EUVD-2005-4047

Malware in sbrugna...

EUVD-2017-7403

Malware in sbrugna...

CVE-2017-15987

CVE-2017-15987 concerns Fake Magazine Cover Script with a SQL injection vulnerability exploitable via rate.php?value and content.php?id parameters. Multiple connected sources confirm the vulnerability and provide PoC payloads (e.g., UNION SELECT, CONCAT_WS with user/database/version) and exploit ...

CVE-2017-15987

Fake Magazine Cover Script allows SQL Injection via the rate.php value parameter or the content.php id parameter...

CVE-2014-5097

Multiple SQL injection vulnerabilities in Free Reprintables ArticleFR 3.0.4 and earlier allow remote attackers to execute arbitrary SQL commands via the id parameter in a 1 get or 2 set action to rate.php...

Sql injection

Multiple SQL injection vulnerabilities in Free Reprintables ArticleFR 3.0.4 and earlier allow remote attackers to execute arbitrary SQL commands via the id parameter in a 1 get or 2 set action to rate.php...

DELTAScripts PHPClassifieds (rate.php) Blind SQL Injection

No description provided by source. / Name : DELTAScripts PHPClassifieds Vuln : Blind SQL Injection Author : Hamza 'MizoZ' N. Email : mizozxatgmaildotcom WebSite : www.greymen.orghttp://www.greymen.org Greetz : Zuka, all friends & arab hackers / Vulnerability is in the rate.php , $GET'id'...

Programs Rating rate.php id Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/35746/info Programs Rating Script is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script...

CVE-2012-5098

Multiple SQL injection vulnerabilities in Php-X-Links, possibly 1.0, allow remote attackers to execute arbitrary SQL commands via the 1 id parameter to rate.php, 2 cid parameter to view.php, or 3 t parameter to pop.php...

CVE-2011-4920

Multiple cross-site scripting XSS vulnerabilities in e107 0.7.26, and other versions before 1.0.0, allow remote attackers to inject arbitrary web script or HTML via the URL to 1 e107images/thumb.php or 2 rate.php, 3 resendname parameter to e107admin/users.php, and 4 link BBCode in user signatures...

CVE-2009-4690

Multiple cross-site scripting XSS vulnerabilities in YourFreeWorld Programs Rating Script allow remote attackers to inject arbitrary web script or HTML via the id parameter to 1 rate.php and 2 postcomments.php...

CVE-2009-4690

Multiple cross-site scripting XSS vulnerabilities in YourFreeWorld Programs Rating Script allow remote attackers to inject arbitrary web script or HTML via the id parameter to 1 rate.php and 2 postcomments.php...

DELTAScripts PHPClassifieds Blind SQL Injection

/ Name : DELTAScripts PHPClassifieds Vuln : Blind SQL Injection Author : Hamza 'MizoZ' N. Email : mizozxatgmaildotcom WebSite : www.greymen.org Greetz : Zuka, all friends & arab hackers / Vulnerability is in the rate.php , $GET'id' HOST/PATH/rate.php?id=true value+INJECTION exemples :...

DELTAScripts PHPClassifieds - rate.php Blind SQL Injection

DELTAScripts PHPClassifieds - rate.php Blind SQL Injection / Name : DELTAScripts PHPClassifieds Vuln : Blind SQL Injection Author : Hamza 'MizoZ' N. Email : mizozxatgmaildotcom WebSite : www.greymen.org Greetz : Zuka, all friends & arab hackers / Vulnerability is in the rate.php , $GET'id'...

DELTAScripts PHPClassifieds (rate.php) Blind SQL Injection

Exploit for unknown platform in category web applications ========================================================== DELTAScripts PHPClassifieds rate.php Blind SQL Injection ========================================================== / Name : DELTAScripts PHPClassifieds Vuln : Blind SQL Injection ...

DELTAScripts PHPClassifieds - 'rate.php' Blind SQL Injection

/ Name : DELTAScripts PHPClassifieds Vuln : Blind SQL Injection Author : Hamza 'MizoZ' N. Email : mizozxatgmaildotcom WebSite : www.greymen.org Greetz : Zuka, all friends & arab hackers / Vulnerability is in the rate.php , $GET'id' HOST/PATH/rate.php?id=true value+INJECTION exemples :...

gravy media CMS 1.07 - Multiple Vulnerabilities

gravy media CMS 1.07 - Multiple Vulnerabilities 0x01 Informations: Name : Gravy Media Cms 1.07 Download : http://www.gravy-media.com/downloads.php Vulnerability : Multiple Sql Injections & Arbitrary File Download Author : x0r Contact : [email protected] Notes : Proud To Be Italian Greetz : //...

[Full-disclosure] [scip_Advisory] e107 v0.6 rate.php manipulation

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 e107 v0.6 rate.php voting manipulation and forwarding vulnerability scip AG Vulnerability Advisory 11/10/2005 http://www.scip.ch I. INTRODUCTION e107 is the name of an open-source content management system cms that relies on php and sql. More...