CVE-2009-3321

SQL injection vulnerability in SaphpLesson 4.3, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the CLIENTIP HTTP header...

CVE-2009-3321

CVE-2009-3321 affects SaphpLesson 4.3 with a SQL injection vulnerability exploitable when magic_quotes_gpc is disabled. An attacker can remotely send a crafted CLIENT_IP HTTP header to execute arbitrary SQL commands. The NVD lists a base score of 6.8 (Medium) with network access, no authenticatio...

SaphpLesson 4.3 - Blind SQL Injection

SaphpLesson 4.3 - Blind SQL Injection !/usr/bin/ruby ============================================= SaphpLesson v4.3 Exploit Blind SQL Injection Vulnerability --------------------------------------------- Date: 21-08-2009 Discovered & written by: Jafer Al Zidjali Email: jaferatscorpionds.com...

SaphpLesson 4.3 SQL Injection

!/usr/bin/ruby ============================================= SaphpLesson v4.3 Exploit Blind SQL Injection Vulnerability --------------------------------------------- Date: 21-08-2009 Discovered & written by: Jafer Al Zidjali Email: jaferatscorpionds.com Website: www.scorpionds.com...

Saphplesson 4.3 Remote Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ================================================== Saphplesson 4.3 Remote Blind SQL Injection Exploit ================================================== !/usr/bin/ruby ============================================= SaphpLesson v4.3 Exploit...

SaphpLesson 4.3 - Blind SQL Injection

!/usr/bin/ruby ============================================= SaphpLesson v4.3 Exploit Blind SQL Injection Vulnerability --------------------------------------------- Date: 21-08-2009 Discovered & written by: Jafer Al Zidjali Email: jaferatscorpionds.com Website: www.scorpionds.com...

Sql injection

SQL injection vulnerability in admin/login.php in SaphpLesson 4.0, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the cpusername parameter, related to an error in the CleanVar function in includes/functions.php...

CVE-2009-2883

SQL injection vulnerability in admin/login.php in SaphpLesson 4.0, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the cpusername parameter, related to an error in the CleanVar function in includes/functions.php...

CVE-2009-2883

An SQL injection vulnerability in SaphpLesson 4.0 (admin/login.php) can be triggered when magic_quotes_gpc is disabled, allowing remote attackers to execute arbitrary SQL via the cp_username parameter. The issue is related to an error in the CleanVar function in includes/functions.php. CVSS v2 ba...

SaphpLesson v4.0 (Auth Bypass) SQL Injection Vulnerability

No description provided by source. ---------------------------------SaphpLesson v4.0 Auth Bypass SQL Injection Vulnerability--------------------------------------- ---------------------------------------------------------------------------------------------------------------- Script : SaphpLesson...

SaphpLesson 4.0 - Authentication Bypass

SaphpLesson 4.0 - Authentication Bypass ---------------------------------SaphpLesson v4.0 Auth Bypass SQL Injection Vulnerability--------------------------------------- ---------------------------------------------------------------------------------------------------------------- Script :...

SaphpLesson 4.0 SQL Injection

---------------------------------SaphpLesson v4.0 Auth Bypass SQL Injection Vulnerability--------------------------------------- ---------------------------------------------------------------------------------------------------------------- Script : SaphpLesson version : 4.0 Language: PHP Site:...

SaphpLesson v4.0 (Auth Bypass) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ========================================================== SaphpLesson v4.0 Auth Bypass SQL Injection Vulnerability ==========================================================...

SaphpLesson 4.0 - Authentication Bypass

---------------------------------SaphpLesson v4.0 Auth Bypass SQL Injection Vulnerability--------------------------------------- ---------------------------------------------------------------------------------------------------------------- Script : SaphpLesson version : 4.0 Language: PHP Site:...

saphplesson30-sql.txt

//////////////////2007///////////////////// //SaphpLesson v3.0 SQL Injection Exploit// ////////////////////////////////////////// Found by:SwEET-DeViL&HaCKeR sUn TeaM AL-GaRNi------------------ Application : SaphpLesson------ version : v3.0----------------- URL : No-----------------------...

SaphpLesson v3.0 SQL Injection Exploit

//////////////////2007///////////////////// //SaphpLesson v3.0 SQL Injection Exploit// ////////////////////////////////////////// Found by:SwEET-DeViL&HaCKeR sUn TeaM AL-GaRNi------------------ Application : SaphpLesson------ version : v3.0----------------- URL : No-----------------------...

SaPHPLesson 2.0 - add.php SQL Injection

SaPHPLesson 2.0 - add.php SQL Injection source: https://www.securityfocus.com/bid/18934/info SaPHPLesson is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A successful exploit cou...

SaPHPLesson 2.0 - 'add.php' SQL Injection

source: https://www.securityfocus.com/bid/18934/info SaPHPLesson is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the...

CVE-2006-3161

SQL injection vulnerability in misc.php in SaphpLesson 1.1 and earlier allows remote attackers to execute arbitrary SQL commands via the action parameter...

CVE-2006-3161

The CVE-2006-3161 entry concerns SaphpLesson 1.1 and earlier. The vulnerability is an SQL injection in misc.php, exploitable via the action parameter, allowing remote attackers to execute arbitrary SQL commands. CVSS 2.0 score is 7.5 (HIGH) with network attack vector and low complexity, no authen...