pwsphpSQL.txt

--------------------Summary---------------- Software: Pwsphp CMS Sowtware's Web Site: http://www.pwsphp.com/ Versions: ALL Type: Injection SQL Class: Remote Status: Unpatched. No reply from developers Exploit: Available Solution: Not Available Discovered by: papipsycho SITE : papipsycho.com &...

Sql injection

SQL injection vulnerability in profil.php in PwsPHP 1.2.3, and possibly earlier versions, allows remote attackers to execute arbitrary SQL commands via the affnewsform parameter, a different vulnerability than CVE-2005-1509...

Sql injection

SQL injection vulnerability in the sondages module in index.php in PwsPHP 1.2.3 allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php...

CVE-2006-0942

SQL injection vulnerability in profil.php in PwsPHP 1.2.3, and possibly earlier versions, allows remote attackers to execute arbitrary SQL commands via the affnewsform parameter, a different vulnerability than CVE-2005-1509...

CVE-2006-0943

SQL injection vulnerability in the sondages module in index.php in PwsPHP 1.2.3 allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php...

CVE-2006-0942

CVE-2006-0942 is an SQL injection in profil.php of PwsPHP 1.2.3 (and possibly earlier) that allows remote attackers to execute arbitrary SQL commands through the aff_news_form parameter, a vulnerability distinct from CVE-2005-1509. Connected records confirm the affected software (PwsPHP), vulnera...

CVE-2006-0943

The CVE-2006-0943 issue affects PwsPHP 1.2.3, specifically the sondages module’s index.php. The underlying vulnerability is a SQL injection via the id parameter to index.php, enabling remote attackers to execute arbitrary SQL commands. The available connected records corroborate the same descript...

CVE-2006-0942

SQL injection vulnerability in profil.php in PwsPHP 1.2.3, and possibly earlier versions, allows remote attackers to execute arbitrary SQL commands via the affnewsform parameter, a different vulnerability than CVE-2005-1509...

CVE-2006-0943

SQL injection vulnerability in the sondages module in index.php in PwsPHP 1.2.3 allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php...

[SA19023] PwsPHP "sondage" Module SQL Injection Vulnerability

TITLE: PwsPHP "sondage" Module SQL Injection Vulnerability SECUNIA ADVISORY ID: SA19023 VERIFY ADVISORY: http://secunia.com/advisories/19023/ CRITICAL: Moderately critical IMPACT: Manipulation of data, Exposure of sensitive information WHERE: From remote SOFTWARE: PwsPHP 1.x...

PwsPHP <= 1.2.3 (index.php) Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl PwsPHP = 1.2.4 index.php Remote SQL Injection Exploit http://example.com/index.php?mod=sondages&do=results&id=1%20union%20select%20id,0,0,pseudo,pass,pseudo,0,0,0,0,0,0,0,0,0,0,0,0,0,0%20from%20%60users%60%20/ Discovered by: papipsycho...

PwsPHP <= 1.2.3 (index.php) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ======================================================== PwsPHP .?\\/ if...

PwsPHP 1.2.3 - index.php SQL Injection

PwsPHP 1.2.3 - index.php SQL Injection !/usr/bin/perl PwsPHP .?\\/ if $line = /\w32/ sub username print " Username: $2\n"; sub password print " Hash: $2\n...

PwsPHP 1.2.3 - 'index.php' SQL Injection

!/usr/bin/perl PwsPHP .?\\/ if $line = /\w32/ sub username print " Username: $2\n"; sub password print " Hash: $2\n\n"; if @ARGV != 2else&exp...

CVE-2006-0668

SQL injection vulnerability in index.php in PwsPHP 1.2.3 allows remote attackers to execute arbitrary SQL commands via the id parameter, possibly in message.php in the espacemembre module. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

Sql injection

SQL injection vulnerability in index.php in PwsPHP 1.2.3 allows remote attackers to execute arbitrary SQL commands via the id parameter, possibly in message.php in the espacemembre module. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

CVE-2006-0668

CVE-2006-0668 describes an SQL injection in the PHP application PwsPHP 1.2.3, specifically via the id parameter in index.php (and possibly in message.php within the espace_membre module). The underlying issue is a lack of input validation/safe query construction, enabling remote attackers to exec...

CVE-2006-0668

SQL injection vulnerability in index.php in PwsPHP 1.2.3 allows remote attackers to execute arbitrary SQL commands via the id parameter, possibly in message.php in the espacemembre module. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

PwsPHP 1.2.3 - SQL Injection

source: https://www.securityfocus.com/bid/16567/info PwsPHP is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could allow an attacker to compromise the...

PWSPHP XSS

The remote host runs PWSPHP Portail Web System a CMS written in PHP. The remote version of this software is vulnerable to cross-site scripting attack due to a lack of sanity checks on the SPDX-FileCopyrightText: 2005 David Maciejak Some text descriptions might be excerpted from a referenced...