phpwebnews-mysql SQL注入漏洞

BUGTRAQ ID: 30383 CNCAN ID：CNCAN-2008072904 phpwebnews-mysql是一款基于PHP的WEB应用程序。 phpwebnews-mysql不正确过滤用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，获得敏感信息或操作数据库。 问题是脚本对用户提交的WEB参数缺少过滤，提交恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息或操作数据库。 Codewalkers phpwebnews-mysql 0.2 目前没有解决方案提供：...

phpwebnews-cookie.txt

...:::::phpwebnews-mysql 0.2 Insecure Cookie Handling Vulnerability ::::.... Virangar Security Team www.virangar.net www.virangar.ir -------- Discoverd By :virangar security teamhadihadi special tnx :my master hadihadi tnx to:MR.nosrati,black.shadowes,MR.hesy & all virangar members & all hackerz...

phpWebNews 0.2 MySQL Edition (SQL) Insecure Cookie Handling Vuln

No description provided by source. ...:::::phpwebnews-mysql 0.2 Insecure Cookie Handling Vulnerability ::::.... Virangar Security Team www.virangar.net www.virangar.ir -------- Discoverd By :virangar security teamhadihadi special tnx :my master hadihadi tnx to:MR.nosrati,black.shadowes,MR.hesy &...

phpWebNews 0.2 MySQL Edition (SQL) Insecure Cookie Handling Vuln

Exploit for unknown platform in category web applications ================================================================ phpWebNews 0.2 MySQL Edition SQL Insecure Cookie Handling Vuln ================================================================ ...:::::phpwebnews-mysql 0.2 Insecure Cookie...

phpwebnews-sql2.txt

...:::::phpwebnews-mysql 0.2 SQL Injection Vulnerability ::::.... Virangar Security Team www.virangar.net www.virangar.ir ================================================================================= Discoverd By :virangar security team User In Virangar : d4v00dcr4ck3r...

phpWebNews 0.2 MySQL Edition (id_kat) SQL Injection Vulnerability

No description provided by source. / | | \ | | | | \ \ / / | |/ | | | / | | | | | | | |\ V / | | | | '/ |/ \ | | / | '/ | | || | | |\ | || | | | | | | || | | \ \ / | | | | | | | |/|| |,||| ||/ ,|| |/|||/|| , | ---------------------------------------------------------------------------|/...

phpWebNews 0.2 MySQL Edition (id_kat) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================= phpWebNews 0.2 MySQL Edition idkat SQL Injection Vulnerability ================================================================= Exploit found by sToRm phpWebNews v0.2 MySQL...