CVE-2006-2050

SQL injection vulnerability in dcboard.cgi in DCScripts DCForumLite 3.0 allows remote attackers to execute arbitrary SQL commands via the az parameter...

photokorn 1.53 , 1.542 << Sql

photokorn 1.53 , 1.542 Sql example : http://www.Site.com/Path/index.php?action=showgal&cat=Sql http://www.Site.com/Path/index.php?action=showpic&cat=1&pic=Sql http://www.Site.com/Path/postcard.php?action=view&id=Sql http://www.Site.com/Path/index.php?action=showgal&cat=5&page=Sql...

CVE-2006-0517

Multiple SQL injection vulnerabilities in formulaires/inc-formulaireforum.php3 in SPIP 1.8.2-e and earlier and 1.9 Alpha 2 5539 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 idforum, 2 idarticle, or 3 idbreve parameters to forum.php3; 4 unspecified vectors related...

phpx_359_xpl.txt

PhpX login bypass - remote command/code execution software: site: http://www.phpx.org/ description: "PHPX is a constantly evolving and changing Content Management System CMS.." vulnerable code in auth.inc.php at lines 22-26: ... if !isset$POSTusername header"Location: login.php"; $password =...

[Full-disclosure] phpWebSite 0.10.1 Full SQL Injection

TITLE: ===== phpWebSite 0.10.1 Full SQL Injection SOFTWARE: ========== phpWebSite 0.10.1 Full INFO: ===== phpWebSite provides a complete web site content management system. DESCRIPTION: ============ phpWebSite 0.10.1 full is vulnerable to an sql injection attack. Here is an example:...

PHPNews news.php prevnext Parameter SQL Injection

The remote host is running PHPNews, an open source news application written in PHP. The installed version of PHPNews is prone to a SQL injection attack due to its failure to sanitize user-supplied input via the 'prevnext' parameter of the 'news.php' script. An attacker can exploit this flaw to...

phpbb2013SQL.txt

heres a update of the paper: phpBB 2.0.13 = downloads.php Mod SQL injection www.batznet.com Discussion: -------------------- This exploit makes it possible to insert SQL Code through downloads.php Bug: -------------------- http://www.phpbb.de/downloads.php?cat=batz Spits out an error msg: Could n...

squirrelSQL.txt

This is a multi-part message in MIME format. ------=NextPart000008201C534CE.223E4220 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Dcrab 's Security Advisory http://icis.digitalparadox.org/dcrab...

Nuke BookMarks 0.6 - Marks.php SQL Injection

Nuke BookMarks 0.6 - Marks.php SQL Injection source: https://www.securityfocus.com/bid/12908/info Nuke Bookmarks is prone to an SQL injection vulnerability. This vulnerability could permit remote attackers to pass malicious input to database queries, resulting in modification of query logic or...

SimpGB guestbook.php quote Parameter SQL Injection

The remote host is running SimpGB, a web-based guestbook application written in PHP. The version of SimpGB installed on the remote host fails to sanitize user input to the 'quote' parameter of the 'guestbook.php' script before using it in SQL queries. An unauthenticated, remote attacker can...

phpMyFAQ < 1.6.0 SQL Injection (deprecated)

Binary data 2675.prm...

Typo3 < 1.4.2 cmw_linklist SQL Injection

Binary data 2668.prm...

WebCalendar login.php webcalendar_session Cookie SQL Injection

The remote version of WebCalendar contains a SQL injection vulnerability that may allow an attacker to execute arbitrary SQL statements against the remote database. An attacker may be able to leverage this issue to, for example, delete arbitrary database tables. %NASLMINLEVEL 70300 C Tenable...

mercuryboard.1.1.1.txt

little late posting this /str0ke Exploit: http://www.site.com/mercuryboard/index.php?a=post&s=reply&t=1&qu=10000%20UNION%20SELECT%20userpassword,username%20from%20mbusers%20where%20usergroup%20=%201%20limit%201/...

WebCalendar 0.9.45 - SQL Injection

WebCalendar 0.9.45 - SQL Injection source: https://www.securityfocus.com/bid/12581/info WebCalendar is affected by an SQL injection vulnerability. This issue exists because the application fails to properly sanitize user-supplied input before using it in SQL queries. Successful exploitation could...

CVE-2005-0302

SQL injection vulnerability in default.asp in BackOffice Lite 6.0 and 6.01 allows remote attackers to execute arbitrary SQL commands via the referer field in the HTTP header...

CMScore - SQL Injection

CMScore - SQL Injection /==========================================/ // GHC - CMS CORE - ADVISORY // Product: CMS Core // URL: http://chipmunk-scripts.com/scripts/cmscore.php // VULNERABILITY CLASS: SQL injection /==========================================/ exploit Log in with username...

WordPress 1.2.x SQL Injection Advisory

Module: wp-admin/link-manager.php Bug Type: SQL-Injection Example: http://wordpress-site.org/wp-admin/link-manager.php?linkid=3133720UNION20SELECT20ID 20as20linkid,userlogin20AS20linkurl,userpass20AS20linkname,NU LL,NULL,NULL, NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL20FROM20wpusers20WHERE...

CVE-2004-1113

SQL injection vulnerability in SQLgrey Postfix greylisting service before 1.2.0 allows remote attackers to execute arbitrary SQL commands via the 1 sender or 2 recipient e-mail addresses...

phpnews.txt

SQL Injection vulnerability in PHPNews 11/25/2004 Description: A vulnerability has been reported in PHPNews, which can be exploited by malicious people to conduct SQL injection attacks Input passed to the "mid" parameter in "sendtofriendphp" is not properly sanitised before being used in a SQL...