CVE-2009-3533

CVE-2009-3533 : The Meeting Room Booking System (MRBS) is vulnerable in its reporting page, report.php, where the typematch parameter is not properly sanitized before being used in a SQL query. This allows remote attackers to inject arbitrary SQL and potentially read/modify data in the MRBS datab...

CVE-2009-3359

Multiple cross-site scripting XSS vulnerabilities in Match Agency BiZ 1.0 allow remote attackers to inject arbitrary web script or HTML via the 1 important parameter to editprofile.php and 2 pid parameter to report.php...

Match Agency BiZ 1.0 Cross Site Scripting

/ | | \ \ / / | | \ \ / / | |\ \ /\ / / | | | | | | \ V /| | | \ V V / | | || | || / ||| // ,|, | |/ | | | |/ / | ' \ | | / | | | | | | | |||,|| || || Match Agency BiZ 1.0 Remote XSS Vulnerabilities Discovered By : Moudi Contact : Download : http://www.matchagency.biz/ Greetings : Mizoz,...

MRCGIGUY Hot Links (report.php id) Remote SQL Injection Vulnerability

No description provided by source. MRCGIGUY Hot Links SQL PHP report.php id Remote SQL Injection Founder: ThE g0bL!N ------ Home: http:/www.4ckx.com/dz/ ---- Vendor:http://www.mrcgiguy.com Special Thx: All Muslims All Members Of Team Algerien Of FootBall Note: Algerie 3-1 Egypt Exploit: ------ SQ...

MRCGIGUY Hot Links - 'report.php?id' SQL Injection

MRCGIGUY Hot Links SQL PHP report.php id Remote SQL Injection Founder: ThE g0bL!N ------ Home: http:/www.4ckx.com/dz/ ---- Vendor:http://www.mrcgiguy.com Special Thx: All Muslims All Members Of Team Algerien Of FootBall Note: Algerie 3-1 Egypt Exploit: ------ SQL INJECTION: -------------...

MRCGIGUY Hot Links - report.php?id SQL Injection

MRCGIGUY Hot Links - report.php?id SQL Injection MRCGIGUY Hot Links SQL PHP report.php id Remote SQL Injection Founder: ThE g0bL!N ------ Home: http:/www.4ckx.com/dz/ ---- Vendor:http://www.mrcgiguy.com Special Thx: All Muslims All Members Of Team Algerien Of FootBall Note: Algerie 3-1 Egypt...

CVE-2008-5778

SQL injection vulnerability in report.php in Free Links Directory Script FLDS 1.2a allows remote attackers to execute arbitrary SQL commands via the linkid parameter...

CVE-2008-5778

CVE-2008-5778 affects Free Links Directory Script (FLDS) 1.2a. The vulnerability is in report.php, where the linkid parameter allows remote SQL command execution (SQL injection). This is a high-severity issue (CVSS 2.0 base score 7.5) with potential partial impact on confidentiality, integrity, a...

CVE-2008-4378

SQL injection vulnerability in report.php in Mr. CGI Guy Hot Links SQL-PHP 3.0 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-4379

Cross-site scripting XSS vulnerability in report.php in Mr. CGI Guy Hot Links SQL-PHP 3.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the id parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in report.php in Mr. CGI Guy Hot Links SQL-PHP 3.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the id parameter...

Sql injection

SQL injection vulnerability in report.php in Mr. CGI Guy Hot Links SQL-PHP 3.0 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-4379

CVE-2008-4379 is a cross-site scripting (XSS) vulnerability impacting report.php in Mr. CGI Guy Hot Links SQL-PHP 3.0 and earlier. The flaw allows remote attackers to inject arbitrary web script or HTML via the id parameter, as described in the NVD entry. The reported impact is partial confidenti...

CVE-2008-4378

CVE-2008-4378 describes an SQL injection vulnerability in the file report.php of the affected product family “Mr. CGI Guy Hot Links SQL-PHP 3.0 and earlier.” The flaw allows remote attackers to inject and execute arbitrary SQL commands through the id parameter. Public references in the connected ...

CVE-2008-4379

Cross-site scripting XSS vulnerability in report.php in Mr. CGI Guy Hot Links SQL-PHP 3.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the id parameter...

hotlinks-sqlxss.txt

/\ \ /\ \ \ /\ /\ \ //\ \ \ \ \ \ \ \ \ \ \ /',\ \ \ \ \ \ \ \ /\ /'\ /'\ \ \ \ /\ ,\ /, \ \ \ \ ,\ \ \ \ // / // /\//\///\/\ \ \/\ // // // //////// //// security breakd0wn! Title: Hot Links SQL-PHP 3 report.php Multiple Vulnerabilities Vendor:...

Hot Links SQL-PHP 3 (report.php) Multiple Vulnerabilities

Exploit for unknown platform in category web applications ========================================================= Hot Links SQL-PHP 3 report.php Multiple Vulnerabilities ========================================================= 1. Information Hot Links was the initial script developed by Mr CGI...

Hot Links SQL-PHP 3 - 'report.php' Multiple Vulnerabilities

/\ \ /\ \ \ /\ /\ \ //\ \ \ \ \ \ \ \ \ \ \ /',\ \ \ \ \ \ \ \ /\ /'\ /'\ \ \ \ /\ ,\ /, \ \ \ \ ,\ \ \ \ // / // /\//\///\/\ \ \/\ // // // //////// //// security breakd0wn! Title: Hot Links SQL-PHP 3 report.php Multiple Vulnerabilities Vendor:...

CVE-2008-3565

Multiple cross-site scripting XSS vulnerabilities in Meeting Room Booking System MRBS 1.2.6 allow remote attackers to inject arbitrary web script or HTML via the area parameter to 1 day.php, 2 week.php, 3 month.php, 4 search.php, 5 report.php, and 6 help.php. NOTE: the provenance of this...

Information disclosure

Moodle 1.6.5, when displayerrors is enabled, allows remote attackers to obtain sensitive information via a direct request to 1 blog/blogpage.php and 2 course/report/stats/report.php, which reveals the installation path in an error message...