CVE-2009-4597

The CVE-2009-4597 entry covers SQL injection flaws in PHP Inventory (notably versions around 1.2/1.3.x) in index.php. The vulnerabilities allow SQL commands to be injected through user_id in a user details action, and through user/password fields, enabling unauthorized data access via poorly sani...

PHP Inventory 1.2 - Authentication Bypass

PHP Inventory 1.2 - Authentication Bypass PHP Inventory v1.2 Remote Auth Bypass SQL Injection Vulnerabiity Found By: mrme Download: http://www.phpwares.com/content/php-inventory Tested On: Windows Vista Note: For educational purposes only First of all lets login to admin with:...

Sql injection

Multiple SQL injection vulnerabilities in ITechBids 8.0 allow remote attackers to execute arbitrary SQL commands via the 1 userid parameter to feedback.php, 2 cateid parameter to category.php, 3 id parameter to news.php, and 4 productid parameter to itechd.php. NOTE: the sellersothersitem.php,...

Sql injection

Multiple SQL injection vulnerabilities in Ebay Clone 2009 allow remote attackers to execute arbitrary SQL commands via the 1 userid parameter to feedback.php; and the itemid parameter to 2 viewfullsize.php, 3 classifidead.php, and 4 crosspromoteitems.php...

CVE-2009-3712

Multiple SQL injection vulnerabilities in Ebay Clone 2009 allow remote attackers to execute arbitrary SQL commands via the 1 userid parameter to feedback.php; and the itemid parameter to 2 viewfullsize.php, 3 classifidead.php, and 4 crosspromoteitems.php...

CVE-2009-3358

SQL injection vulnerability in profile.php in Tourism Scripts Adult Portal escort listing allows remote attackers to execute arbitrary SQL commands via the userid parameter...

Sql injection

SQL injection vulnerability in profile.php in Tourism Scripts Adult Portal escort listing allows remote attackers to execute arbitrary SQL commands via the userid parameter...

CVE-2009-3358

SQL injection vulnerability in profile.php in Tourism Scripts Adult Portal escort listing allows remote attackers to execute arbitrary SQL commands via the userid parameter...

Joomla MyTube SQL Injection

!/usr/bin/perl -w --------------------------------------------------------------------------------- joomla component commytube userid Blind SQL Injection Vulnerability --------------------------------------------------------------------------------- Author : Chip D3 Bi0s Group : LatiHackTeam Emai...

Joomla com_mytube (user_id) Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ======================================================= Joomla commytube userid Blind SQL Injection Exploit ======================================================= !/usr/bin/perl -w...

Joomla! Component com_mytube (user_id) 1.0 Beta - Blind SQL Injection

!/usr/bin/perl -w --------------------------------------------------------------------------------- joomla component commytube userid Blind SQL Injection Vulnerability --------------------------------------------------------------------------------- Author : Chip D3 Bi0s Group : LatiHackTeam Emai...

Adult Portal escort listing (user_id) Remote SQL Injection Vulnerability

No description provided by source. Viva IslaM Viva IslaM Remote SQL Injection Vulnerability profile.php userid Adult Portal escort listing http://www.tourismscripts.com/ AuTh0r : Mr.SQL H0ME : WwW.55a.NeT Email : [email protected] -: ExploiteS :-...

Sql injection

Multiple SQL injection vulnerabilities in Model Agency Manager PRO formerly Modeling Agency Content Management Script allow remote attackers to execute arbitrary SQL commands via the userid parameter to 1 view.php, 2 photos.php, and 3 motm.php; and the 4 id parameter to forummessage.php...

Adult Portal escort listing (user_id) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ======================================================================== Adult Portal escort listing userid Remote SQL Injection Vulnerability ======================================================================== Remote SQL Injection...

Adult Portal escort listing - 'user_id' SQL Injection

Viva IslaM Viva IslaM Remote SQL Injection Vulnerability profile.php userid Adult Portal escort listing http://www.tourismscripts.com/ AuTh0r : Mr.SQL H0ME : WwW.55a.NeT Email : [email protected] -: ExploiteS :-...

Model Agency Manager Pro - 'user_id' SQL Injection

☢ ☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢بسم الله الرحمن الرحيم☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢ ☠Tybe:view.php userid Remote SQL Injection Vulnerability ☠Vendor: www.phpmodelagencyscript.com ☠â˜...

Sql injection

Multiple SQL injection vulnerabilities in login.php in The Rat CMS Alpha 2 allow remote attackers to execute arbitrary SQL commands via the 1 userid and 2 password parameter...

JVideo! Component for Joomla! 'user_id' Parameter SQLi

The version of the JVideo! component for Joomla! running on the remote host is affected by a SQL injection vulnerability in the models/user.php script due to improper sanitization of user-supplied input to the 'userid' parameter before using it to construct database queries in the getUsername...

Joomla JVideo 0.3.x SQL Injection

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Joomla Component comjvideo userid SQL-injection Vulnerability ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ + Author : Chip D3 Bi0s + Greetz : d4n!ux + xjeshua + eCORE + Painboy + rayok3nt ...

Joomla! Component JVideo 0.3.x - SQL Injection

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Joomla Component comjvideo userid SQL-injection Vulnerability ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ + Author : Chip D3 Bi0s + Greetz : d4n!ux + xjeshua + eCORE + Painboy + rayok3nt ...