CVE-2008-6102

CVE-2008-6102 is a SQL injection vulnerability in Link Trader Script’s ratelink.php, allowing remote attackers to execute arbitrary SQL commands via the lnkid parameter. Documents confirm the vulnerability and impact (remote SQL execution) but do not provide specific affected versions or remediat...

Link Trader (ratelink.php lnkid) Remote SQL Injection Vulnerability

No description provided by source. || | | Link Trader lnkid Remote SQL Injection Vulnerability | | |-------------------- Hussin X -------------------| | | Author: Hussin X | | Home : WwW.IQ-ty.CoM | | email: darkangelg85atYahooDoTcom | | | | | | | | script :...

linktrader-sql.txt

|| | | Link Trader lnkid Remote SQL Injection Vulnerability | | |-------------------- Hussin X -------------------| | | Author: Hussin X | | Home : WwW.IQ-ty.CoM | | email: darkangelg85atYahooDoTcom | | | | | | | | script : http://www.ezonescripts.com/scripts/sls/linktrader.php | | DorK :...

Link Trader - lnkid SQL Injection

Link Trader - lnkid SQL Injection || | | Link Trader lnkid Remote SQL Injection Vulnerability | | |-------------------- Hussin X -------------------| | | Author: Hussin X | | Home : WwW.IQ-ty.CoM | | email: darkangelg85atYahooDoTcom | | | | | | | | script :...

Link Trader - 'lnkid' SQL Injection

|| | | Link Trader lnkid Remote SQL Injection Vulnerability | | |-------------------- Hussin X -------------------| | | Author: Hussin X | | Home : WwW.IQ-ty.CoM | | email: darkangelg85atYahooDoTcom | | | | | | | | script : http://www.ezonescripts.com/scripts/sls/linktrader.php | | DorK :...

Link Trader (ratelink.php lnkid) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications =================================================================== Link Trader ratelink.php lnkid Remote SQL Injection Vulnerability =================================================================== || | | Link Trader lnkid Remote SQL...

Sql injection

SQL injection vulnerability in ad.php in plx Ad Trader 3.2 allows remote attackers to execute arbitrary SQL commands via the adid parameter in a redir action...

CVE-2008-3025

CVE-2008-3025 describes an SQL injection in the PHP file ad.php of the application plx Ad Trader 3.2 . The vulnerability is exploitable through the adid parameter in a redir action, allowing remote attackers to execute arbitrary SQL commands. The associated CVSS v2 vector (AV:N/AC:L/Au:N/C:P/I:P/...

plx Ad Trader 'ad.php' SQL注入漏洞

BUGTRAQ ID: 30046 CNCAN ID：CNCAN-2008070302 plx Ad Trader是一款基于PHP的WEB应用程序。 plx Ad Trader不正确处理用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，可能获得敏感信息或操作数据库。 问题由于'ad.php'脚本对用户提交给'adid'参数缺少过滤，构建恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息或操作数据库。 plx Web Studio Ad Trader 3.2 目前没有解决方案提供： http://plxwebdev.com/script/adtrader/...

plx Ad Trader 3.2 (adid) Remote SQL Injection Vulnerability

No description provided by source. @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ @ @ plx Ad Trader v3.2 SQL Injection Vulnerability @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ @ Author: Hussin X @ @ @ @ Home : www.tryag.cc/cc @ @ @ @ &...

plx Ad Trader 3.2 (adid) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications =========================================================== plx Ad Trader 3.2 adid Remote SQL Injection Vulnerability =========================================================== @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ @ @...

plx Ad Trader 3.2 - adid SQL Injection

plx Ad Trader 3.2 - adid SQL Injection @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ @ @ plx Ad Trader v3.2 SQL Injection Vulnerability @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ @ Author: Hussin X @ @ @ @ Home : www.tryag.cc/cc @ @ @ @ email: darkangelg85atYahooDoTcom ...

plx Ad Trader 3.2 - 'adid' SQL Injection

@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ @ @ plx Ad Trader v3.2 SQL Injection Vulnerability @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ @ Author: Hussin X @ @ @ @ Home : www.tryag.cc/cc @ @ @ @ email: darkangelg85atYahooDoTcom @ @ hussin.xathotmailDoTcom @ @ @...

torrenttrader-sql.txt

SQL Injection leading to authorization bypass in Torrent Trader Classic v1.08 and earlier Discovered by: Charles Vaughn [email protected] Software: http://sourceforge.net/projects/torrenttrader Status: Vendor Notified, updated version available Vulnerability TorrentTrader is a popular torrent...

SQL Injection leading to authorization bypass in Torrent Trader Classic v1.08 and earlier

SQL Injection leading to authorization bypass in Torrent Trader Classic v1.08 and earlier Discovered by: Charles Vaughn [email protected] Software: http://sourceforge.net/projects/torrenttrader Status: Vendor Notified, updated version available Vulnerability TorrentTrader is a popular torrent...

CVE-2008-0688

Cross-site scripting XSS vulnerability in catalog.php in Smartscript Domain Trader 2.0 allows remote attackers to inject arbitrary web script or HTML via the id parameter in a viewcategory action...

CVE-2008-0688

CVE-2008-0688 describes a cross-site scripting (XSS) vulnerability in the Smartscript Domain Trader 2.0 product, specifically in catalog.php. The flaw allows remote attackers to inject arbitrary web script or HTML via the id parameter in a viewcategory action. The connected records confirm the af...

CVE-2008-0688

Cross-site scripting XSS vulnerability in catalog.php in Smartscript Domain Trader 2.0 allows remote attackers to inject arbitrary web script or HTML via the id parameter in a viewcategory action...

Domain Trader v2.0 Xss Vulnerable

title : Domain Trader v2.0 Xss Vulnerable Author : CrackersChild cybermilitan at hotmail dot com Exploit : www.site.com/script/catalog.php?mode=viewcategory&id=scriptalertdocument.cookie/script Dork : Powered by Domain Trader v2.0 - Domain parking software Greetz : www.biyofrm.com &...

Domain Trader 2.0 - catalog.php Cross-Site Scripting

Domain Trader 2.0 - catalog.php Cross-Site Scripting source: https://www.securityfocus.com/bid/27571/info Domain Trader is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input data. An attacker may leverage this issue to execute arbitrary...