photocart-sql.txt

Author: !DoktOR! Date found: 18.08.08 Product: PhotoCart Version: 3.9 возможно и более ранние версии Type: Photography Shopping Cart URL: www.picturespro.com Vulnerability Class: SQL Injection /installdir/search.php Vuln code: PHP: if$REQUEST'searchby' == "qtitle" $galwhere'where' = "WHERE...

CVE-2007-6518

Multiple SQL injection vulnerabilities in search.php in WoltLab Burning Board wBB Lite 1.0.2 pl3e allow remote attackers to execute arbitrary SQL commands via the 1 showposts, 2 sortby, and 3 sortorder parameters...

CVE-2007-6472

Multiple SQL injection vulnerabilities in phpMyRealty PMR 1.0.9 allow 1 remote attackers to execute arbitrary SQL commands via the type parameter to search.php and 2 remote authenticated administrators to execute arbitrary SQL commands via the listingupdateddays parameter to admin/findlistings.ph...

PT-2006-5814 · Openconcept · Openconcept Back-End Cms

Name of the Vulnerable Software and Affected Versions: OpenConcept Back-End version 0.4.5 Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the includes path parameter in several PHP files, including "admin/index.php", "Facts.php", and "search.php"...

HRG005.txt

HRG - Hackerlounge Research Group Release: HRG005 Monday 03/01/05 Forumwav1 The author can't be held responsible for any damage done by a reader. You have your own resonsibility Please use this document like it's meant to. Vulnerable: Forumwav1 any version --- General information: Forumwa is a...