Community CMS 0.5 SQL Injection

Salvatore "drosophila" Fresta + Application: Community CMS + Version: 0.5 + Website: http://sourceforge.net/projects/communitycms/ + Bugs: A Multiple SQL Injection + Exploitation: Remote + Dork: intext:"Powered by Community CMS" + Date: 30 Mar 2009 + Discovered by: Salvatore "drosophila" Fresta +...

SurfMyTV Script 1.0 (view.php id) SQL Injection Vulnerability

No description provided by source. 0x01 Informations: Name : Media Entertainment Script 1.0 Download : http://www.hotscripts.com/listings/jump/download/89424/ Vulnerability : Sql Injection To Lfi Author : x0r Contact : [email protected] Notes : Proud To Be Italian Greetz : // 0x02 Bug: Bugged...

SurfMyTV Script 1.0 - 'view.php?id' SQL Injection

0x01 Informations: Name : Media Entertainment Script 1.0 Download : http://www.hotscripts.com/listings/jump/download/89424/ Vulnerability : Sql Injection To Lfi Author : x0r Contact : [email protected] Notes : Proud To Be Italian Greetz : // 0x02 Bug: Bugged file is /path/view.php code $id =...

SurfMyTV Script 1.0 - view.php?id SQL Injection

SurfMyTV Script 1.0 - view.php?id SQL Injection 0x01 Informations: Name : Media Entertainment Script 1.0 Download : http://www.hotscripts.com/listings/jump/download/89424/ Vulnerability : Sql Injection To Lfi Author : x0r Contact : [email protected] Notes : Proud To Be Italian Greetz : // 0x02...

Sql injection

SQL injection vulnerability in view.php in Butterfly Organizer 2.0.0 and 2.0.1 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-6328: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in view.php in Butterfly Organizer 2.0.0 and 2.0.1 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-6311: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in view.php in Butterfly Organizer 2.0.1 allows remote attackers to execute arbitrary SQL commands via the mytable parameter. NOTE: the id vector is covered by another CVE name...

Sql injection

SQL injection vulnerability in view.php in E-topbiz AdManager 4 allows remote attackers to execute arbitrary SQL commands via the group parameter...

CVE-2008-6261

SQL injection vulnerability in view.php in E-topbiz AdManager 4 allows remote attackers to execute arbitrary SQL commands via the group parameter...

CVE-2008-6261

SQL injection vulnerability in view.php in E-topbiz AdManager 4 allows remote attackers to execute arbitrary SQL commands via the group parameter...

CVE-2008-6261

CVE-2008-6261 corresponds to an SQL injection vulnerability in view.php of E-topbiz AdManager 4, exploitable via the group parameter to execute arbitrary SQL commands. The issue is documented across multiple sources (NVD, CVE listings, and related references) with a consistent description, but th...

CVE-2008-6261: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in view.php in E-topbiz AdManager 4 allows remote attackers to execute arbitrary SQL commands via the group parameter...

Graugon Gallery 1.0 (XSS/SQL/Cookie Bypass) Remote Vulnerabilities

No description provided by source. 0x01 Informations: Name : Graugon Gallery 1.0 Download : http://www.hotscripts.com/jump.php?listingid=87617&jumptype=1 Vulnerability : Sql Injection/ Insecure Cookie Handling/XSS Author : x0r Contact : [email protected] Notes : Proud to be Italian 0x02 Bug:...

Graugon Gallery 1.0 XSS / SQL Injection

0x01 Informations: Name : Graugon Gallery 1.0 Download : http://www.hotscripts.com/jump.php?listingid=87617&jumptype=1 Vulnerability : Sql Injection/ Insecure Cookie Handling/XSS Author : x0r Contact : [email protected] Notes : Proud to be Italian 0x02 Bug: Bugged file is /path/admin.php Code...

GRBoard 1.8 - Multiple Remote File Inclusions

GRBoard 1.8 Remote File Inclusion Vulnerability bY [email protected] / GRBoard VERSION 1.8 is bulletin board system of Korea. It is freely available for all platforms that supports PHP and MySQL. But I find Remote File Inclusion vulnerability. Here is the details: / TEST ON VERSION GRBoard 1.8...

Sql injection

SQL injection vulnerability in view.php in AvailScript Article Script allows remote attackers to execute arbitrary SQL commands via the v parameter...

CVE-2008-6037

CVE-2008-6037 describes an SQL injection in the AvailScript Article Script, specifically in the file/view component view.php, exploitable via the vulnerable parameter v. The root cause is insufficient input validation/sanitization allowing an attacker to inject SQL commands, enabling an attacker ...

CVE-2008-6037: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in view.php in AvailScript Article Script allows remote attackers to execute arbitrary SQL commands via the v parameter...

Butterfly Organizer 2.0.1 (view.php id) SQL Injection Vulnerability

No description provided by source. 0x01 Informations: Name : Butterfly Organizer 2.0.1 Sql Injection Download : http://www.hotscripts.com/jump.php?listingid=72677&jumptype=1 Vulnerability : Remote Sql Injection Author : Osirys Contact : osirysatlivedotit Notes : Proud to be Italian : Same bug of...

Butterfly ORGanizer 2.0.1 - 'id' SQL Injection

0x01 Informations: Name : Butterfly Organizer 2.0.1 Sql Injection Download : http://www.hotscripts.com/jump.php?listingid=72677&jumptype=1 Vulnerability : Remote Sql Injection Author : Osirys Contact : osirysatlivedotit Notes : Proud to be Italian : Same bug of the previous version:...