Vastal I-Tech - SQL Injection

IN THE NAME OF GOD Vastal I-Tech SQL Injection Vulnerability Author : HELLBOY Tested on Lunix CVE : N/A Email : [email protected] Dork : inurl:"viewgroup.php?groupid=" Exploit : http://site/viewgroup.php?groupid=SQLI EXAM:...

Sql injection

SQL injection vulnerability in viewgroup.php in QuidaScript BookMarks Favourites Script APB allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-6007

CVE-2008-6007 describes an SQL injection in QuidaScript BookMarks Favourites Script (APB) where the vulnerability exists in view_group.php and is exploitable via the id parameter. The root cause is unsanitized input leading to arbitrary SQL execution, with potential impact including data access o...

CVE-2008-3748

Active PHP Bookmarks (APB) versions 1.1.02 and 1.2.06 are affected by a SQL injection in view_group.php, exploitable via the id parameter to allow remote arbitrary SQL execution. The vulnerability is documented with a CVSSv2 base score of 7.5 (HIGH) with network attack vector, no authentication, ...