47 matches found
CVE-2007-1618
SQL injection vulnerability in index.php in ScriptMagix FAQ Builder 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the catid parameter...
CVE-2007-1615
CVE-2007-1615 describes an SQL injection in the PHP file index.php of ScriptMagix Jokes 2.0 and earlier. The vulnerability allows a remote attacker to inject arbitrary SQL commands through the catid parameter. This is supported by multiple sources in the connected set (e.g., NVD entry with the sa...
CVE-2007-1616
CVE-2007-1616 affects ScriptMagix Lyrics 2.0 and earlier. The vulnerability is a SQL injection in index.php, exploitable via the recid parameter, enabling remote attackers to execute arbitrary SQL commands. The connected documents confirm the affected component and impact (remote code execution t...
CVE-2007-1617
The CVE-2007-1617 entry describes a SQL injection vulnerability in ScriptMagix Recipes 2.0 and earlier, where the index.php script is vulnerable via the catid parameter. The underlying issue is improper handling of user-supplied input, allowing remote attackers to construct and execute arbitrary ...
CVE-2007-1619
CVE-2007-1619 affects ScriptMagix Photo Rating 2.0 and earlier, with a vulnerability in viewcomments.php that allows remote attackers to inject SQL via the phid parameter. The underlying flaw is an SQL injection in the handling of phid, enabling arbitrary SQL commands (impacting confidentiality, ...
CVE-2007-1618
ScriptMagix FAQ Builder 2.0 (and earlier) is affected by an SQL injection in index.php via the catid parameter. The root cause is improper handling of user-supplied data in the SQL query, allowing remote attackers to execute arbitrary SQL commands. Affected product/version set explicitly includes...
CVE-2007-1616
SQL injection vulnerability in index.php in ScriptMagix Lyrics 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the recid parameter...
ScriptMagix Lyrics <= 2.0 (index.php recid) SQL Injection Exploit
No description provided by source. !/usr/bin/perl Script Name: ScriptMagix Lyrics = 2.0 index.php recid Remote Blind SQL Injection Exploit Coded by : ajann Author : ajann Contact : : S.Page : http://www.scriptmagix.com $$ : 35$ .. : ajann,Turkey use IO::Socket; if@ARGV 1 print "...
ScriptMagix Photo Rating ViewComments.PHP SQL注入漏洞
ScriptMagix Photo Rating是一款基于PHP的WEB应用程序。 ScriptMagix Photo Rating不正确过滤用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，可获得敏感信息。 问题是'ViewComments.PHP'脚本对用户提交的WEB参数缺少过滤，提交恶意SQL代码作为参数数据，可导致更改原来的SQL逻辑，获得敏感信息。 ScriptMagix Photo Rating 2.0 目前没有解决方案提供： http://www.scriptmagix.com/index.php?cmd=2&id=4 !/usr/bin/perl Script...
scriptmagix-sql.txt
!/usr/bin/perl Script Name: ScriptMagix Lyrics : "; $dir = ; chop $dir; if $dir = /exit/ print "-- Exploit FailedYou Are Exited \n"; exit;...
ScriptMagix Photo Rating <= 2.0 Remote SQL Injection Exploit
No description provided by source. !/usr/bin/perl Script Name: ScriptMagix Photo Rating = 2.0 viewcomments.php Remote Blind SQL Injection Exploit Coded by : ajann Author : ajann Contact : : S.Page : http://www.scriptmagix.com $$ : 75$ .. : ajann,Turkey use IO::Socket; if@ARGV 1 print "...
ScriptMagix FAQ Builder <= 2.0 (index.php) Remote SQL Injection Exploit
No description provided by source. !/usr/bin/perl Script Name: ScriptMagix FAQ Builder = 2.0 index.php Remote Blind SQL Injection Exploit Coded by : ajann Author : ajann Contact : : S.Page : http://www.scriptmagix.com $$ : 50$ .. : ajann,Turkey use IO::Socket; if@ARGV 1 print "...
ScriptMagix Jokes <= 2.0 (index.php catid) Remote SQL Injection Exploit
No description provided by source. !/usr/bin/perl Script Name: ScriptMagix Jokes = 2.0 index.php catid Remote Blind SQL Injection Exploit Coded by : ajann Author : ajann Contact : : S.Page : http://www.scriptmagix.com $$ : 35$ .. : ajann,Turkey use IO::Socket; if@ARGV 1 print "...
ScriptMagix Lyrics 2.0 - 'index.php?recid' SQL Injection
!/usr/bin/perl Script Name: ScriptMagix Lyrics : "; $dir = ; chop $dir; if $dir = /exit/ print "-- Exploit FailedYou Are Exited \n"; exit; if $dir = /// else print "-- Exploit FailedNo DIR \n"; exit; $target =...
ScriptMagix Lyrics 2.0 - index.php?recid SQL Injection
ScriptMagix Lyrics 2.0 - index.php?recid SQL Injection !/usr/bin/perl Script Name: ScriptMagix Lyrics : "; $dir = ; chop $dir; if $dir = /exit/ print "-- Exploit FailedYou Are Exited \n"; exit; if $dir = /// else print "-- Exploit FailedNo DIR \n"; exit; $target =...
ScriptMagix Lyrics <= 2.0 (index.php recid) SQL Injection Exploit
Exploit for unknown platform in category web applications ================================================================= ScriptMagix Lyrics : "; $dir = ; chop $dir; if $dir = /exit/ print "-- Exploit FailedYou Are Exited \n"; exit; if $dir = /// else print "-- Exploit FailedNo DIR \n"; exit;...
ScriptMagix FAQ Builder 2.0 - index.php SQL Injection
ScriptMagix FAQ Builder 2.0 - index.php SQL Injection !/usr/bin/perl Script Name: ScriptMagix FAQ Builder : "; $dir = ; chop $dir; if $dir = /exit/ print "-- Exploit FailedYou Are Exited \n"; exit; if $dir = /// else print "-- Exploit FailedNo DIR \n"; exit; $target =...
ScriptMagix Jokes <= 2.0 (index.php catid) Remote SQL Injection Exploit
Exploit for unknown platform in category web applications ======================================================================= ScriptMagix Jokes : "; $dir = ; chop $dir; if $dir = /exit/ print "-- Exploit FailedYou Are Exited \n"; exit; if $dir = /// else print "-- Exploit FailedNo DIR \n";...
ScriptMagix Photo Rating <= 2.0 Remote SQL Injection Exploit
Exploit for unknown platform in category web applications ============================================================ ScriptMagix Photo Rating : "; $dir = ; chop $dir; if $dir = /exit/ print "-- Exploit FailedYou Are Exited \n"; exit; if $dir = /// else print "-- Exploit FailedNo DIR \n"; exit;...
ScriptMagix FAQ Builder 2.0 - 'index.php' SQL Injection
!/usr/bin/perl Script Name: ScriptMagix FAQ Builder : "; $dir = ; chop $dir; if $dir = /exit/ print "-- Exploit FailedYou Are Exited \n"; exit; if $dir = /// else print "-- Exploit FailedNo DIR \n"; exit; $target =...