CVE-2007-1606: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in w-Agora Web-Agora allow remote attackers to inject arbitrary web script or HTML via 1 the showuser parameter to profile.php, the 2 searchforum or 3 searchuser parameter to search.php, or 4 the userid parameter to changepassword.php...

PHPKIT 1.6.1R2 - search_user SQL Injection

PHPKIT 1.6.1R2 - searchuser SQL Injection !/usr/bin/perl use IO::Socket; print q ----------------------------------------------- PHPKit 1.6.1 exploit by x23 phcn.ws geek-network.de use: phpkit161.pl server dir vicid sample: $ perl phpkit161.pl localhost /phpkit/ 1...

PHPKIT 1.6.1R2 - 'search_user' SQL Injection

!/usr/bin/perl use IO::Socket; print q ----------------------------------------------- PHPKit 1.6.1 exploit by x23 phcn.ws geek-network.de use: phpkit161.pl server dir vicid sample: $ perl phpkit161.pl localhost /phpkit/ 1 ----------------------------------------------- ; $webpage = $ARGV0;...

CVE-2006-5236

SQL injection vulnerability in search.php in 4images 1.7.x allows remote authenticated users to execute arbitrary SQL commands via the searchuser parameter...

CVE-2006-5236: Undefined Security Weakness

SQL injection vulnerability in search.php in 4images 1.7.x allows remote authenticated users to execute arbitrary SQL commands via the searchuser parameter...