New5starRating 1.0 (rating.php) SQL Injection Vulnerability

Exploit for unknown platform in category web applications =========================================================== New5starRating 1.0 rating.php SQL Injection Vulnerability =========================================================== New5starRating v1.0 rating.php Sql Inj. Vuln. Yazar: Bgh7 Tur...

New5starRating 1.0 - 'rating.php' SQL Injection

New5starRating v1.0 rating.php Sql Inj. Vuln. Yazar: Bgh7 Turk Bilisim Gucleri Download; http://www.maniacomputer.com/5starrating/New5Star.html Bug--Sql Inj. Exp: rating.php?det=-1 union select userid,0,0,userpass from admin Panel: /admin/ Thanks: milw0rm--Str0ke milw0rm.com 2009-08-24...

CVE-2008-2968: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in rating.php in Academic Web Tools AWT YEKTA 1.4.3.1, and 1.4.2.8 and earlier, allows remote attackers to execute arbitrary SQL commands via the bookid parameter...

Sql injection

SQL injection vulnerability in includes/rating.php in 2z Project 0.9.5 allows remote attackers to execute arbitrary SQL commands via the postid parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2007-2898

The CVE-2007-2898 entry describes an SQL injection vulnerability in the 2z Project 0.9.5, specifically in the file includes/rating.php where user input from the rating parameter to index.php is unsafely handled. This leads to the possibility of remote attackers executing arbitrary SQL commands. T...

CVE-2007-2905

CVE-2007-2905 is a reported SQL injection vulnerability in the 2z Project 0.9.5, affecting the includes/rating.php component. The vulnerability allows remote attackers to execute arbitrary SQL commands via the post_id parameter. Multiple connected sources corroborate this flaw. The documents do n...

CVE-2007-2905: Undefined Security Weakness

SQL injection vulnerability in includes/rating.php in 2z Project 0.9.5 allows remote attackers to execute arbitrary SQL commands via the postid parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2007-2898: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in includes/rating.php in 2z Project 0.9.5 allows remote attackers to execute arbitrary SQL commands via the rating parameter to index.php...

built2go-xss.txt

""""""""""""""""""""""""""""""""""""""""""""""" """ :: :: ::::: :::: """ """ :: :: :: : :: """ """ :::: :: :: ::::: ::::: :::: """ """ :: :: ::: ::: :: :: :: :: :: """ """ :: :: :: : : ::::: :: :: :::: """ """ """ """"""""""""""""""""""""""""""""""""""""""""""" Xmor$ DigitaL Hacking TeaM Built2Go...

CVE-2007-1248: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in built2go News Manager Blog 1.0 allow remote attackers to inject arbitrary web script or HTML via the 1 cid, 2 uid, and 3 nid parameters to a news.php, and the nid parameter to b rating.php...

CVE-2006-3474: Undefined Security Weakness

Multiple SQL injection vulnerabilities in Belchior Foundry vCard PRO allow remote attackers to execute arbitrary SQL commands via the 1 catid parameter to a gbrowse.php, 2 cardid parameter to b rating.php and c create.php, and the 3 eventid parameter to d search.php...