Sql injection

SQL injection vulnerability in search.php in Pre Real Estate Listings allows remote attackers to execute arbitrary SQL commands via the c parameter...

CVE-2008-4179

Multiple cross-site scripting XSS vulnerabilities in NooMS 1.1 allow remote attackers to inject arbitrary web script or HTML via the 1 pageid parameter to smileys.php and the 2 q parameter to search.php...

CVE-2008-4179: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in NooMS 1.1 allow remote attackers to inject arbitrary web script or HTML via the 1 pageid parameter to smileys.php and the 2 q parameter to search.php...

CVE-2008-4177: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in search.php in Pre Real Estate Listings allows remote attackers to execute arbitrary SQL commands via the c parameter...

Pre Real Estate Listings - search.php SQL Injection

Pre Real Estate Listings - search.php SQL Injection Pre Real Estate Listings search.php c Remote SQL Injection Vulnerability url: http://preproject.com/ Author: JosS mail: sys-projectathotmaildotcom site: http://spanish-hackers.com team: Spanish Hackers Team - SHT This was written for educational...

Pre Real Estate Listings (search.php c) SQL Injection Vulnerability

Exploit for unknown platform in category web applications =================================================================== Pre Real Estate Listings search.php c SQL Injection Vulnerability =================================================================== Pre Real Estate Listings search.php c...

Sql injection

Multiple SQL injection vulnerabilities in phpMyRealty PMR 1.0.9 and earlier allow remote attackers to execute arbitrary SQL commands via 1 the id parameter in pages.php and 2 the pricemax parameter in search.php...

CVE-2008-3861

CVE-2008-3861 affects phpMyRealty 1.0.7 and 1.0.9 (and earlier). The vulnerability is multiple SQL injection flaws caused by insufficient input sanitization in user-supplied data, enabling remote attackers to inject SQL via two parameters: id in pages.php and price_max in search.php. OpenVAS entr...

CVE-2008-3861: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in phpMyRealty PMR 1.0.9 and earlier allow remote attackers to execute arbitrary SQL commands via 1 the id parameter in pages.php and 2 the pricemax parameter in search.php...

CVE-2008-3788

Multiple SQL injection vulnerabilities in PICTURESPRO Photo Cart 3.9, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 qtitle, 2 qid, and 3 qyear parameters to a search.php, and the 4 email and 5 password parameters to b login.php...

CVE-2008-3788: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in PICTURESPRO Photo Cart 3.9, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 qtitle, 2 qid, and 3 qyear parameters to a search.php, and the 4 email and 5 password parameters to b login.php...

gallery-xss.txt

. . | / | | \ \ | / / |\ \ \ |/ // / /\ \ / |/ \ / // | / | | / \ /|\ / / / / \ / \ / / / \ | | /\ /\ / \ | \ // est.2007 / / forum.darkc0de.com -d3hydr8 - sinner01 - baltazar - P47r1ck - C1c4Tr1Z - beenu -rsauron - letsgorun - K1u - DON - OutLawz - MAGE -JeTFyrE Author: r45c4l...

Unfixed XSS vulnerability at www.cinezik.org

Security researcher PHPLizardo, has submitted on 16/08/2008 a cross-site-scripting XSS vulnerability affecting www.cinezik.org, which at the time of submission ranked 233663 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/07/2009. It is...

rmsoftminishop-xss.txt

RMSOFT MiniShop module multiple variable XSS Vendor url:http://redmexico.com.mx Advisore:http://lostmon.blogspot.com/2008/08 /rmsoft-minishop-module-multiple.html Vendor notify:no exploit available:yes RMSOFT MiniShop is a E-commerce php/Mysql script module for multiple CMS Systems like...

Unfixed XSS vulnerability at mazuke.com

Security researcher SaMTHG, has submitted on 08/11/2008 a cross-site-scripting XSS vulnerability affecting mazuke.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/09/2009. It is currently unfixed...

CVE-2008-3565

Multiple cross-site scripting XSS vulnerabilities in Meeting Room Booking System MRBS 1.2.6 allow remote attackers to inject arbitrary web script or HTML via the area parameter to 1 day.php, 2 week.php, 3 month.php, 4 search.php, 5 report.php, and 6 help.php. NOTE: the provenance of this...

CVE-2008-3565: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Meeting Room Booking System MRBS 1.2.6 allow remote attackers to inject arbitrary web script or HTML via the area parameter to 1 day.php, 2 week.php, 3 month.php, 4 search.php, 5 report.php, and 6 help.php. NOTE: the provenance of this...

MyBB search.php文件跨站脚本执行漏洞

BUGTRAQ ID: 30401 CVECAN ID: CVE-2008-3334 MyBB是一款流行的Web论坛程序。 MyBB的search.php文件没有正确地验证某些参数便返回给了用户，远程攻击者可以通过向论坛提交恶意请求执行脚本注入或跨站脚本攻击。 MyBB 1.2.x MyBB ---- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.mybboard.net/download/latest...

Cross site scripting

Cross-site scripting XSS vulnerability in MyBB 1.2.x before 1.2.14 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly involving search.php...

CVE-2008-3334

Cross-site scripting XSS vulnerability in MyBB 1.2.x before 1.2.14 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly involving search.php...