EUVD-2017-7403

Malware in sbrugna...

EUVD-2005-4047

Malware in sbrugna...

CVE-2017-15987

Fake Magazine Cover Script allows SQL Injection via the rate.php value parameter or the content.php id parameter...

CVE-2017-15987

CVE-2017-15987 concerns Fake Magazine Cover Script with a SQL injection vulnerability exploitable via rate.php?value and content.php?id parameters. Multiple connected sources confirm the vulnerability and provide PoC payloads (e.g., UNION SELECT, CONCAT_WS with user/database/version) and exploit ...

CVE-2017-15987: Improper Neutralization of Special Elements used in an SQL Command

Fake Magazine Cover Script allows SQL Injection via the rate.php value parameter or the content.php id parameter...

PT-2017-14342

Name of the Vulnerable Software and Affected Versions Fake Magazine Cover Script affected versions not specified Description The issue allows SQL Injection via the rate.php value parameter or the content.php id parameter. Recommendations For all affected versions, consider restricting access to t...

CVE-2014-5097

Multiple SQL injection vulnerabilities in Free Reprintables ArticleFR 3.0.4 and earlier allow remote attackers to execute arbitrary SQL commands via the id parameter in a 1 get or 2 set action to rate.php...

Sql injection

Multiple SQL injection vulnerabilities in Free Reprintables ArticleFR 3.0.4 and earlier allow remote attackers to execute arbitrary SQL commands via the id parameter in a 1 get or 2 set action to rate.php...

CVE-2014-5097: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Free Reprintables ArticleFR 3.0.4 and earlier allow remote attackers to execute arbitrary SQL commands via the id parameter in a 1 get or 2 set action to rate.php...

PT-2014-6275

Name of the Vulnerable Software and Affected Versions Free Reprintables ArticleFR versions 3.0.4 and earlier Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the id parameter in a rate.php endpoint, specifically through a 1 get or 2 set action...

Programs Rating rate.php id Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/35746/info Programs Rating Script is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script...

DELTAScripts PHPClassifieds (rate.php) Blind SQL Injection

No description provided by source. / Name : DELTAScripts PHPClassifieds Vuln : Blind SQL Injection Author : Hamza 'MizoZ' N. Email : mizozxatgmaildotcom WebSite : www.greymen.orghttp://www.greymen.org Greetz : Zuka, all friends & arab hackers / Vulnerability is in the rate.php , $GET'id'...

CVE-2012-5098

Multiple SQL injection vulnerabilities in Php-X-Links, possibly 1.0, allow remote attackers to execute arbitrary SQL commands via the 1 id parameter to rate.php, 2 cid parameter to view.php, or 3 t parameter to pop.php...

PT-2012-5767

Name of the Vulnerable Software and Affected Versions Php-X-Links version 1.0 Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via the id parameter to "rate.php", the cid parameter to "view.php", or the t parameter to "pop.php". Recommendations...

CVE-2012-5098: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Php-X-Links, possibly 1.0, allow remote attackers to execute arbitrary SQL commands via the 1 id parameter to rate.php, 2 cid parameter to view.php, or 3 t parameter to pop.php...

CVE-2011-4920

Multiple cross-site scripting XSS vulnerabilities in e107 0.7.26, and other versions before 1.0.0, allow remote attackers to inject arbitrary web script or HTML via the URL to 1 e107images/thumb.php or 2 rate.php, 3 resendname parameter to e107admin/users.php, and 4 link BBCode in user signatures...

PT-2012-1997

Name of the Vulnerable Software and Affected Versions e107 versions 0.7.26 through 0.9.x and other versions prior to 1.0.0 Description The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via the URL to "e107 images/thumb.php" or "rate.php", the resend na...

CVE-2011-4920: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in e107 0.7.26, and other versions before 1.0.0, allow remote attackers to inject arbitrary web script or HTML via the URL to 1 e107images/thumb.php or 2 rate.php, 3 resendname parameter to e107admin/users.php, and 4 link BBCode in user signatures...

CVE-2009-4690

Multiple cross-site scripting XSS vulnerabilities in YourFreeWorld Programs Rating Script allow remote attackers to inject arbitrary web script or HTML via the id parameter to 1 rate.php and 2 postcomments.php...

CVE-2009-4690

Multiple cross-site scripting XSS vulnerabilities in YourFreeWorld Programs Rating Script allow remote attackers to inject arbitrary web script or HTML via the id parameter to 1 rate.php and 2 postcomments.php...