Vastal I-Tech - SQL Injection

IN THE NAME OF GOD Vastal I-Tech SQL Injection Vulnerability Author : HELLBOY Tested on Lunix CVE : N/A Email : [email protected] Dork : inurl:"viewgroup.php?groupid=" Exploit : http://site/viewgroup.php?groupid=SQLI EXAM:...

Sql injection

SQL injection vulnerability in viewgroup.php in QuidaScript BookMarks Favourites Script APB allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-6007

CVE-2008-6007 describes an SQL injection in QuidaScript BookMarks Favourites Script (APB) where the vulnerability exists in view_group.php and is exploitable via the id parameter. The root cause is unsanitized input leading to arbitrary SQL execution, with potential impact including data access o...

CVE-2008-6007: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in viewgroup.php in QuidaScript BookMarks Favourites Script APB allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-3748

Active PHP Bookmarks (APB) versions 1.1.02 and 1.2.06 are affected by a SQL injection in view_group.php, exploitable via the id parameter to allow remote arbitrary SQL execution. The vulnerability is documented with a CVSSv2 base score of 7.5 (HIGH) with network attack vector, no authentication, ...

CVE-2008-3748: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in viewgroup.php in Active PHP Bookmarks APB 1.1.02 and 1.2.06 allows remote attackers to execute arbitrary SQL commands via the id parameter...