Sql injection

SQL injection vulnerability in play.php in PHPmotion 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the vid parameter...

CVE-2008-3118

SQL injection vulnerability in play.php in PHPmotion 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the vid parameter...

Unrestricted file upload

Unrestricted file upload vulnerability in updateprofile.php in PHPmotion 2.0 and earlier allows remote authenticated users to execute arbitrary code by uploading a .php file with a content type of 1 image/gif, 2 image/jpeg, or 3 image/pjpeg, then accessing it via a direct request to the file unde...

CVE-2008-3118

SQL injection vulnerability in play.php in PHPmotion 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the vid parameter...

CVE-2008-3118

CVE-2008-3118 describes an SQL injection in the PHPmotion 2.0 web app, specifically in the play.php handler. The vulnerability arises from user-supplied input in the vid parameter, allowing remote attackers to craft SQL commands and potentially manipulate the database. Affected software is PHPmot...

CVE-2008-3117

Unrestricted file upload vulnerability in updateprofile.php in PHPmotion 2.0 and earlier allows remote authenticated users to execute arbitrary code by uploading a .php file with a content type of 1 image/gif, 2 image/jpeg, or 3 image/pjpeg, then accessing it via a direct request to the file unde...

CVE-2008-3117

Unrestricted file upload in update_profile.php on PHPmotion 2.0 and earlier allows remote authenticated users to execute arbitrary code by uploading a .php file disguised as image content types (image/gif, image/jpeg, or image/pjpeg) and then accessing it via a direct request to the file under pi...

PHPmotion <= 2.0 (update_profile.php) Remote Shell Upload Exploit

No description provided by source. ?php / ----------------------------------------------------------------- PHPmotion = 2.0 updateprofile.php Remote Shell Upload Exploit ----------------------------------------------------------------- author...: EgiX mail.....: n0b0d13satgmaildotcom link.....:...

phpmotion-upload.txt

= $limitsize 269. // Display file size error 270. // /////////////////////// 271. $show = 1; 272. $messagetype = $config"notificationsuccess";//the messsage displayed at the top coner 273. $errormessage = 'Your image is too large. The maximum size allowed is: ' . $config'maximumsizehumanrea...

PHPmotion <= 2.0 (update_profile.php) Remote Shell Upload Exploit

Exploit for unknown platform in category web applications ================================================================= PHPmotion = $limitsize 269...

PHPmotion 2.0 - update_profile.php Arbitrary File Upload

PHPmotion 2.0 - updateprofile.php Arbitrary File Upload = $limitsize 269. // Display file size error 270. // /////////////////////// 271. $show = 1; 272. $messagetype = $config"notificationsuccess";//the messsage displayed at t...

PHPmotion 2.0 - 'update_profile.php' Arbitrary File Upload

= $limitsize 269. // Display file size error 270. // /////////////////////// 271. $show = 1; 272. $messagetype = $config"notificationsuccess";//the messsage displayed at the top coner 273. $errormessage = 'Your image is...