EUVD-2005-4047

Malware in sbrugna...

EUVD-2017-7403

Malware in sbrugna...

CVE-2017-15987

Fake Magazine Cover Script allows SQL Injection via the rate.php value parameter or the content.php id parameter...

CVE-2017-15987

CVE-2017-15987 concerns Fake Magazine Cover Script with a SQL injection vulnerability exploitable via rate.php?value and content.php?id parameters. Multiple connected sources confirm the vulnerability and provide PoC payloads (e.g., UNION SELECT, CONCAT_WS with user/database/version) and exploit ...

CVE-2017-15987: Improper Neutralization of Special Elements used in an SQL Command

Fake Magazine Cover Script allows SQL Injection via the rate.php value parameter or the content.php id parameter...

CVE-2014-5097

Multiple SQL injection vulnerabilities in Free Reprintables ArticleFR 3.0.4 and earlier allow remote attackers to execute arbitrary SQL commands via the id parameter in a 1 get or 2 set action to rate.php...

Sql injection

Multiple SQL injection vulnerabilities in Free Reprintables ArticleFR 3.0.4 and earlier allow remote attackers to execute arbitrary SQL commands via the id parameter in a 1 get or 2 set action to rate.php...

CVE-2014-5097: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Free Reprintables ArticleFR 3.0.4 and earlier allow remote attackers to execute arbitrary SQL commands via the id parameter in a 1 get or 2 set action to rate.php...

DELTAScripts PHPClassifieds (rate.php) Blind SQL Injection

No description provided by source. / Name : DELTAScripts PHPClassifieds Vuln : Blind SQL Injection Author : Hamza 'MizoZ' N. Email : mizozxatgmaildotcom WebSite : www.greymen.orghttp://www.greymen.org Greetz : Zuka, all friends & arab hackers / Vulnerability is in the rate.php , $GET'id'...

Programs Rating rate.php id Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/35746/info Programs Rating Script is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script...

CVE-2012-5098

Multiple SQL injection vulnerabilities in Php-X-Links, possibly 1.0, allow remote attackers to execute arbitrary SQL commands via the 1 id parameter to rate.php, 2 cid parameter to view.php, or 3 t parameter to pop.php...

CVE-2012-5098: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Php-X-Links, possibly 1.0, allow remote attackers to execute arbitrary SQL commands via the 1 id parameter to rate.php, 2 cid parameter to view.php, or 3 t parameter to pop.php...

CVE-2011-4920

Multiple cross-site scripting XSS vulnerabilities in e107 0.7.26, and other versions before 1.0.0, allow remote attackers to inject arbitrary web script or HTML via the URL to 1 e107images/thumb.php or 2 rate.php, 3 resendname parameter to e107admin/users.php, and 4 link BBCode in user signatures...

CVE-2011-4920: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in e107 0.7.26, and other versions before 1.0.0, allow remote attackers to inject arbitrary web script or HTML via the URL to 1 e107images/thumb.php or 2 rate.php, 3 resendname parameter to e107admin/users.php, and 4 link BBCode in user signatures...

CVE-2009-4690

Multiple cross-site scripting XSS vulnerabilities in YourFreeWorld Programs Rating Script allow remote attackers to inject arbitrary web script or HTML via the id parameter to 1 rate.php and 2 postcomments.php...

CVE-2009-4690

Multiple cross-site scripting XSS vulnerabilities in YourFreeWorld Programs Rating Script allow remote attackers to inject arbitrary web script or HTML via the id parameter to 1 rate.php and 2 postcomments.php...

CVE-2009-4690: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in YourFreeWorld Programs Rating Script allow remote attackers to inject arbitrary web script or HTML via the id parameter to 1 rate.php and 2 postcomments.php...

DELTAScripts PHPClassifieds Blind SQL Injection

/ Name : DELTAScripts PHPClassifieds Vuln : Blind SQL Injection Author : Hamza 'MizoZ' N. Email : mizozxatgmaildotcom WebSite : www.greymen.org Greetz : Zuka, all friends & arab hackers / Vulnerability is in the rate.php , $GET'id' HOST/PATH/rate.php?id=true value+INJECTION exemples :...

DELTAScripts PHPClassifieds - 'rate.php' Blind SQL Injection

/ Name : DELTAScripts PHPClassifieds Vuln : Blind SQL Injection Author : Hamza 'MizoZ' N. Email : mizozxatgmaildotcom WebSite : www.greymen.org Greetz : Zuka, all friends & arab hackers / Vulnerability is in the rate.php , $GET'id' HOST/PATH/rate.php?id=true value+INJECTION exemples :...

DELTAScripts PHPClassifieds (rate.php) Blind SQL Injection

Exploit for unknown platform in category web applications ========================================================== DELTAScripts PHPClassifieds rate.php Blind SQL Injection ========================================================== / Name : DELTAScripts PHPClassifieds Vuln : Blind SQL Injection ...