74 matches found
CVE-2009-0110: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in read.php in RiotPix 0.61 and earlier allows remote attackers to execute arbitrary SQL commands via the forumid parameter...
CVE-2008-5195: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in SebracCMS sbcms 0.4 allow remote attackers to execute arbitrary SQL commands via 1 the recid parameter to cms/form/read.php, 2 the uname parameter to cms/index.php, and other unspecified vectors...
CVE-2008-4911: Improper Control of Generation of Code
PHP remote file inclusion vulnerability in read.php in Chattaitaliano Istant-Replay allows remote attackers to execute arbitrary PHP code via a URL in the data parameter...
SebracCMS <= 0.4 Multiple SQL Injection Vulnerabilities
Exploit for unknown platform in category web applications ======================================================= SebracCMS = 0.4 Multiple SQL Injection Vulnerabilities ======================================================= Name: SebracCMS Webiste: http://www.sebrac.netsons.org/cms/ Vulnerabilit...
SebracCMS <= 0.4 Multiple SQL Injection Vulnerabilities
No description provided by source. Name: SebracCMS Webiste: http://www.sebrac.netsons.org/cms/ Vulnerability type: SQL Injection Author: shinmai, 2008-06-28 Description: SebracCMS contains two major SQL injection vulnerabilities: Unsanitazed POST-variables in SQL queries when logging users in. Th...
SebracCMS 0.4 - Multiple SQL Injections
SebracCMS 0.4 - Multiple SQL Injections Name: SebracCMS Webiste: http://www.sebrac.netsons.org/cms/ Vulnerability type: SQL Injection Author: shinmai, 2008-06-28 Description: SebracCMS contains two major SQL injection vulnerabilities: Unsanitazed POST-variables in SQL queries when logging users i...
CVE-2008-2556: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in read.php in PHP Visit Counter 0.4 and earlier allows remote attackers to execute arbitrary SQL commands via the datespan parameter in a read action...
Sql injection
SQL injection vulnerability in read.php in Advanced Links Management ALM 1.5.2 allows remote attackers to execute arbitrary SQL commands via the catId parameter...
CVE-2008-2529
SQL injection vulnerability in read.php in Advanced Links Management ALM 1.5.2 allows remote attackers to execute arbitrary SQL commands via the catId parameter...
CVE-2008-2529: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in read.php in Advanced Links Management ALM 1.5.2 allows remote attackers to execute arbitrary SQL commands via the catId parameter...
PHP Visit Counter <= 0.4 (datespan) SQL Injection Vulnerability
No description provided by source. PHP Visit Counter = 0.4 - SQL Injection Vulnerability Vulnerability discovered by: LidlosesAuge Greetz to: -=Player=- , Suicide, g4ms3, enco, GPM, Free-Hack, Ciphercrew, h4ck-y0u Date: &nb...
PHP Visit Counter <= 0.4 (datespan) SQL Injection Vulnerability
Exploit for unknown platform in category web applications =============================================================== PHP Visit Counter = 0.4 datespan SQL Injection Vulnerability =============================================================== PHP Visit Counter = 0.4 - SQL Injection...
phpvisitcounter-sql.txt
PHP Visit Counter = 0.4 - SQL Injection Vulnerability Vulnerability discovered by: LidlosesAuge Greetz to: -=Player=- , Suicide, g4ms3, enco, GPM, Free-Hack, Ciphercrew, h4ck-y0u Date: 30.05.2008 Dork: inurl:"read.php?datespan=" Vulnerability: 1. SQL Injection 1.1...
PHP Visit Counter 0.4 - 'datespan' SQL Injection
PHP Visit Counter = 0.4 - SQL Injection Vulnerability Vulnerability discovered by: LidlosesAuge Greetz to: -=Player=- , Suicide, g4ms3, enco, GPM, Free-Hack, Ciphercrew, h4ck-y0u Date: 30.05.2008 Dork: inurl:"read.php?datespan=" Vulnerability: 1. SQL Injection 1.1...
Advanced Links Management (ALM) 1.52 SQL Injection Vulnerability
Exploit for unknown platform in category web applications ================================================================ Advanced Links Management ALM 1.52 SQL Injection Vulnerability ================================================================ ALM - Advanced Links Management remote SQL...
Advanced Links Management (ALM) 1.52 - SQL Injection
ALM - Advanced Links Management remote SQL injection exploit Script download : http://www.easy-script.com/scripts-dl/almv152.zip Founder: His0k4 ALGERIAN HACKER Greetz : All friends & muslims HaCkErS... Contact: His0k4.hlmatgmail.com P.O.C : ---------------------...
irforum-rfi.txt
Istant-Replay Forum Remote File Inclusion Vulnerability AUTHOR: THuGM4N Email : [email protected] Script : Istant-Replay Forum Site : http://www.chattaitaliano.com Vulnerable CODE : /read.php $a = $GET'data'; $b = $GET'post'; $foo = include "$a.txt"; BUT THE EXPLOIT IS LIKE THAT :...
CVE-2002-2340: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in read.php in Phorum 3.3.2a allows remote attackers to inject arbitrary web script or HTML via 1 the t parameter or 2 the body of an email response...
CVE-2007-4719
SQL injection vulnerability in read.php in 212cafeBoard 6.30 Beta allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2007-4719
CVE-2007-4719 describes a SQL injection in read.php of 212cafeBoard 6.30 Beta, exploitable via the id parameter to execute arbitrary SQL commands remotely. Affected component: read.php within 212cafeBoard 6.30 Beta. Root cause: unsafely concatenated input in SQL query exposes database to injectio...