CVE-2006-1720

SaphpLesson 3.0 is affected by an XSS in search.php via the Word parameter. The issue may stem from SQL injection, per the CVE description. Detailing: vulnerable component is search.php (Word param in SaphpLesson 3.0), root cause is unsanitized input leading to script/HTML injection. Impact per s...

Sql injection

SQL injection vulnerability in print.php in SaphpLesson 2.0 allows remote attackers to execute arbitrary SQL commands via the lessid parameter...

CVE-2006-1420

SQL injection vulnerability in print.php in SaphpLesson 2.0 allows remote attackers to execute arbitrary SQL commands via the lessid parameter...

CVE-2006-1420

The CVE-2006-1420 entry describes an SQL injection vulnerability in the PHP application component print.php of SaphpLesson 2.0 . The flaw allows remote attackers to execute arbitrary SQL commands through the lessid parameter. The available connected sources confirm the affected module and input v...

CVE-2006-1420

SQL injection vulnerability in print.php in SaphpLesson 2.0 allows remote attackers to execute arbitrary SQL commands via the lessid parameter...

SaPHPLesson 2.0 - print.php SQL Injection

SaPHPLesson 2.0 - print.php SQL Injection source: https://www.securityfocus.com/bid/17239/info SaphpLesson is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A successful exploit...

SaPHPLesson 2.0 - 'print.php' SQL Injection

source: https://www.securityfocus.com/bid/17239/info SaphpLesson is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the...

saphplesson.pl.txt

!/usr/bin/perl For password http://www.example.com/path/showcat.php?forumid=-1%20union%20select%20ModPassword%20from%20modretor For username http://www.example.com/path/showcat.php?forumid=-1%20union%20select%20ModName%20from%20modretor sent in by SnIpErSA selfar2002athotmail.com ported by str0ke...

SaphpLesson 2.0 (forumid) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications...

SaphpLesson 2.0 (forumid) Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl For password http://www.example.com/path/showcat.php?forumid=-1%20union%20select%20ModPassword%20from%20modretor For username http://www.example.com/path/showcat.php?forumid=-1%20union%20select%20ModName%20from%20modretor sent in by SnIpErSA...