4 matches found
CVE-2007-1295
SQL injection vulnerability in topictitle.php in AJ Forum 1.0 allows remote attackers to execute arbitrary SQL commands via the tdid parameter...
CVE-2007-1295
CVE-2007-1295: SQL injection in AJ Forum 1.0’s topic_title.php via the td_id parameter allows remote command execution. Affected software: AJ Forum 1.0 (topic_title.php). Root cause: input from td_id is used in SQL without proper sanitization, enabling arbitrary SQL execution. Exploitation detail...
CVE-2007-1295
SQL injection vulnerability in topictitle.php in AJ Forum 1.0 allows remote attackers to execute arbitrary SQL commands via the tdid parameter...
AJ Forum 1.0 - 'topic_title.php' SQL Injection
!/usr/bin/perl Script Name: AJ Forum 1.0 topictitle.php Remote BLIND SQL Injection Exploit Coded by : ajann Author : ajann Contact : : S.Page : http://www.ajsquare.com Dork : "/subcat.php?cateid=" $$ : 250.00 USD .. : ajann,Turkey use IO::Socket; if@ARGV : "; $dir = ; chop $dir; if $dir = /exit/...