CVE-2007-1618

SQL injection vulnerability in index.php in ScriptMagix FAQ Builder 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the catid parameter...

CVE-2007-1619

CVE-2007-1619 affects ScriptMagix Photo Rating 2.0 and earlier, with a vulnerability in viewcomments.php that allows remote attackers to inject SQL via the phid parameter. The underlying flaw is an SQL injection in the handling of phid, enabling arbitrary SQL commands (impacting confidentiality, ...

CVE-2007-1616

SQL injection vulnerability in index.php in ScriptMagix Lyrics 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the recid parameter...

CVE-2007-1618

ScriptMagix FAQ Builder 2.0 (and earlier) is affected by an SQL injection in index.php via the catid parameter. The root cause is improper handling of user-supplied data in the SQL query, allowing remote attackers to execute arbitrary SQL commands. Affected product/version set explicitly includes...

CVE-2007-1617

The CVE-2007-1617 entry describes a SQL injection vulnerability in ScriptMagix Recipes 2.0 and earlier, where the index.php script is vulnerable via the catid parameter. The underlying issue is improper handling of user-supplied input, allowing remote attackers to construct and execute arbitrary ...

CVE-2007-1615

CVE-2007-1615 describes an SQL injection in the PHP file index.php of ScriptMagix Jokes 2.0 and earlier. The vulnerability allows a remote attacker to inject arbitrary SQL commands through the catid parameter. This is supported by multiple sources in the connected set (e.g., NVD entry with the sa...

CVE-2007-1615

SQL injection vulnerability in index.php in ScriptMagix Jokes 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the catid parameter...

ScriptMagix Lyrics <= 2.0 (index.php recid) SQL Injection Exploit

No description provided by source. !/usr/bin/perl Script Name: ScriptMagix Lyrics = 2.0 index.php recid Remote Blind SQL Injection Exploit Coded by : ajann Author : ajann Contact : : S.Page : http://www.scriptmagix.com $$ : 35$ .. : ajann,Turkey use IO::Socket; if@ARGV 1 print "...

ScriptMagix Photo Rating ViewComments.PHP SQL注入漏洞

ScriptMagix Photo Rating是一款基于PHP的WEB应用程序。 ScriptMagix Photo Rating不正确过滤用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，可获得敏感信息。 问题是'ViewComments.PHP'脚本对用户提交的WEB参数缺少过滤，提交恶意SQL代码作为参数数据，可导致更改原来的SQL逻辑，获得敏感信息。 ScriptMagix Photo Rating 2.0 目前没有解决方案提供： http://www.scriptmagix.com/index.php?cmd=2&id=4 !/usr/bin/perl Script...

scriptmagix-sql.txt

!/usr/bin/perl Script Name: ScriptMagix Lyrics : "; $dir = ; chop $dir; if $dir = /exit/ print "-- Exploit FailedYou Are Exited \n"; exit;...

ScriptMagix Jokes <= 2.0 (index.php catid) Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl Script Name: ScriptMagix Jokes = 2.0 index.php catid Remote Blind SQL Injection Exploit Coded by : ajann Author : ajann Contact : : S.Page : http://www.scriptmagix.com $$ : 35$ .. : ajann,Turkey use IO::Socket; if@ARGV 1 print "...

ScriptMagix FAQ Builder <= 2.0 (index.php) Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl Script Name: ScriptMagix FAQ Builder = 2.0 index.php Remote Blind SQL Injection Exploit Coded by : ajann Author : ajann Contact : : S.Page : http://www.scriptmagix.com $$ : 50$ .. : ajann,Turkey use IO::Socket; if@ARGV 1 print "...

ScriptMagix Lyrics <= 2.0 (index.php recid) SQL Injection Exploit

Exploit for unknown platform in category web applications ================================================================= ScriptMagix Lyrics : "; $dir = ; chop $dir; if $dir = /exit/ print "-- Exploit FailedYou Are Exited \n"; exit; if $dir = /// else print "-- Exploit FailedNo DIR \n"; exit;...

ScriptMagix Lyrics 2.0 - index.php?recid SQL Injection

ScriptMagix Lyrics 2.0 - index.php?recid SQL Injection !/usr/bin/perl Script Name: ScriptMagix Lyrics : "; $dir = ; chop $dir; if $dir = /exit/ print "-- Exploit FailedYou Are Exited \n"; exit; if $dir = /// else print "-- Exploit FailedNo DIR \n"; exit; $target =...

ScriptMagix Lyrics 2.0 - &#039;index.php?recid&#039; SQL Injection

!/usr/bin/perl Script Name: ScriptMagix Lyrics : "; $dir = ; chop $dir; if $dir = /exit/ print "-- Exploit FailedYou Are Exited \n"; exit; if $dir = /// else print "-- Exploit FailedNo DIR \n"; exit; $target =...

ScriptMagix Photo Rating &lt;= 2.0 Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl Script Name: ScriptMagix Photo Rating = 2.0 viewcomments.php Remote Blind SQL Injection Exploit Coded by : ajann Author : ajann Contact : : S.Page : http://www.scriptmagix.com $$ : 75$ .. : ajann,Turkey use IO::Socket; if@ARGV 1 print "...

ScriptMagix Jokes <= 2.0 (index.php catid) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ======================================================================= ScriptMagix Jokes : "; $dir = ; chop $dir; if $dir = /exit/ print "-- Exploit FailedYou Are Exited \n"; exit; if $dir = /// else print "-- Exploit FailedNo DIR \n";...

ScriptMagix Photo Rating 2.0 - SQL Injection

ScriptMagix Photo Rating 2.0 - SQL Injection !/usr/bin/perl Script Name: ScriptMagix Photo Rating : "; $dir = ; chop $dir; if $dir = /exit/ print "-- Exploit FailedYou Are Exited \n"; exit; if $dir = /// else print "-- Exploit FailedNo DIR \n"; exit; $target =...

ScriptMagix Photo Rating <= 2.0 Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ============================================================ ScriptMagix Photo Rating : "; $dir = ; chop $dir; if $dir = /exit/ print "-- Exploit FailedYou Are Exited \n"; exit; if $dir = /// else print "-- Exploit FailedNo DIR \n"; exit;...

ScriptMagix Recipes 2.0 - index.php?catid SQL Injection

ScriptMagix Recipes 2.0 - index.php?catid SQL Injection !/usr/bin/perl Script Name: ScriptMagix Recipes : "; $dir = ; chop $dir; if $dir = /exit/ print "-- Exploit FailedYou Are Exited \n"; exit; if $dir = /// else print "-- Exploit FailedNo DIR \n"; exit; $target =...