EUVD-2007-1290

Malware in sbrugna...

EUVD-2006-7065

Malware in sbrugna...

EUVD-2006-7067

Malware in sbrugna...

EUVD-2006-7064

Malware in sbrugna...

CVE-2007-1293

SQL injection vulnerability in Rigter Portal System RPS 6.2, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the categoria parameter to the top-level URI index.php, possibly related to verdescarga.php...

Sql injection

SQL injection vulnerability in Rigter Portal System RPS 6.2, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the categoria parameter to the top-level URI index.php, possibly related to verdescarga.php...

CVE-2007-1293

CVE-2007-1293 concerns a SQL injection in Rigter Portal System (RPS) 6.2 when magic_quotes_gpc is disabled. The vulnerability allows remote attackers to inject arbitrary SQL commands via the categoria parameter to the top-level URI (index.php), with a possible relation to ver_descarga.php. The NV...

CVE-2007-1293

SQL injection vulnerability in Rigter Portal System RPS 6.2, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the categoria parameter to the top-level URI index.php, possibly related to verdescarga.php...

Rigter Portal System (RPS) 6.2 Remote Blind SQL Injection Exploit

No description provided by source. ? //RPS 6.2 SQL Injection Exploit //http://www.rps-project.com/ //Need magicquotesgpc = Off; //by s0cratex //Contact: s0cratexathotmaildotcom //Salu2: rgod, 0pt1x 'n mechas. errorreporting0; iniset"maxexecutiontime",0; iniset"defaultsockettimeout",5; $host =...

Rigter Portal System (RPS) 6.2 - Blind SQL Injection

Rigter Portal System RPS 6.2 - Blind SQL Injection ? //RPS 6.2 SQL Injection Exploit //http://www.rps-project.com/ //Need magicquotesgpc = Off; //by s0cratex //Contact: s0cratexathotmaildotcom //Salu2: rgod, 0pt1x 'n mechas. errorreporting0; iniset"maxexecutiontime",0;...

CVE-2006-7083

Directory traversal vulnerability in index.php in Rigter Portal System RPS 1.0, 2.0, and 3.0 allows remote attackers to read arbitrary files via ".." sequences in the id parameter...

CVE-2006-7085

Rigter Portal System RPS 1.0, 2.0, and 3.0 allows remote attackers to add arbitrary content and conduct XSS attacks via a direct request to addart.php. NOTE: this issue was originally reported as SQL injection, but this is not likely...

CVE-2006-7082

Rigter Portal System RPS 1.0, 2.0, and 3.0 allows remote attackers to bypass authentication and upload arbitrary files via direct requests to 1 adm/photos/images.php and 2 adm/down/files.php...

CVE-2006-7083

Directory traversal vulnerability in index.php in Rigter Portal System RPS 1.0, 2.0, and 3.0 allows remote attackers to read arbitrary files via ".." sequences in the id parameter...

CVE-2006-7082

Rigter Portal System RPS 1.0, 2.0, and 3.0 allows remote attackers to bypass authentication and upload arbitrary files via direct requests to 1 adm/photos/images.php and 2 adm/down/files.php...

CVE-2006-7085

Rigter Portal System RPS 1.0, 2.0, and 3.0 allows remote attackers to add arbitrary content and conduct XSS attacks via a direct request to addart.php. NOTE: this issue was originally reported as SQL injection, but this is not likely...

CVE-2006-7083

The CVE-2006-7083 entry details a directory traversal flaw in Rigter Portal System (RPS) versions 1.0, 2.0, and 3.0 affecting index.php. An attacker can use ".." sequences in the id parameter to read arbitrary files. The description notes remote attack capability but does not provide exploit code...

CVE-2006-7085

CVE-2006-7085 affects Rigter Portal System (RPS) 1.0, 2.0 and 3.0. A direct request to add_art.php enables remote attackers to add arbitrary content and perform XSS. The entry notes that the issue was originally reported as SQL injection, but that is unlikely. No exploitation details, affected ve...

CVE-2006-7082

Rigter Portal System (RPS) versions 1.0–3.0 are affected by an authentication bypass vulnerability that allows remote attackers to upload arbitrary files via direct requests to adm/photos/images.php and adm/down/files.php. The CVE entry confirms unauthenticated access with potential partial confi...

rps-include.txt

Advisory 13 Title: Multiple Vulnerabilities RPS rigter portal system Author: 0ozeuso0 Arturo Z. Contact: [email protected] Website: www.elitemexico.org Date: 18/07/06 Risk: medium Vendor Url: http://rps.rigtersir.com/ Affected Software: RPS Non Affected: RPS V 4 Info: UPLOAD FILES it allows th...