CVE-2008-2277

CVE-2008-2277 describes an SQL injection in the web application module: a vulnerability in the file/function detail.php of the Feedback and Rating Script 1.0 . The flaw allows remote attackers to inject arbitrary SQL through the listingid parameter, potentially compromising database contents and ...

CVE-2008-2277: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in detail.php in Feedback and Rating Script 1.0 allows remote attackers to execute arbitrary SQL commands via the listingid parameter...

picturerating-blindsql.txt

!/usr/bin/perl -- Picture Rating 1.0 Blind SQL Injection Exploit -- -Info/Instructions- After running this perl script, you will have admin details therefore you will be able to login to the admin area at http://site.com/control/ ok once you have logged in has admin you can upload a shell, click...

Picture Rating 1.0 Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ============================================== Picture Rating 1.0 Blind SQL Injection Exploit ============================================== !/usr/bin/perl -- Picture Rating 1.0 Blind SQL Injection Exploit -- -Info/Instructions- After...

Picture Rating 1.0 - Blind SQL Injection

Picture Rating 1.0 - Blind SQL Injection !/usr/bin/perl -- Picture Rating 1.0 Blind SQL Injection Exploit -- -Info/Instructions- After running this perl script, you will have admin details therefore you will be able to login to the admin area at http://site.com/control/ ok once you have logged in...

CA ARCserve Backup for Laptops and Desktops Server and CA Desktop Management Suite Multiple Vulnerabilities

Title: CA ARCserve Backup for Laptops and Desktops Server and CA Desktop Management Suite Multiple Vulnerabilities CA Advisory Date: 2008-04-03 Reported By: Dyon Balding of Secunia Research Impact: A remote attacker can execute arbitrary code or cause a denial of service condition. Summary: CA...

Microsoft Security Bulletin MS08-014 - Critical Vulnerabilities in Microsoft Excel Could Allow Remote Code Execution (949029)

Microsoft Security Bulletin MS08-014 - Critical Vulnerabilities in Microsoft Excel Could Allow Remote Code Execution 949029 Published: March 11, 2008 Version: 1.0 General Information Executive Summary This security update resolves several privately reported and publicly reported vulnerabilities i...

rPSA-2008-0021-1 kernel

rPath Security Advisory: 2008-0021-1 Published: 2008-01-17 Products: rPath Linux 1 rPath Appliance Platform Linux Service 1 Rating: Critical Exposure Level Classification: Local System User Deterministic Vulnerability Updated Versions: kernel=conary.rpath.com@rpl:1-vmware/2.6.22.16-0.1-1...

Unfixed Redirect vulnerability at saban.tc

Security researcher Narcoticxs, has submitted on 30/09/2007 a Redirect vulnerability affecting saban.tc, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 04/10/2007. It is currently unfixed. If you believ...

Unfixed Redirect vulnerability at www.pkkgercegi.net

Security researcher st@rext, has submitted on 28/09/2007 a Redirect vulnerability affecting www.pkkgercegi.net, which at the time of submission ranked 561691 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 04/10/2007. It is currently unfixed. I...

Unfixed Redirect vulnerability at www.kanuni-42.k12.tr

Security researcher Narcoticxs, has submitted on 27/09/2007 a Redirect vulnerability affecting www.kanuni-42.k12.tr, which at the time of submission ranked 8508197 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 02/10/2007. It is currently...

krate-sql.txt

evening ppl. ---------------------------------------------------------------- K-Rate Clone Multiple Sql Injection advanced picture rating script Vendor http://turn-k.net/k-rate ---------------------------------------------------------------- Bug founded by d3v1l Date: 12.09.2007...

prmsgid-sql.txt

--==+================================================================================+==-- --==+ Pictures Rating SQL Injection Vulnerbility +==-- --==+================================================================================+==-- AUTHOR: t0pP8uZz & xprog SITE: N/A DORK: allintext:"Latest...

Sql injection

SQL injection vulnerability in index.php in Pictures Rating Picture Rating allows remote attackers to execute arbitrary SQL commands via the msgid parameter...

CVE-2007-3881

SQL injection vulnerability in index.php in Pictures Rating Picture Rating allows remote attackers to execute arbitrary SQL commands via the msgid parameter...

CVE-2007-3881

CVE-2007-3881 describes an SQL injection in index.php of Pictures Rating (Picture Rating). The vulnerability is exploitable via the msgid parameter, allowing remote attackers to execute arbitrary SQL commands. The associated metrics show a high base score (7.5, NETWORK attack vector, no authentic...

CVE-2007-3881

SQL injection vulnerability in index.php in Pictures Rating Picture Rating allows remote attackers to execute arbitrary SQL commands via the msgid parameter...

Pictures Rating (index.php msgid) Remote SQL Injection Vulnerbility

Exploit for unknown platform in category web applications =================================================================== Pictures Rating index.php msgid Remote SQL Injection Vulnerbility ===================================================================...

Pictures Rating - index.php?msgid SQL Injection

Pictures Rating - index.php?msgid SQL Injection --==+================================================================================+==-- --==+ Pictures Rating SQL Injection Vulnerbility +==-- --==+================================================================================+==-- AUTHOR:...

CVE-2007-3881: Undefined Security Weakness

SQL injection vulnerability in index.php in Pictures Rating Picture Rating allows remote attackers to execute arbitrary SQL commands via the msgid parameter...