CVE-2012-6529

Multiple SQL injection vulnerabilities in Marinet CMS allow remote attackers to execute arbitrary SQL commands via the id parameter to 1 galleryphoto.php or 2 gallery.php; or the roomid parameter to 3 room.php or 4 room2.php...

Marinet CMS - room.php Blind SQL Injection

Marinet CMS - room.php Blind SQL Injection ==================================================== MARINET CMS room.php = Blind SQL Vulnerability ==================================================== Exploit Title: MARINET CMS room.php = Blind SQL Vulnerability Date: 30 - 09 - 2011 Author: BHG Securi...

Marinet CMS - 'room.php' Blind SQL Injection

==================================================== MARINET CMS room.php = Blind SQL Vulnerability ==================================================== Exploit Title: MARINET CMS room.php = Blind SQL Vulnerability Date: 30 - 09 - 2011 Author: BHG Security Center Software Link:...

MARINET CMS (room.php) <= Blind SQL Vulnerability

Exploit for php platform in category web applications ==================================================== MARINET CMS room.php = Blind SQL Vulnerability ==================================================== Exploit Title: MARINET CMS room.php = Blind SQL Vulnerability Date: 30 - 09 - 2011 Author:...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Academic Web Tools AWT YEKTA 1.4.3.1, and 1.4.2.8 and earlier, allow remote attackers to inject arbitrary web script or HTML via the 1 query string to login.php and the 2 glbsid parameter to hta/htmlarea.js.php, and allow remote authenticated...

MyGallery &quot;Room.php&quot; SQL Injection

=========================================== Discovered By: C.B.B.L CrAzY CrAcKeR ,Breeeeh ,BoNy-m ,LiNuXrOOt =========================================== Example:- /MyGallery/Room.php?id=SQL Injection ===========================================...

CVE-2006-3688

CVE-2006-3688 describes an SQL injection in Room.php of Francisco Charrua Photo-Gallery 1.0, exploitable via the id parameter to execute arbitrary SQL commands. The provided documents do not specify affected product versions beyond 1.0, nor any remediation or mitigations. No exploitation details ...