1299 matches found
Zen Time Tracking 2.2 - Multiple SQL Injections
Zen Time Tracking 2.2 - Multiple SQL Injections source: https://www.securityfocus.com/bid/38153/info Zen Time Tracking is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could all...
CVE-2009-4155
Multiple SQL injection vulnerabilities in Eshopbuilde CMS allow remote attackers to execute arbitrary SQL commands via the sitebid parameter to 1 home-f.asp and 2 opinions-f.asp; 3 sitebid, 4 id, 5 secText, 6 client-ip, and 7 Gid parameters to more-f.asp; 8 sitebid, 9 id, 10 maid, 11 miid, 12...
Sugar CRM 5.5.0.RC2 and 5.2.0j Multiple Remote Vulnerabilities
No description provided by source. Author: Janek Vind 'waraxe' Vulnerable: SugarCRM SugarCRM 5.5.0.RC2 SugarCRM SugarCRM 5.2.0j Product: http://www.sugarcrm.com/crm/ Description: SugarCRM is prone to multiple remote vulnerabilities, including: 1. Multiple SQL-injection vulnerabilities 2. Multiple...
CVE-2009-3439
CVE-2009-3439 involves multiple SQL injection vulnerabilities in OSSIM prior to 2.1.2. Remote authenticated users can execute arbitrary SQL commands via parameters in several PHP scripts: repository_document.php, repository_links.php, repository_editdocument.php (repository/); policy/getpolicy.ph...
Scripteen Free Image Hosting Script Multiple Vulnerabilities
Scripteen Free Image Hosting Script is prone to multiple SQL-injection vulnerabilities and to an authentication-bypass vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
TekBase All-in-One 3.1 Multiple SQL Injection Vulnerabilities
No description provided by source. Author: n3wb0ss Date: 15/06/09 Contact: [email protected] Software: TekBase All-in-One 3.1 Vendor: tekbase.de Example: http://demo.tekbase.de/ Vendor contacted: No Risk: High I found this website on a german board, looking for another script. Looks to me, li...
CVE-2008-6810
CVE-2008-6810 affects Venalsur Booking Centre Booking System for Hotels Group 2.01. The vulnerability is multiple SQL injection in admin/checklogin.php, exploitable via the myusername (username) and password parameters, enabling remote SQL command execution as reported. The issue is documented wi...
MULTIPLE REMOTE SQL INJECTION VULNERABILITIES---MIM:InfiniX v1.2.003--->
-------------------------------------------------------------------------- MULTIPLE REMOTE SQL INJECTION VULNERABILITIES --MIM:InfiniX v1.2.003-- -------------------------------------------------------------------------- CMS INFORMATION: --WEB: http://mim.infinix.it --DOWNLOAD:...
YAP Multiple SQL Injection Vulnerabilities
YAP is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the...
phpMyRealty 1.0.7 - 1.0.9 Multiple SQLi Vulnerabilities - Active Check
phpMyRealty is prone to multiple SQL injection SQLi vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by t...
Beerwin's PHPLinkAdmin 1.0 RFI/SQL Injection Vulnerabilities
No description provided by source. + Beerwin's PHPLinkAdmin 1.0 Remote File Inclusion/SQL Injection + Discovered By SirGod + www.mortal-team.org + www.h4cky0u.org + Download : http://www.downloads.beerwin.com/index.php?p=showdl&dl=16&cat=18 + Remote File Inclusion Direct acces to linkadmin.No aut...
EZ-Blog 1b Delete All Posts / SQL Injection Vulnerabilities
No description provided by source. Salvatore "drosophila" Fresta Application: EZ-Blog http://sourceforge.net/projects/ez-blog/ Version: Beta 1 Bug: Multiple SQL Injection Exploitation: Remote Date: 1 Mar 2009 Discovered by: Salvatore "drosophila" Fresta Author: Salvatore "drosophila" Fresta e-mai...
Joomla! Component Fantasytournament - SQL Injection
Joomla! Component Fantasytournament - SQL Injection Joomla Component Fantasytournament Multiple SQL Injection Vulnerabilities Vulnerability found by: H!tm@N Contact: khghitmanatgmaildotcom Site: www.khg-crew.ws Greetz: boom3rang, KHG, urtan, warning, chs, redc00de - -=Kosova Hackers Group=-...
r.cms v2 Multiple SQL Injection Vulnerabilities
Exploit for unknown platform in category web applications =============================================== r.cms v2 Multiple SQL Injection Vulnerabilities =============================================== r.cms V2 - Multiple SQL Injection Vulnerabilities Vulnerability discovered by: LidlosesAuge...
discforums-sql.txt
Author: !DoktOR! Date found: 30.09.08 Product: Discussion Forums 2k Version: 3.3 URL: http://developer.berlios.de/projects/df2k/ Vulnerability Class: SQL Injection Condition: magicquotesgpc = Off Exploit 1:...
CVE-2008-4094
Multiple SQL injection vulnerabilities in Ruby on Rails before 2.1.1 allow remote attackers to execute arbitrary SQL commands via the 1 :limit and 2 :offset parameters, related to ActiveRecord, ActiveSupport, ActiveResource, ActionPack, and ActionMailer...
Drupal Module Ajax Checklist 5.x-1.0 - Multiple SQL Injections
Drupal Module Ajax Checklist 5.x-1.0 - Multiple SQL Injections source: https://www.securityfocus.com/bid/31384/info The Ajax Checklist module for Drupal is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in SQL queries...
familycon-sql.txt
========================================================================== Family Connections CMS 1.4 Multiple Remote SQL Injection Vulnerabilities ========================================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH...
Kostenloses Linkmanagementscript SQL Injection Vulnerabilities
No description provided by source. ...::::Kostenloses Linkmanagementscript SQL Injection Vulnerabilities ::::... Virangar Security Team www.virangar.net -------- Discoverd By :virangar security teamhadihadi special tnx to:MR.nosrati,black.shadowes,MR.hesy,Zahra & all virangar members & all hacker...
Linkspile - cat_id SQL Injection
Linkspile - catid SQL Injection Remote SQL Injection Vulnerabilities Linkspile link.php Author : HaCkeREgY C0NTACT : [email protected] H^OME : www.PAL-HaCkeR.com & ATSDP.COM Script Name : Linkspile Download : http://www.linkspile.com Price : $399.00 ======= Buy iT :...