Ballettin Forum SQL Injection

==================================================================== Exploit Title: Ballettin Forum Multiple SQL Injection Vulnerability Date: 25/07/2010 Author: 3v0 aka evolution Software Link: http://www.ballettin.com Tested on: Windows Xp Pack 3...

phpKF 'forum_duzen.php' SQL注入漏洞

BUGTRAQ ID: 30318 CNCAN ID：CNCAN-2008072203 phpKF是一款基于PHP的WEB应用程序。 phpKF不正确处理用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，可能获得敏感信息或操作数据库。 问题由于'forumduzen.php'脚本对用户提交给'fno'参数缺少过滤，构建恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息或操作数据库。 phpKF 目前没有解决方案提供： http://www.scriptcv.com/phpkf-forum-scripti.html...

CVE-2006-7161: Undefined Security Weakness

SQL injection vulnerability in girisyap.asp in Hazir Site 2.0 allows remote attackers to bypass authentication via the 1 ka class or 2 sifre parameter...

CVE-2006-6298

SQL injection vulnerability in uyegirisislem.asp in Metyus Okul Yonetim Sistemi 1.0 allows remote attackers to execute arbitrary SQL commands via the 1 kullaniciismi and 2 sifre parameters...

CVE-2006-6298: Undefined Security Weakness

SQL injection vulnerability in uyegirisislem.asp in Metyus Okul Yonetim Sistemi 1.0 allows remote attackers to execute arbitrary SQL commands via the 1 kullaniciismi and 2 sifre parameters...

CVE-2006-5217: Undefined Security Weakness

SQL injection vulnerability in girisyap.asp in Emek Portal 2.1 allows remote attackers to execute arbitrary SQL commands by simultaneously injecting into the user name and pass fields in uyegiris.asp, also known as the Kullanici Adi ka and Sifre sifre parameters...

Mini-Nuke<=1.8.2 SQL injection (6)

//mini-nuke board turk have many sql injection founded by Moroccan Security Team //Creetz to: Moroccan Security Team Dr.E-vil,Dr.Erase,H0550N,|ucifer,DaBDouB-MoSiKaR OverclockiX,ki11er ,Dranzelz,Esp!onLeRaVaGe,ameer,www.lezr.com and all muslim morocco 1...