CVE-2007-1899

Multiple SQL injection vulnerabilities in myWebland myBloggie 2.1.6 allow remote attackers to execute arbitrary SQL commands via 1 the userid parameter in a viewuser action to index.php, and allow remote authenticated administrators to execute arbitrary SQL commands via 2 the postid parameter in ...

CVE-2007-1899: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in myWebland myBloggie 2.1.6 allow remote attackers to execute arbitrary SQL commands via 1 the userid parameter in a viewuser action to index.php, and allow remote authenticated administrators to execute arbitrary SQL commands via 2 the postid parameter in ...

PHP-Nuke Platinium 7.6.b.5 - Remote Code Execution

PHP-Nuke Platinium 7.6.b.5 - Remote Code Execution Date: 02/07/08 Note I modified a bit phpsploit for this exploit, because PHP Nuke plays with REQUESTURI var ... Requirements registerglobals=On phpreter phpreter is really easy to use: You can change mode using "mode=", with = sql, php or cmd If...

PHPAuction (profile.php user_id) Remote SQL Injection Vulnerability

No description provided by source. Viva IslaM Viva IslaM Remote SQL Injection Vulnerability PHPAuction profile.php userid AuTh0r : Mr.SQL H0ME : WwW.PaL-HaCkEr.CoM & WwW.ATsDp.CoM Email : [email protected] !! SYRIAN HaCkErS !! Script : PHPAuction site : www.phpauctions.info D0rk1 : allinurl:...

phpauction-sql.txt

Viva IslaM Viva IslaM Remote SQL Injection Vulnerability PHPAuction profile.php userid AuTh0r : Mr.SQL H0ME : WwW.PaL-HaCkEr.CoM & WwW.ATsDp.CoM Email : [email protected] !! SYRIAN HaCkErS !! Script : PHPAuction site : www.phpauctions.info D0rk1 : allinurl: "profile.php?userid" auctionid D0rk2 :...

PHPAuction (profile.php user_id) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications =================================================================== PHPAuction profile.php userid Remote SQL Injection Vulnerability =================================================================== Viva IslaM Viva IslaM Remote SQL...

EQDKP 1.3.2f (user_id) Authentication Bypass (PoC)

No description provided by source. ?php // EQDKP 1.3.2f Authentication Bypass PoC // [email protected] $data'autologinid' = 'x'; $data'userid' = "1' " . "UNION SELECT " . "1, " . // userid "'a', " . // username "'x', " . // userpassword &nbsp...

CVE-2008-2222: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in login.php in EQdkp 1.3.2f allows remote attackers to bypass EQdkp user authentication via the userid parameter...

Sql injection

SQL injection vulnerability in oneday.php in Web Calendar Pro 4.1 and earlier allows remote attackers to execute arbitrary SQL commands via the userid parameter...

CVE-2008-1954: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in oneday.php in Web Calendar Pro 4.1 and earlier allows remote attackers to execute arbitrary SQL commands via the userid parameter...

PHP-Fusion 6.01.14 - Blind SQL Injection

PHP-Fusion 6.01.14 - Blind SQL Injection !/usr/bin/python """ ================================================================================================= / | |\ \ / | / |/ | | |/ \ | | | |||| /| / /...

PHP-Nuke Platinum 7.6.b.5 - dynamic_titles.php SQL Injection

PHP-Nuke Platinum 7.6.b.5 - dynamictitles.php SQL Injection !/usr/bin/perl Inphex use LWP::UserAgent; use LWP::Simple; use IO::Socket; use Switch; PHP-Nuke Platinum , ForumsStandart - magicquotesgpc = OFF , SQL Injection nukeusers Structure: userid name username useremail femail userwebsite...

Fully Modded phpBB - 'kb.php' SQL Injection

Powered by phpBB © 2001, 2006 phpBB Group Modified by Fully Modded phpBB © 2002, 2006 AUTHOR : TurkishWarriorr HOME : http://www.1923turk.org DORKS 1 : allinurl :kb.php?mode=article&k DORKS 2 : article&k= DORKS 3 : "Powered by phpBB © 2001, 2006 phpBB Group" "Modified by Fully Modded phpBB ©...

Sql injection

SQL injection vulnerability in index.php in the PccookBook compccookbook component for Joomla! allows remote attackers to execute arbitrary SQL commands via the userid parameter...

CVE-2008-0844

SQL injection vulnerability in index.php in the PccookBook compccookbook component for Joomla! allows remote attackers to execute arbitrary SQL commands via the userid parameter...

Sql injection

Multiple SQL injection vulnerabilities in the Rapid Recipe comrapidrecipe 1.6.5 and earlier component for Joomla! allow remote attackers to execute arbitrary SQL commands via the 1 userid or 2 categoryid parameter. NOTE: this might overlap CVE-2008-0754...

CVE-2008-0844: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in the PccookBook compccookbook component for Joomla! allows remote attackers to execute arbitrary SQL commands via the userid parameter...

Joomla Component com_pccookbook (user_id) SQL Injection Vulnerability

No description provided by source. joomla SQL Injectioncompccookbook AUTHOR : S@BUN HOME 1 : http://www.milw0rm.com/author/1334 MA陌L : [email protected] DORK 1 : allinurl: compccookbook DORK 2 : allinurl: viewuserrecipes DORK 3 : allinurl: "compccookbook"userid EXPLOIT :...

CVE-2008-0831: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in the Rapid Recipe comrapidrecipe 1.6.5 and earlier component for Joomla! allow remote attackers to execute arbitrary SQL commands via the 1 userid or 2 categoryid parameter. NOTE: this might overlap CVE-2008-0754...

Joomla! Component com_pccookbook - user_id SQL Injection

Joomla! Component compccookbook - userid SQL Injection joomla SQL Injectioncompccookbook AUTHOR : S@BUN HOME 1 : http://www.milw0rm.com/author/1334 MAÄ°L : [email protected] DORK 1 : allinurl: compccookbook DORK 2 : allinurl: viewuserrecipes DORK 3 : allinurl: "compccookbook"useri...