Sql injection

SQL injection vulnerability in vsresource.php in Arantius Vice Stats 0.5b and 1.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter...

CVE-2006-2972

CVE-2006-2972 concerns Arantius Vice Stats (versions 0.5b and 1.0). The vulnerability is a SQL injection in vs_resource.php that lets remote attackers execute arbitrary SQL commands via the ID parameter. This is a persistent risk to data integrity and confidentiality for affected installations, a...

vicestatsSQL.txt

=================================== DISCOVERED BY: CrAzY CrAcKeR Site:www.alshmokh.com I want to thank my friend:- nono225-mHOn-rageh-LoverHacker-Breeeeh BoNym-Rootshill-LiNuXrOOt-SauDiVirUs =================================== Example:- /vsresource.php?ID=SQL ===================================...

CVE-2006-2972: Undefined Security Weakness

SQL injection vulnerability in vsresource.php in Arantius Vice Stats 0.5b and 1.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter...