EUVD-2010-1078

Malware in sbrugna...

Rostermain <= 1.1 (Auth Bypass) SQL Injection Vulnerability

No description provided by source. + Rostermain = 1.1 Auth Bypass SQL Injection Vulnerability + Discovered by cr4wl3r cr4wl3r!linuxmail.org + Download : http://scripts.ringsworld.com/games-and-entertainment/rostermain/ + Vuln Code : index.php if $POST'userid' && $POST'password' // if the user has...

CVE-2010-1046

Multiple SQL injection vulnerabilities in index.php in Rostermain 1.1 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 userid username and 2 password parameters...

Sql injection

Multiple SQL injection vulnerabilities in index.php in Rostermain 1.1 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 userid username and 2 password parameters...

CVE-2010-1046

CVE-2010-1046 affects Rostermain 1.1 and earlier, where multiple SQL injection vulnerabilities exist in index.php. The underlying issue is improper input handling in the (1) userid (username) and (2) password parameters, enabling remote attackers to inject and execute arbitrary SQL commands. The ...

CVE-2010-1046

Multiple SQL injection vulnerabilities in index.php in Rostermain 1.1 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 userid username and 2 password parameters...

Rostermain 1.1 SQL Injection

Rostermain + Download : http://scripts.ringsworld.com/games-and-entertainment/rostermain/ + Vuln Code : index.php if $POST'userid' && $POST'password' // if the user has just tried to log in $logquery = "select from users " ."where username='$userid' " ." and passwd='$password' "; + PoC : username...

Rostermain 1.1 - Authentication Bypass

Rostermain 1.1 - Authentication Bypass + Rostermain + Download : http://scripts.ringsworld.com/games-and-entertainment/rostermain/ + Vuln Code : index.php if $POST'userid' && $POST'password' // if the user has just tried to log in $logquery = "select from users " ."where username='$userid' " ." a...

Rostermain <= 1.1 (Auth Bypass) SQL Injection Vulnerability

Exploit for unknown platform in category web applications =========================================================== Rostermain = 1.1 Auth Bypass SQL Injection Vulnerability =========================================================== + Rostermain = 1.1 Auth Bypass SQL Injection Vulnerability +...

Rostermain 1.1 - Authentication Bypass

Rostermain + Download : http://scripts.ringsworld.com/games-and-entertainment/rostermain/ + Vuln Code : index.php if $POST'userid' && $POST'password' // if the user has just tried to log in $logquery = "select from users " ."where username='$userid' " ." and passwd='$password' "; + PoC : username...