4 matches found
Sql injection
SQL injection vulnerability in tourview.php in ToursManager allows remote attackers to execute arbitrary SQL commands via the tourid parameter...
CVE-2008-6303
SQL injection vulnerability in tourview.php in ToursManager allows remote attackers to execute arbitrary SQL commands via the tourid parameter...
CVE-2008-6303
CVE-2008-6303 describes an SQL injection vulnerability in ToursManager's tourview.php, exploitable via the tourid parameter. The underlying issue is that user-supplied input is used in SQL queries without proper validation or parameterization, enabling remote attackers to execute arbitrary SQL co...
ToursManager - 'tourview.php' Blind SQL Injection
Name:-- ToursManager PhP Script Discovered by:-- XaDoS ContacT m&:-- xadosathotmail.it Site:-- http://www.toursmanager.com ■£XpLoIT: |: http://www.demosite.com/tourview.php?tourid=2%20and%201=1-- true |: http://www.demosite.com/tourview.php?tourid=2%20and%201=0-- false Version: |:...