PHPEasyData 1.5.4 Multiple Vulnerabilities

------------- PHPEasyData ------------- Informations : Langage : PHP Version : 1.5.4 Website : http://www.phpeasydata.com/ Problems : Multiple vulnerabilities Description: PHPEasyData is a PHP application which allow you to manage and display on the web your dynamics data and directories. Details...

PHPEasyData 1.5.4 - 'annuaire.php?annuaire' SQL Injection

source: https://www.securityfocus.com/bid/29659/info PHPEasyData is prone to multiple SQL-injection and cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage the cross-site scripting issues to execute arbitrary script code in the...

PHPEasyData 1.5.4 - '/admin/login.php?Username' SQL Injection

source: https://www.securityfocus.com/bid/29659/info PHPEasyData is prone to multiple SQL-injection and cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage the cross-site scripting issues to execute arbitrary script code in the...

PHPEasyData 1.5.4 - 'last_records.php?annuaire' Cross-Site Scripting

source: https://www.securityfocus.com/bid/29659/info PHPEasyData is prone to multiple SQL-injection and cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage the cross-site scripting issues to execute arbitrary script code in the...

PHPEasyData 1.5.4 - 'annuaire.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/29659/info PHPEasyData is prone to multiple SQL-injection and cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage the cross-site scripting issues to execute arbitrary script code in the...

CVE-2008-2113

SQL injection vulnerability in annuaire.php in PHPEasyData 1.5.4 allows remote attackers to execute arbitrary SQL commands via the catid parameter...

Sql injection

SQL injection vulnerability in annuaire.php in PHPEasyData 1.5.4 allows remote attackers to execute arbitrary SQL commands via the catid parameter...

CVE-2008-2113

PHPEasyData 1.5.4 is affected by a SQL injection in annuaire.php via the cat_id parameter, enabling remote attackers to execute arbitrary SQL commands. The CVSSv2 base score is 7.5 (HIGH) with network attack vector and no authentication, and impacts to confidentiality, integrity, and availability...

CVE-2008-2113: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in annuaire.php in PHPEasyData 1.5.4 allows remote attackers to execute arbitrary SQL commands via the catid parameter...

PHPEasyData 1.5.4 (cat_id) Remote SQL Injection Vulnerability

No description provided by source. |-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=| | | | /' \ /'\ /\ \ /'\ /\ \ | | /, \ /\/\L\ \ \ \ ,/\ /\ \ \ \ / | | //\ \ /' \ /\ //\ /'\ \ /\ \ \ \ /'\ \ | | \ \ /\ /\ \ \ \ /\ \L\ /\ /\ \ \ \ \ \ \ / /\ \L\ \ | |...

phpeasydata-sql.txt

|-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=| | | | /' \ /'\ /\ \ /'\ /\ \ | | /, \ /\/\L\ \ \ \ ,/\ /\ \ \ \ / | | //\ \ /' \ /\ //\ Kings of injection | | // | | | |-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=| Title :: Remote SQL...

PHPEasyData 1.5.4 (cat_id) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================= PHPEasyData 1.5.4 catid Remote SQL Injection Vulnerability =============================================================...

PHPEasyData 1.5.4 - cat_id SQL Injection

PHPEasyData 1.5.4 - catid SQL Injection |-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=| | | | /' \ /'\ /\ \ /'\ /\ \ | | /, \ /\/\L\ \ \ \ ,/\ /\ \ \ \ / | | //\ \ /' \ /\ //\ Kings of injection | | // | | |...

PHPEasyData 1.5.4 - 'cat_id' SQL Injection

|-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=| | | | /' \ /'\ /\ \ /'\ /\ \ | | /, \ /\/\L\ \ \ \ ,/\ /\ \ \ \ / | | //\ \ /' \ /\ //\ Kings of injection | | // | | | |-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=| Title :: Remote SQL...

CVE-2006-5707

SQL injection vulnerability in index.php in PHPEasyData Pro 1.4.1 and 2.2.1 allows remote attackers to execute arbitrary SQL commands via the cat parameter...

CVE-2006-5707

The CVE-2006-5707 entry describes an SQL injection in PHPEasyData Pro (versions 1.4.1 and 2.2.1) where the vulnerability resides in index.php and is exploitable via the cat parameter. This allows remote attackers to inject arbitrary SQL commands, leading to partial confidentiality and integrity i...

CVE-2006-5707

SQL injection vulnerability in index.php in PHPEasyData Pro 1.4.1 and 2.2.1 allows remote attackers to execute arbitrary SQL commands via the cat parameter...

CVE-2006-5707: Undefined Security Weakness

SQL injection vulnerability in index.php in PHPEasyData Pro 1.4.1 and 2.2.1 allows remote attackers to execute arbitrary SQL commands via the cat parameter...

PHPEasyDataPro2.2.1.txt

Vulnerability Report Title : PHPEasyData Pro 2.2.1 index.php Remote SQL Injection Vulnerability Author : ajann http://target/path/index.php?cat= SQL Example: //index.php?cat=-1//union//select//0,concatuserlogin,char32,userpass,0,0,0//from//anusers//where//userid%20like%205/ """""""""""""""""""""...

PHPEasyDataPro1.4.1.txt

Vulnerability Report Title : PHPEasyData Pro 1.4.1 index.php Remote SQL Injection Vulnerability Author : ajann http://target/path/index.php?cat= SQL Example: //index.php?cat=-1//union//select//0,concatuserlogin,char32,userpass,0,0//from//anusers//where//userid%20like%205/ """""""""""""""""""""...