40 matches found
EUVD-2008-6773
Malware in sbrugna...
EUVD-2008-6772
Malware in sbrugna...
EUVD-2007-2295
Malware in sbrugna...
phpwebnews 0.1 bukutamu.php m_txt Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/23448/info The 'phpwebnews' package is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script co...
phpwebnews 0.1 iklan.php m_txt Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/23448/info The 'phpwebnews' package is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script co...
phpwebnews 0.1 index.php m_txt Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/23448/info The 'phpwebnews' package is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script co...
CVE-2008-6813
SQL injection vulnerability in index.php in phpWebNews 0.2 MySQL Edition allows remote attackers to execute arbitrary SQL commands via the idkat parameter...
Sql injection
SQL injection vulnerability in index.php in phpWebNews 0.2 MySQL Edition allows remote attackers to execute arbitrary SQL commands via the idkat parameter...
Sql injection
SQL injection vulnerability in bukutamu.php in phpWebNews 0.2 MySQL Edition allows remote attackers to execute arbitrary SQL commands via the det parameter...
CVE-2008-6812
The CVE-2008-6812 issue affects phpWebNews 0.2 MySQL Edition, specifically the bukutamu.php component, where the det parameter is vulnerable to SQL injection. This allows remote attackers to execute arbitrary SQL commands. The NVD data shows a high severity (CVSS v2 base score 7.5) with network a...
CVE-2008-6813
CVE-2008-6813 affects phpWebNews 0.2 MySQL Edition; the vulnerability is a SQL injection in index.php via the id_kat parameter, allowing remote attackers to issue arbitrary SQL commands. The issue is documented across multiple sources; the connected documents provide the vulnerability description...
CVE-2008-6813
SQL injection vulnerability in index.php in phpWebNews 0.2 MySQL Edition allows remote attackers to execute arbitrary SQL commands via the idkat parameter...
CVE-2008-6812
SQL injection vulnerability in bukutamu.php in phpWebNews 0.2 MySQL Edition allows remote attackers to execute arbitrary SQL commands via the det parameter...
phpwebnews-mysql SQL注入漏洞
BUGTRAQ ID: 30383 CNCAN ID:CNCAN-2008072904 phpwebnews-mysql是一款基于PHP的WEB应用程序。 phpwebnews-mysql不正确过滤用户提交的输入,远程攻击者可以利用漏洞进行SQL注入攻击,获得敏感信息或操作数据库。 问题是脚本对用户提交的WEB参数缺少过滤,提交恶意SQL查询作为参数数据,可更改原来的SQL逻辑,获得敏感信息或操作数据库。 Codewalkers phpwebnews-mysql 0.2 目前没有解决方案提供:...
phpwebnews-cookie.txt
...:::::phpwebnews-mysql 0.2 Insecure Cookie Handling Vulnerability ::::.... Virangar Security Team www.virangar.net www.virangar.ir -------- Discoverd By :virangar security teamhadihadi special tnx :my master hadihadi tnx to:MR.nosrati,black.shadowes,MR.hesy & all virangar members & all hackerz...
phpWebNews 0.2 MySQL Edition (SQL) Insecure Cookie Handling Vuln
No description provided by source. ...:::::phpwebnews-mysql 0.2 Insecure Cookie Handling Vulnerability ::::.... Virangar Security Team www.virangar.net www.virangar.ir -------- Discoverd By :virangar security teamhadihadi special tnx :my master hadihadi tnx to:MR.nosrati,black.shadowes,MR.hesy &...
PHPwebnews 0.2 MySQL Edition - SQL Insecure Cookie Handling
PHPwebnews 0.2 MySQL Edition - SQL Insecure Cookie Handling ...:::::phpwebnews-mysql 0.2 Insecure Cookie Handling Vulnerability ::::.... Virangar Security Team www.virangar.net www.virangar.ir -------- Discoverd By :virangar security teamhadihadi special tnx :my master hadihadi tnx...
phpWebNews 0.2 MySQL Edition (SQL) Insecure Cookie Handling Vuln
Exploit for unknown platform in category web applications ================================================================ phpWebNews 0.2 MySQL Edition SQL Insecure Cookie Handling Vuln ================================================================ ...:::::phpwebnews-mysql 0.2 Insecure Cookie...
PHPwebnews 0.2 MySQL Edition - 'SQL' Insecure Cookie Handling
...:::::phpwebnews-mysql 0.2 Insecure Cookie Handling Vulnerability ::::.... Virangar Security Team www.virangar.net www.virangar.ir -------- Discoverd By :virangar security teamhadihadi special tnx :my master hadihadi tnx to:MR.nosrati,black.shadowes,MR.hesy & all virangar members & all hackerz...
phpwebnews-sql.txt
/ | | \ | | | | \ \ / / | |/ | | | / | | | | | | | |\ V / | | | | '/ |/ \ | | / | '/ | | || | | |\ | || | | | | | | || | | \ \ / | | | | | | | |/|| |,||| ||/ ,|| |/|||/|| , | ---------------------------------------------------------------------------|/ Exploit found by sToRm phpWebNews...