70 matches found
CVE-2006-1720
Cross-site scripting XSS vulnerability in search.php in SaphpLesson 3.0 allows remote attackers to inject arbitrary web script or HTML via the Word parameter. NOTE: it is possible that this issue is resultant from SQL injection...
Sql injection
SQL injection vulnerability in print.php in SaphpLesson 2.0 allows remote attackers to execute arbitrary SQL commands via the lessid parameter...
CVE-2006-1420
SQL injection vulnerability in print.php in SaphpLesson 2.0 allows remote attackers to execute arbitrary SQL commands via the lessid parameter...
CVE-2006-1420
The CVE-2006-1420 entry describes an SQL injection vulnerability in the PHP application component print.php of SaphpLesson 2.0 . The flaw allows remote attackers to execute arbitrary SQL commands through the lessid parameter. The available connected sources confirm the affected module and input v...
CVE-2006-1420
SQL injection vulnerability in print.php in SaphpLesson 2.0 allows remote attackers to execute arbitrary SQL commands via the lessid parameter...
SaPHPLesson 2.0 - print.php SQL Injection
SaPHPLesson 2.0 - print.php SQL Injection source: https://www.securityfocus.com/bid/17239/info SaphpLesson is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A successful exploit...
SaPHPLesson 2.0 - 'print.php' SQL Injection
source: https://www.securityfocus.com/bid/17239/info SaphpLesson is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the...
saphplesson.pl.txt
!/usr/bin/perl For password http://www.example.com/path/showcat.php?forumid=-1%20union%20select%20ModPassword%20from%20modretor For username http://www.example.com/path/showcat.php?forumid=-1%20union%20select%20ModName%20from%20modretor sent in by SnIpErSA selfar2002athotmail.com ported by str0ke...
SaphpLesson 2.0 (forumid) Remote SQL Injection Exploit
No description provided by source. !/usr/bin/perl For password http://www.example.com/path/showcat.php?forumid=-1%20union%20select%20ModPassword%20from%20modretor For username http://www.example.com/path/showcat.php?forumid=-1%20union%20select%20ModName%20from%20modretor sent in by SnIpErSA...
