Uiga Personal Portal - index.php view SQL Injection

Uiga Personal Portal - index.php view SQL Injection Exploit Title: Uiga Personal Portal index.php view SQL Injection Vulnerability Date: 27-4-2010 Author: 41.w4r10r Software Link : http://www.scriptdevelopers.net/download/uigapersonalportal.zip Version: Web Application Tested on: Apcahe/Unix CVE ...

Uiga Personal Portal index.php (view) SQL Injection

Exploit for php platform in category web applications ================================================================= Uiga Personal Portal index.php view SQL Injection Vulnerability ================================================================= Exploit Title: Uiga Personal Portal index.php...

Sql injection

Multiple SQL injection vulnerabilities in admin/adminlogin.php in Uiga Fan Club 1.0 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 adminname and 2 adminpassword parameters...

Sql injection

SQL injection vulnerability in index.php in Uiga Fan Club, as downloaded on 20100310, allows remote attackers to execute arbitrary SQL commands via the id parameter in a photos action...

CVE-2010-1364

SQL injection vulnerability in index.php in Uiga Personal Portal, as downloaded on 20100301, allows remote attackers to execute arbitrary SQL commands via the id parameter in a photos action. NOTE: some of these details are obtained from third party information...

CVE-2010-1365

SQL injection vulnerability in index.php in Uiga Fan Club, as downloaded on 20100310, allows remote attackers to execute arbitrary SQL commands via the id parameter in a photos action...

Sql injection

SQL injection vulnerability in index.php in Uiga Personal Portal, as downloaded on 20100301, allows remote attackers to execute arbitrary SQL commands via the id parameter in a photos action. NOTE: some of these details are obtained from third party information...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in admin/adminlogin.php in Uiga Fan Club, as downloaded on 20100310, allow remote attackers to inject arbitrary web script or HTML via the 1 adminname and 2 adminpassword parameters. NOTE: the provenance of this information is unknown; the details...

CVE-2010-1364

The CVE-2010-1364 entry describes a SQL injection vulnerability in the Uiga Personal Portal’s index.php, exploitable via the id parameter in the photos action. The underlying issue is likely improper input handling/sanitization allowing arbitrary SQL execution by remote attackers. Affected softwa...

CVE-2010-1366

Multiple SQL injection vulnerabilities in admin/adminlogin.php in Uiga Fan Club 1.0 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 adminname and 2 adminpassword parameters...

CVE-2010-1367

Multiple cross-site scripting XSS vulnerabilities in admin/adminlogin.php in Uiga Fan Club, as downloaded on 20100310, allow remote attackers to inject arbitrary web script or HTML via the 1 adminname and 2 adminpassword parameters. NOTE: the provenance of this information is unknown; the details...

CVE-2010-1364

SQL injection vulnerability in index.php in Uiga Personal Portal, as downloaded on 20100301, allows remote attackers to execute arbitrary SQL commands via the id parameter in a photos action. NOTE: some of these details are obtained from third party information...

CVE-2010-1365

Affected software: Uiga Fan Club (index.php). Vulnerability: SQL injection in the photos action, exploited via the id parameter of index.php. Root cause/impact: Improper handling of the id parameter enables arbitrary SQL commands (partial confidentiality/integrity/availability impact per CVSS). C...

CVE-2010-1367

CVE-2010-1367 describes multiple cross-site scripting (XSS) vulnerabilities in the admin/admin_login.php component of Uiga Fan Club, allowing remote attackers to inject arbitrary web script or HTML via the admin_name or admin_password parameters. The issue affects the login handling logic, enabli...

CVE-2010-1366

CVE-2010-1366 describes multiple SQL injection vulnerabilities in the admin_login.php of Uiga Fan Club 1.0 and earlier. The issue allows remote attackers to execute arbitrary SQL commands through the (1) admin_name and (2) admin_password parameters, with the affected component being the login han...

CVE-2010-1365

SQL injection vulnerability in index.php in Uiga Fan Club, as downloaded on 20100310, allows remote attackers to execute arbitrary SQL commands via the id parameter in a photos action...

Uiga Proxy - Remote File Inclusion

coded by ahmadbady //=========================================================================== // Topic : uigaproxy // Bug type : remote file include // Advisory : //=========================================================================== // Author : ItSecTeam // Email : [email protected] //...

Uiga Proxy - Remote File Inclusion

Uiga Proxy - Remote File Inclusion coded by ahmadbady //=========================================================================== // Topic : uigaproxy // Bug type : remote file include // Advisory : //=========================================================================== // Author :...

Cross site scripting

Cross-site scripting XSS vulnerability in blog/index.php in Uiga Business Portal allows remote attackers to inject arbitrary web script or HTML via the textcomment parameter aka the Comment Box in a noentryid action. NOTE: some of these details are obtained from third party information...

CVE-2010-1048

Cross-site scripting XSS vulnerability in blog/index.php in Uiga Business Portal allows remote attackers to inject arbitrary web script or HTML via the textcomment parameter aka the Comment Box in a noentryid action. NOTE: some of these details are obtained from third party information...