BBSGood. Speed Version 4.0 injection vulnerability-vulnerability warning-the black bar safety net

| Version: BBSGood. Speed Version 4.0 Vulnerability file: The UserInfo. asp Vulnerability description: Variable Blogurl unfiltered into an sql statement, leading toSql injectionvulnerability --- Code example: Line 1 7 2 9-1 8 5 3. | case 1 4 if Request. QueryString"save"=1 then if trimRequest...

Directory traversal

Directory traversal vulnerability in config.inc.php in phpAbook 0.8.8b and earlier, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the userInfo cookie...

CVE-2008-4490

Directory traversal vulnerability in config.inc.php in phpAbook 0.8.8b and earlier, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the userInfo cookie...

phpAbook 0.8.8b - cookie Local File Inclusion

phpAbook 0.8.8b - cookie Local File Inclusion phpAbook ... 61: if isset$HTTPCOOKIEVARS"userInfo" && $HTTPCOOKIEVARS"userInfo" != "" $userArray = explode" ", $HTTPCOOKIEVARS"userInfo"; $userName = $userArray0; $userID = $userArray1; $userLang = $userArray2;...

phpAbook 0.8.8b - 'cookie' Local File Inclusion

phpAbook ... 61: if isset$HTTPCOOKIEVARS"userInfo" && $HTTPCOOKIEVARS"userInfo" != "" $userArray = explode" ", $HTTPCOOKIEVARS"userInfo"; $userName = $userArray0; $userID = $userArray1; $userLang = $userArray2; include"include/lang/$userLang/inc.messages.php"; 67: x: INCLUDE exploit:...

Availscript Article Script (view.php v) SQL Injection Vulnerability

No description provided by source. || | | Article Script view.php v Remote SQL Injection Vulnerability | | |---------------------Hussin X----------------------| | | Author: Hussin X | | Home : WwW.IQ-ty.CoM | WwW.TrYaG.CC | | email: darkangelg85atYahooDoTcom | | | | | | | | script :...

Availscript Article Script (view.php v) SQL Injection Vulnerability

Exploit for unknown platform in category web applications =================================================================== Availscript Article Script view.php v SQL Injection Vulnerability =================================================================== || | | Article Script view.php v Remo...

AvailScript Article Script - 'view.php' SQL Injection

|| | | Article Script view.php v Remote SQL Injection Vulnerability | | |---------------------Hussin X----------------------| | | Author: Hussin X | | Home : WwW.IQ-ty.CoM | WwW.TrYaG.CC | | email: darkangelg85atYahooDoTcom | | | | | | | | script : http://www.availscript.com/articlescript.php | |...

CVE-2008-3315

CVE-2008-3315 refers to multiple cross-site scripting (XSS) vulnerabilities in Claroline 1.8.10, exploitable via the query string on numerous files (e.g., announcements/messages.php, lostPassword.php, profile.php in auth/; calendar/myagenda.php; group/group.php; learningPath.; tracking/ ; user/*;...

CVE-2008-2029

Multiple SQL injection vulnerabilities in 1 setupmysql.php and 2 setupoptions.php in miniBB 2.2 and possibly earlier, when registerglobals is enabled, allow remote attackers to execute arbitrary SQL commands via the xtr parameter in a userinfo action to index.php...

Sql injection

Multiple SQL injection vulnerabilities in 1 setupmysql.php and 2 setupoptions.php in miniBB 2.2 and possibly earlier, when registerglobals is enabled, allow remote attackers to execute arbitrary SQL commands via the xtr parameter in a userinfo action to index.php...

CVE-2008-2029

Multiple SQL injection vulnerabilities in 1 setupmysql.php and 2 setupoptions.php in miniBB 2.2 and possibly earlier, when registerglobals is enabled, allow remote attackers to execute arbitrary SQL commands via the xtr parameter in a userinfo action to index.php...

MiniBB 2.2 - Cross-Site Scripting / SQL Injection / Full Path Disclosure

Author: GiReX Homepage: girex.altervista.org Date: 21/04/2008 CMS: miniBB 2.2 and maybe prior Site: minibb.net Bug 1: Full Path Disclosure Bug 2: Cross Site Scripting Bug 3: Remote SQL Injection Need: registerglobals = On --------------------------------------- 21/04/2008 Vendor informed 22/04/20...

Cross site scripting

Cross-site scripting XSS vulnerability in HTTP File Server HFS before 2.2c allows remote attackers to inject arbitrary web script or HTML via the userinfo subcomponent of a URL...

CVE-2008-0410

CVE-2008-0410 affects HFS (HTTP File Server) prior to 2.2c. The vulnerability enables information disclosure by placing an id element in the userinfo portion of a URL used for HTTP Basic Authentication (e.g., %version%). Remote attackers can obtain configuration and usage details from the server,...

CVE-2008-0410

HTTP File Server HFS before 2.2c allows remote attackers to obtain configuration and usage details by using an id element such as %version% in HTTP Basic Authentication instead of a username and password, as demonstrated by placing this id element in the userinfo subcomponent of a URL...

Irola My-Time 3.5 Remote SQL Injection Vulnerability

No description provided by source. Aria-Security Team http://Aria-Security.Net ----------------------------- Original Advisory @ http://aria-security.net/forum/showthread.php?p=1106 Vendor: http://www.irola.com Username/Password Fields can run SQL Queries. Therefore: We get the Tables:...

Aria-Security.net: Irola My-Time v3.5 SQL Injection

Aria-Security Team http://Aria-Security.Net ----------------------------- Original Advisory and more details @ http://aria-security.net/forum/showthread.php?p=1106 Irola My-Time v3.5 http://www.irola.com Username/Password Fields can run SQL Queries. Therefore: We get the Tables: UserInfo.UserID...

Irola My-Time 3.5 Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ==================================================== Irola My-Time 3.5 Remote SQL Injection Vulnerability ==================================================== ----------------------------- Vendor: http://www.irola.com Username/Password...

Irola My-Time 3.5 - SQL Injection

Irola My-Time 3.5 - SQL Injection Aria-Security Team http://Aria-Security.Net ----------------------------- Original Advisory @ http://aria-security.net/forum/showthread.php?p=1106 Vendor: http://www.irola.com Username/Password Fields can run SQL Queries. Therefore: We get the Tables:...