Ballettin Forum SQL Injection

==================================================================== Exploit Title: Ballettin Forum Multiple SQL Injection Vulnerability Date: 25/07/2010 Author: 3v0 aka evolution Software Link: http://www.ballettin.com Tested on: Windows Xp Pack 3...

phpKF 'forum_duzen.php' SQL注入漏洞

BUGTRAQ ID: 30318 CNCAN ID：CNCAN-2008072203 phpKF是一款基于PHP的WEB应用程序。 phpKF不正确处理用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，可能获得敏感信息或操作数据库。 问题由于'forumduzen.php'脚本对用户提交给'fno'参数缺少过滤，构建恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息或操作数据库。 phpKF 目前没有解决方案提供： http://www.scriptcv.com/phpkf-forum-scripti.html...

CVE-2006-6298

SQL injection vulnerability in uyegirisislem.asp in Metyus Okul Yonetim Sistemi 1.0 allows remote attackers to execute arbitrary SQL commands via the 1 kullaniciismi and 2 sifre parameters...

Mini-Nuke<=1.8.2 SQL injection (6)

//mini-nuke board turk have many sql injection founded by Moroccan Security Team //Creetz to: Moroccan Security Team Dr.E-vil,Dr.Erase,H0550N,|ucifer,DaBDouB-MoSiKaR OverclockiX,ki11er ,Dranzelz,Esp!onLeRaVaGe,ameer,www.lezr.com and all muslim morocco 1...