73 matches found
Linux Distros Unpatched Vulnerability : CVE-2019-25452
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Dolibarr ERP/CRM 10.0.1 contains an SQL injection vulnerability in the elemid POST parameter of the viewcat.php endpoint that allows unauthenticated attackers t...
CVE-2019-25452
Dolibarr ERP/CRM 10.0.1 contains an SQL injection vulnerability in the elemid POST parameter of the viewcat.php endpoint that allows unauthenticated attackers to execute arbitrary SQL queries. Attackers can submit crafted POST requests with malicious SQL payloads in the elemid parameter to extrac...
CVE-2019-25452
Dolibarr ERP/CRM 10.0.1 is affected by an SQL injection in the elemid POST parameter of viewcat.php. The vulnerability allows unauthenticated attackers to execute arbitrary SQL queries and extract sensitive data, using error-based or time-based blind techniques. Affected component/entry points: D...
Dolibarr ERP/CRM SQL注入漏洞
Dolibarr ERP/CRM is a web-based enterprise resource planning ERP and customer relationship management CRM system developed by the Dolibarr Foundation in France. This system can be used to manage products, inventory, invoices, orders, etc. Version 10.0.1 of Dolibarr ERP/CRM has a SQL injection...
EUVD-2008-0694
Malware in sbrugna...
EUVD-2008-1552
Malware in sbrugna...
EUVD-2008-1356
Malware in sbrugna...
EUVD-2008-0695
Malware in sbrugna...
EUVD-2007-1810
Malware in sbrugna...
EUVD-2005-3947
Malware in sbrugna...
EUVD-2007-1841
Malware in sbrugna...
EUVD-2005-3678
Malware in sbrugna...
EUVD-2007-1809
Malware in sbrugna...
EUVD-2007-1808
Malware in sbrugna...
ITechClassifieds ViewCat.php CatID Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/27574/info iTechClassifieds is prone to an input-validation vulnerability that may be exploited as a cross-site scripting issue or an SQL-injection issue. This issue occurs because the application fails to adequately...
DIY-CMS blog mod SQL Injection Vulnerability
No description provided by source. Exploit Title: DIY-CMS blog mod SQL Injection Author: snup Contact: [email protected] Site: http://e-o-u.org SQL Injection: DORK: inurl:mod.php?mod=blog intext:powered by DIY-CMS inurl:mod.php?mod=blog BUG:...
eXV2 Module bamaGalerie 3.03 - Remote SQL Injection Vulnerability
No description provided by source. eXV2 Module bamaGalerie 3.03 SQL Injection download=http://www.exv2-filecenter.de/modules/mydownloads/singlefile.php?lid=9 AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 MAİL : [email protected] DORKS 1 : allinurl :modules/bamagalerie3...
GeoBlog viewcat.php cat Parameter SQL Injection - Ver2 (CVE-2006-0249)
An SQL injection vulnerability has been reported in BitDamaged geoBlog MOD1.0. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary SQL commands on the affected system...
iTechClassifieds 3.03.057 - SQL Injection
iTechClassifieds 3.03.057 - SQL Injection Exploit Title: iTechClassifieds v3.03.057 - SQL Injection Date: 23/01/2014 Exploit Author: vinicius777 Vendor Homepage: http://itechscripts.com/download.html Software Link: http://itechscripts.com/downloads/downloaditechclassifieds.html Version: 3.03.057 ...
CVE-2011-5137
Multiple SQL injection vulnerabilities in tForum b0.915 allow remote attackers to execute arbitrary SQL commands via the 1 TopicID parameter to viewtopic.php, the 2 BoardID parameter to viewboard.php, or 3 CatID parameter to viewcat.php...