21 matches found
EUVD-2008-6755
Malware in sbrugna...
Vastal Rapid Script SQL Injection
Exploit Title: Vastal Rapid Script SqL Injection Vulnerability Date: 22/01/2012 Author: Lazmania61 | Bug Researchers Demo : http://www.vastal.com/rapid/ Tested on: Windows 7 http://www.vastal.com/rapid/viewnews.php?id=2 http://www.vastal.com/rapid/viewnews.php?id=2a...
Sql injection
SQL injection vulnerability in viewnews.php in Vastal I-Tech MMORPG Zone allows remote attackers to execute arbitrary SQL commands via the newsid parameter. NOTE: the gameid vector is already covered by CVE-2008-4460...
CVE-2009-3505
SQL injection vulnerability in viewnews.php in Vastal I-Tech MMORPG Zone allows remote attackers to execute arbitrary SQL commands via the newsid parameter. NOTE: the gameid vector is already covered by CVE-2008-4460...
CVE-2009-3505
The CVE-2009-3505 entry documents a SQL injection vulnerability in view_news.php of the Vastal I-Tech MMORPG Zone, exploitable via the news_id parameter. The underlying issue is improper handling of user-supplied input in a SQL query, enabling remote attackers to execute arbitrary SQL commands. T...
Share Zone SQL Injection
x========================================================================================================================================x | AntiSecuritydotorg |...
CVE-2008-6795
SQL injection vulnerability in viewnews.php in nicLOR Vibro-School-CMS allows remote attackers to execute arbitrary SQL commands via the nID parameter...
Sql injection
SQL injection vulnerability in viewnews.php in nicLOR Vibro-School-CMS allows remote attackers to execute arbitrary SQL commands via the nID parameter...
CVE-2008-6795
SQL injection vulnerability in viewnews.php in nicLOR Vibro-School-CMS allows remote attackers to execute arbitrary SQL commands via the nID parameter...
Vibro-School-CMS (nID) Remote SQL injection Vulnerability
No description provided by source. ! ! ! OOOO O OOOOOOOOO ! !O O O O O ! !O O O ! !O OOOO OOOO OOOOOO OOOO OOO OO O OOOO OO OO OOOO ! !O OOO OOO O O O O OO O O O O OO O O O ! !O OO OO O O OOOOOO O O O O O O OOOOOO ! !O O OOOO O O O O O O O O O O O ! ! OOOO OO OOOOOO OOOO OOOOOO OOOOOOOOO OOOO OOO...
vibrocms-sql.txt
/ ------------------------------------------------------- Vibro-CMS Multiple Remote SQL Injection Vulnerabilities ------------------------------------------------------- Discovered By StAkeRathotmaildotit http://www.niclor.net/prodotti/Vibro-CMS...
Sql injection
SQL injection vulnerability in viewnews.php in Vastal I-Tech Share Zone allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2008-4463
SQL injection vulnerability in viewnews.php in Vastal I-Tech Jobs Zone allows remote attackers to execute arbitrary SQL commands via the newsid parameter...
CVE-2008-4462
CVE-2008-4462 affects the Vastal I-Tech Visa Zone web application, specifically a SQL injection in the view_news.php component via the news_id parameter. The underlying cause is improper handling of input leading to arbitrary SQL execution by remote attackers, with potential partial integrity/con...
CVE-2008-4463
CVE-2008-4463: SQL injection in view_news.php of Vastal I-Tech Jobs Zone, exploitable via the news_id parameter. Remote attackers could alter queries and potentially access/modify data. Affected: view_news.php; root cause: unsanitized input leading to SQL injection. CVSS v2 score 7.5 (HIGH) with ...
CVE-2008-4468
The CVE-2008-4468 vulnerability is a SQL injection in view_news.php of Vastal I-Tech Share Zone. The id parameter allows remote attackers to execute arbitrary SQL commands, with potential partial impact on confidentiality, integrity, and availability (CVSS2 base score 7.5, NETWORK, LOW complexity...
Vastal I-Tech Jobs Zone - 'news_id' SQL Injection
Vastal I-Tech Jobs Zone SQL Injection Vulnerability Author : Stack Script Home Page : http://www.vastal.com/jobs-zone-classifieds-script.html Demo : http://www.vastal.com/jobs/ Exploit:...
Sql injection
Multiple SQL injection vulnerabilities in Buddy Zone 1.5 and earlier allow remote attackers to execute arbitrary SQL commands via 1 the newsid parameter to viewnews.php, 2 the catid parameter to viewevents.php, or 3 the memberid parameter to videogallery.php...
CVE-2007-3526
Multiple SQL injection vulnerabilities in Buddy Zone 1.5 and earlier allow remote attackers to execute arbitrary SQL commands via 1 the newsid parameter to viewnews.php, 2 the catid parameter to viewevents.php, or 3 the memberid parameter to videogallery.php...
CVE-2007-3526
Multiple SQL injection vulnerabilities in Buddy Zone 1.5 and earlier allow remote attackers to execute arbitrary SQL commands via 1 the newsid parameter to viewnews.php, 2 the catid parameter to viewevents.php, or 3 the memberid parameter to videogallery.php...