CVE-2008-1788

CVE-2008-1788 describes an SQL injection in the file directory.php of Prozilla Entertainers 1.1 and earlier. The vulnerability arises when processing the cat parameter, allowing remote attackers to execute arbitrary SQL commands. Affected component: directory.php in Prozilla Entertainers; root ca...

CVE-2008-1789

SQL injection vulnerability in forum.php in Prozilla Forum allows remote attackers to execute arbitrary SQL commands via the forum parameter...

Design/Logic Flaw

Prozilla Reviews 1.0 allows remote attackers to delete arbitrary users via a modified UserID parameter in a direct request to siteadmin/DeleteUser.php...

CVE-2008-1785

delete.php in Prozilla Top 100 1.2 allows remote authenticated users to delete statistics and accounts of arbitrary users via a modified s parameter...

Design/Logic Flaw

Prozilla Topsites 1.0 allows remote attackers to perform administrative actions via a direct request to 1 addu.php, 2 editu.php, and 3 uidx.php in siteadmin/...

CVE-2008-1784

Prozilla Topsites 1.0 allows remote attackers to perform administrative actions via a direct request to 1 addu.php, 2 editu.php, and 3 uidx.php in siteadmin/...

CVE-2008-1783

Prozilla Reviews 1.0 allows remote attackers to delete arbitrary users via a modified UserID parameter in a direct request to siteadmin/DeleteUser.php...

Code injection

delete.php in Prozilla Top 100 1.2 allows remote authenticated users to delete statistics and accounts of arbitrary users via a modified s parameter...

CVE-2008-1785

The CVE-2008-1785 issue affects Prozilla Top 100 1.2, where delete.php can be abused by remote authenticated users to delete statistics and accounts of arbitrary users via a modified s parameter. Root cause appears to be parameter manipulation in delete.php, enabling unauthorized destructive acti...

CVE-2008-1784

Prozilla Topsites 1.0 is affected. Remote attackers can perform administrative actions via direct requests to siteadmin/ addu.php, editu.php, and uidx.php. CVSSv2 base score 7.5 (HIGH) with network/vector/low complexity, no authentication. Connected sources confirm vulnerability details without a...

CVE-2008-1783

Prozilla Reviews 1.0 is affected by CVE-2008-1783. A remote attacker can delete arbitrary users by supplying a modified UserID parameter in a direct request to siteadmin/DeleteUser.php. The NVD lists a base score of 6.4 (MEDIUM) with network access and low attack complexity; confidentiality is no...

CVE-2008-1783

Prozilla Reviews 1.0 allows remote attackers to delete arbitrary users via a modified UserID parameter in a direct request to siteadmin/DeleteUser.php...

CVE-2008-1784

Prozilla Topsites 1.0 allows remote attackers to perform administrative actions via a direct request to 1 addu.php, 2 editu.php, and 3 uidx.php in siteadmin/...

CVE-2008-1785

delete.php in Prozilla Top 100 1.2 allows remote authenticated users to delete statistics and accounts of arbitrary users via a modified s parameter...

prozilla-stats.txt

--==+================================================================================+==-- --==+ Prozilla Top 100 1.2 Arbitrary Delete Stats Vulnerability +==-- --==+================================================================================+==-- Discovered By: t0pP8uZz & xprog Discovered On...

prozillafreelancers-sql.txt

--==+================================================================================+==-- --==+ Prozilla Freelancers SQL Injection Vulnerabilitys +==-- --==+================================================================================+==-- Discovered By: t0pP8uZz Discovered On: 7 April 2008...

prozillafs-sql.txt

--==+================================================================================+==-- --==+ Prozilla Forum Service SQL Injection Vulnerbilitys +==-- --==+================================================================================+==-- Discovered By: t0pP8uZz Discovered On: 7 April 2008...

prozillacheat-sql.txt

--==+================================================================================+==-- --==+ Prozilla Cheat Script 2.0 SQL Injection Vulnerabilitys +==-- --==+================================================================================+==-- Discovered By: t0pP8uZz Discovered On: 7 April...

prozilla-editadd.txt

--==+================================================================================+==-- --==+ Prozilla Topsites 1.0 Arbitrary Edit/Add Users Vulnerability +==-- --==+================================================================================+==-- Discovered By: t0pP8uZz Discovered On: 7...

prozilla-delete.txt

--==+================================================================================+==-- --==+ Prozilla Reviews Script 1.0 Arbitrary Delete User Vulnerability +==-- --==+================================================================================+==-- Discovered By: t0pP8uZz Discovered On: ...