421 matches found
CVE-2010-5024
SQL injection vulnerability in manage/adduser.php in CuteSITE CMS 1.2.3 and 1.5.0 allows remote authenticated users, with Read privileges, to execute arbitrary SQL commands via the userid parameter. NOTE: some of these details are obtained from third party information...
Sql injection
SQL injection vulnerability in manage/adduser.php in CuteSITE CMS 1.2.3 and 1.5.0 allows remote authenticated users, with Read privileges, to execute arbitrary SQL commands via the userid parameter. NOTE: some of these details are obtained from third party information...
CVE-2010-5024
SQL injection vulnerability in manage/adduser.php in CuteSITE CMS 1.2.3 and 1.5.0 allows remote authenticated users, with Read privileges, to execute arbitrary SQL commands via the userid parameter. NOTE: some of these details are obtained from third party information...
CVE-2010-5024: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in manage/adduser.php in CuteSITE CMS 1.2.3 and 1.5.0 allows remote authenticated users, with Read privileges, to execute arbitrary SQL commands via the userid parameter. NOTE: some of these details are obtained from third party information...
iGaming CMS 1.5 - Blind SQL Injection
!/usr/bin/env perl =pod iGaming CMS Example: perl exploit.pl http://website.net/iGamingCMS1.5/ 1 Vulnerability: polls.class.php line 10-17 if !empty$REQUEST'id' $poll = $db-Execute" SELECT id,title FROM sppolls WHERE id = '" . $REQUEST'id' . "'"; $result = $db-Execute"SELECT FROM sppollsoptions...
Joomla Jomtube SQL Injection
=============================================================================== Joomla Component comjomtube userid Blind SQL Injection / SQL Injection =============================================================================== Author : SixP4ck3r Email & msn : [email protected] Date : 17...
Joomla Component com_jomtube Blind / SQL Injection Vulnerability
Exploit for php platform in category web applications ================================================================ Joomla Component comjomtube Blind / SQL Injection Vulnerability ================================================================ Author : SixP4ck3r Email & msn : email protected...
Joomla! Component com_jomtube - user_id Blind SQL Injection
Joomla! Component comjomtube - userid Blind SQL Injection =============================================================================== Joomla Component comjomtube userid Blind SQL Injection / SQL Injection =============================================================================== Author :...
CVE-2009-4938: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the JVideo! comjvideo component 0.3.11c Beta and 0.3.x for Joomla! allows remote attackers to execute arbitrary SQL commands via the userid parameter in a user action to index.php...
ECMall 2.2 app/groupbuy.app.php delay injection vulnerability-vulnerability warning-the black bar safety net
ECMall community e-Commerce systemreferred to as ECMallis Shanghai commercial school network Technology Co., Ltd. following the ECShop after the launch of yet another e-Commerce sister product app\groupbuy. app. php:2 6: function index $id = empty$GET'id' ? 0 : $GET'id'; //id not filtered if !$ i...
Uiga Business Portal - 'index.php' SQL Injection
----------------------------Information------------------------------------------------ +Name : Uiga Business Portal = index.php SQL Injection Vulnerability +Autor : Easy Laster +Date : 23.03.2010 +Script : Uiga Business Portal +Download :...
Sql injection
SQL injection vulnerability in profile.php in Mole Group Adult Portal Script allows remote attackers to execute arbitrary SQL commands via the userid parameter...
Code injection
admin/admin.php in Mole Group Sky Hunter Airline Ticket Sale Script and Bus Ticket Script allows remote attackers to change an arbitrary password via a modified userid field...
CVE-2009-4674
admin/admin.php in Mole Group Sky Hunter Airline Ticket Sale Script and Bus Ticket Script allows remote attackers to change an arbitrary password via a modified userid field...
CVE-2009-4673: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in profile.php in Mole Group Adult Portal Script allows remote attackers to execute arbitrary SQL commands via the userid parameter...
CVE-2009-4674: Undefined Security Weakness
admin/admin.php in Mole Group Sky Hunter Airline Ticket Sale Script and Bus Ticket Script allows remote attackers to change an arbitrary password via a modified userid field...
CVE-2010-0753: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the SQL Reports comsqlreport component 1.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the userid parameter to ajax/print.php. NOTE: some of these details are obtained from third party information...
PHPKit 1.6.1 - 'mailer.php' SQL Injection
Phpkit 1.6.1 SQL Injection member.php | | ||| | | | | | -| .'| || | | | -| | | -| | || ||,|||| ||||| ||| ||||| Script: Phpkit 1.6.1 SQL Injection member.php Vulnerabilities SQL Injection Language: PHP Download: this script is for free Founder: ea$y laster Peace to -tmh- ,0qwl ,Crypter ,Dr.ChAoS...
Phpkit 1.6.1 (member.php) Sql Injection Vulnerability
Exploit for unknown platform in category web applications ===================================================== Phpkit 1.6.1 member.php Sql Injection Vulnerability ===================================================== Phpkit 1.6.1 SQL Injection member.php | | ||| | | | | | -| .'| || | | | -| | | ...
CVE-2009-4597
Multiple SQL injection vulnerabilities in index.php in PHP Inventory 1.2 allow 1 remote authenticated users to execute arbitrary SQL commands via the userid parameter in a users details action, and allow remote attackers to execute arbitrary SQL commands via the 2 user username and 3 pass passwor...