3 matches found
Geeklog <= 1.5.2 - savepreferences()/*blocks[] SQL Injection Exploit
No description provided by source. ?php / Geeklog = 1.5.2 savepreferences/blocks remote sql injection exploit by Nine:Situations:Group::bookoo our site: http://retrogod.altervista.org/ software site: http://www.geeklog.net/ PHP and MySQL version independent vulnerability, see usersettings.php nea...
Geeklog <= 1.5.2 savepreferences()/*blocks[] remote sql injection exploit
?php / Geeklog = 1.5.2 savepreferences/blocks remote sql injection exploit by Nine:Situations:Group::bookoo our site: http://retrogod.altervista.org/ software site: http://www.geeklog.net/ PHP and MySQL version independent vulnerability, see usersettings.php near lines 1467 - 1480: ... if isset...
Geeklog 1.5.2 - 'savepreferences()/*blocks[]' SQL Injection
1 switch $mode case 'saveuser': savepreferences $POST; $display .= saveuser$POST; PLGprofileExtrasSave ; break; case 'savepreferences': savepreferences $POST; $display .= COMrefresh $CONF'siteurl' . '/usersettings.php?mode=preferences&msg=6'; break; ... all the $POST variables are passed to the...