52 matches found
CVE-2007-1619
SQL injection vulnerability in viewcomments.php in ScriptMagix Photo Rating 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the phid parameter...
CVE-2007-1616
SQL injection vulnerability in index.php in ScriptMagix Lyrics 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the recid parameter...
CVE-2007-1615: Undefined Security Weakness
SQL injection vulnerability in index.php in ScriptMagix Jokes 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the catid parameter...
CVE-2007-1616: Undefined Security Weakness
SQL injection vulnerability in index.php in ScriptMagix Lyrics 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the recid parameter...
CVE-2007-1617
The CVE-2007-1617 entry describes a SQL injection vulnerability in ScriptMagix Recipes 2.0 and earlier, where the index.php script is vulnerable via the catid parameter. The underlying issue is improper handling of user-supplied input, allowing remote attackers to construct and execute arbitrary ...
CVE-2007-1616
CVE-2007-1616 affects ScriptMagix Lyrics 2.0 and earlier. The vulnerability is a SQL injection in index.php, exploitable via the recid parameter, enabling remote attackers to execute arbitrary SQL commands. The connected documents confirm the affected component and impact (remote code execution t...
CVE-2007-1619
CVE-2007-1619 affects ScriptMagix Photo Rating 2.0 and earlier, with a vulnerability in viewcomments.php that allows remote attackers to inject SQL via the phid parameter. The underlying flaw is an SQL injection in the handling of phid, enabling arbitrary SQL commands (impacting confidentiality, ...
CVE-2007-1618
SQL injection vulnerability in index.php in ScriptMagix FAQ Builder 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the catid parameter...
CVE-2007-1618: Undefined Security Weakness
SQL injection vulnerability in index.php in ScriptMagix FAQ Builder 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the catid parameter...
CVE-2007-1618
ScriptMagix FAQ Builder 2.0 (and earlier) is affected by an SQL injection in index.php via the catid parameter. The root cause is improper handling of user-supplied data in the SQL query, allowing remote attackers to execute arbitrary SQL commands. Affected product/version set explicitly includes...
CVE-2007-1619: Undefined Security Weakness
SQL injection vulnerability in viewcomments.php in ScriptMagix Photo Rating 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the phid parameter...
CVE-2007-1617: Undefined Security Weakness
SQL injection vulnerability in index.php in ScriptMagix Recipes 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the catid parameter...
ScriptMagix Photo Rating ViewComments.PHP SQL注入漏洞
ScriptMagix Photo Rating是一款基于PHP的WEB应用程序。 ScriptMagix Photo Rating不正确过滤用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，可获得敏感信息。 问题是'ViewComments.PHP'脚本对用户提交的WEB参数缺少过滤，提交恶意SQL代码作为参数数据，可导致更改原来的SQL逻辑，获得敏感信息。 ScriptMagix Photo Rating 2.0 目前没有解决方案提供： http://www.scriptmagix.com/index.php?cmd=2&id=4 !/usr/bin/perl Script...
ScriptMagix Lyrics <= 2.0 (index.php recid) SQL Injection Exploit
No description provided by source. !/usr/bin/perl Script Name: ScriptMagix Lyrics = 2.0 index.php recid Remote Blind SQL Injection Exploit Coded by : ajann Author : ajann Contact : : S.Page : http://www.scriptmagix.com $$ : 35$ .. : ajann,Turkey use IO::Socket; if@ARGV 1 print "...
scriptmagix-sql.txt
!/usr/bin/perl Script Name: ScriptMagix Lyrics : "; $dir = ; chop $dir; if $dir = /exit/ print "-- Exploit FailedYou Are Exited \n"; exit;...
ScriptMagix Jokes <= 2.0 (index.php catid) Remote SQL Injection Exploit
No description provided by source. !/usr/bin/perl Script Name: ScriptMagix Jokes = 2.0 index.php catid Remote Blind SQL Injection Exploit Coded by : ajann Author : ajann Contact : : S.Page : http://www.scriptmagix.com $$ : 35$ .. : ajann,Turkey use IO::Socket; if@ARGV 1 print "...
ScriptMagix FAQ Builder <= 2.0 (index.php) Remote SQL Injection Exploit
No description provided by source. !/usr/bin/perl Script Name: ScriptMagix FAQ Builder = 2.0 index.php Remote Blind SQL Injection Exploit Coded by : ajann Author : ajann Contact : : S.Page : http://www.scriptmagix.com $$ : 50$ .. : ajann,Turkey use IO::Socket; if@ARGV 1 print "...
ScriptMagix Lyrics <= 2.0 (index.php recid) SQL Injection Exploit
Exploit for unknown platform in category web applications ================================================================= ScriptMagix Lyrics : "; $dir = ; chop $dir; if $dir = /exit/ print "-- Exploit FailedYou Are Exited \n"; exit; if $dir = /// else print "-- Exploit FailedNo DIR \n"; exit;...
ScriptMagix Lyrics 2.0 - 'index.php?recid' SQL Injection
!/usr/bin/perl Script Name: ScriptMagix Lyrics : "; $dir = ; chop $dir; if $dir = /exit/ print "-- Exploit FailedYou Are Exited \n"; exit; if $dir = /// else print "-- Exploit FailedNo DIR \n"; exit; $target =...
ScriptMagix Photo Rating <= 2.0 Remote SQL Injection Exploit
No description provided by source. !/usr/bin/perl Script Name: ScriptMagix Photo Rating = 2.0 viewcomments.php Remote Blind SQL Injection Exploit Coded by : ajann Author : ajann Contact : : S.Page : http://www.scriptmagix.com $$ : 75$ .. : ajann,Turkey use IO::Socket; if@ARGV 1 print "...