22 matches found
Webspell 4 (Auth Bypass) SQL Injection Vulnerability
Exploit for unknown platform in category web applications ==================================================== Webspell 4 Auth Bypass SQL Injection Vulnerability ==================================================== Webspell Login Bypass Found by: h0yt3r Checklogin.php Line 60: setcookie"wsauth",...
Particle Gallery 1.0.1 - SQL Injection
!/usr/bin/php -q -d shortopentag=on setvar"COMMENTID", ""; if $GET"editcomment" "" $sql = "SELECT FROM " . $dbprefix . "comments WHERE commentid = " . dbSecure$GET"editcomment"; $cme = $db-execute$sql; if $usr-Access 1 || $SESSION"userid" == $cme-fields"userid" // allow user to edit the comment...