
Exploit DB
added 2004/04/14 12:0 a.m.25 views

phpBugTracker < 0.9.1 - Multiple Vulnerabilities

phpBugTracke Multiple Vulnerabilities Vendor: Benjamin Curtis Product: phpBugTracke Version: query"delete from ".TBLBUGVOTE." where userid = $u and bugid = $bugid"; As we can see from that line of code taken from about line 30 of user.php it is clear that the $bugid variable is passed into the...

7.4AI score
Exploits0
Rows per page
Query Builder