EUVD-2008-2525

Malware in sbrugna...

Sql injection

Multiple SQL injection vulnerabilities in Concepts & Solutions QuickUpCMS allow remote attackers to execute arbitrary SQL commands via the 1 nr parameter to a frontend/news.php, the 2 id parameter to b events3.php and c videos2.php in frontend/, the 3 y parameter to d frontend/events2.php, and th...

CVE-2008-2530

Multiple SQL injection vulnerabilities in Concepts & Solutions QuickUpCMS allow remote attackers to execute arbitrary SQL commands via the 1 nr parameter to a frontend/news.php, the 2 id parameter to b events3.php and c videos2.php in frontend/, the 3 y parameter to d frontend/events2.php, and th...

CVE-2008-2530

Multiple SQL injection vulnerabilities in Concepts & Solutions QuickUpCMS allow remote attackers to execute arbitrary SQL commands via the 1 nr parameter to a frontend/news.php, the 2 id parameter to b events3.php and c videos2.php in frontend/, the 3 y parameter to d frontend/events2.php, and th...

CVE-2008-2530

CVE-2008-2530 concerns multiple SQL injection vulnerabilities in Concepts & Solutions QuickUpCMS. The issues allow remote attackers to inject SQL via specific parameters: nr to frontend/news.php; id to frontend/events3.php and frontend/videos2.php; y to frontend/events2.php; and ser to frontend/f...

CVE-2008-2530: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Concepts & Solutions QuickUpCMS allow remote attackers to execute arbitrary SQL commands via the 1 nr parameter to a frontend/news.php, the 2 id parameter to b events3.php and c videos2.php in frontend/, the 3 y parameter to d frontend/events2.php, and th...

QuickUpCMS Multiple Remote SQL Injection Vulnerabilities Exploit

No description provided by source. ?php iniset"maxexecutiontime",0; printr' QuickUpCMS - SQL Injection Exploit Vulnerability discovered by: LidlosesAuge Exploit coded by: LidlosesAuge Greetz to: -=Player=- , Suicide, g4ms3, enco, GPM...

QuickUpCMS Multiple Remote SQL Injection Vulnerabilities Exploit

Exploit for unknown platform in category web applications ================================================================ QuickUpCMS Multiple Remote SQL Injection Vulnerabilities Exploit ================================================================ php '.$argv0.' http://www.site.com/frontend/...

QuickUpCMS - Multiple SQL Injections Vulnerabilities

QuickUpCMS - Multiple SQL Injections Vulnerabilities php '.$argv0.' http://www.site.com/frontend/ 1 1 '; if $argc == 4 $url = $argv1; $methodnr = $argv2; $userid = $argv3; if $methodnr==1 $method = 'news.php?nr=...

QuickUpCMS - Multiple SQL Injections Vulnerabilities

php '.$argv0.' http://www.site.com/frontend/ 1 1 '; if $argc == 4 $url = $argv1; $methodnr = $argv2; $userid = $argv3; if $methodnr==1 $method = 'news.php?nr=null'union+select+1,2,3,4,5,6,7,8,9,10,concat0x3a3a3a3a,user,0x3a3a313a3a,pass,0x3a3a323a3a,12//from+cmsuser+where+id='.$userid.'/'; elseif...