1306 matches found
PHPKIT SQL Injection, XSS
Author: Steve Date: November 22, 2004 Affected Software:PHP KIT Software Version: 1.6.03 - 1.6.1 Software URL: http://www.phpkit.de Attack: SQL Injection, allowing people to manipulate the query into pulling data. XSS What is PHPKIT: PHPKIT is a modular developed Homepage Software which can simpl...
bBlog rss.php p Parameter SQL Injection
The remote server runs a version of bBlog, a blogging system written in PHP and released under the GPL, which is as old as or older than version 0.7.4. The remote version of this software is affected by a SQL injection attack in the script 'rss.php'. This issue is due to a failure of the...
vBulletin authorize.php x_invoice_num Parameter SQL Injection
According to its banner, the remote version of vBulletin is vulnerable to a SQL injection issue. It is reported that versions 3.0.0 through to 3.0.3 are prone to this issue. An attacker may exploit this flaw to gain the control of the remote database. %NASLMINLEVEL 70300 C Tenable Network Securit...
PHP-Nuke SQL Injection Edit/Save Message(s) Bug
Exploit for unknown platform in category web applications =============================================== PHP-Nuke SQL Injection Edit/Save Messages Bug =============================================== !/usr/bin/perl use LWP; $log = "poskomenphpnukesavemsg.txt"; $Agent = "Mbahmubangga/1.0"; $proxy ...
MyBB < 1.2.13 SQL Injection
Binary data 4573.prm...
XMB < 1.8 SP1 member.php SQL Injection
Binary data 1546.prm...
cacti -- SQL injection
Fernando Quintero reports that Cacti 0.8.5a suffers from a SQL injection attack where an attacker can change the password for any Cacti user. This attack is not possible if the PHP option magicquotesgpc is set to On, which is the default for PHP in FreeBSD...
phpBB < 2.0.9 Multiple Vulnerabilities
The remote host is running a version of phpBB older than 2.0.9. There is a flaw in the remote software that may allow anyone to inject arbitrary SQL commands, which may in turn be used to gain administrative access on the remote host or to obtain the MD5 hash of the password of any user. One...
Cactusoft CactuShop 5.0/5.1 - SQL Injection
source: https://www.securityfocus.com/bid/10019/info Reportedly CactuShop is prone to a remote SQL injection vulnerability. This issue is due to a failure to properly sanitize user-supplied URI input before using it to craft an SQL query. As a result of this, a malicious user may influence databa...
PHP-Nuke 6.x - Category SQL Injection
PHP-Nuke 6.x - Category SQL Injection source: https://www.securityfocus.com/bid/9630/info It has been reported that PHPNuke may prone to a SQL injection vulnerability, due to insufficient sanitization user-supplied input. The problem is reported to exist in the $category variable contained within...
osCommerce 2.2 - products_id SQL Injection
osCommerce 2.2 - productsid SQL Injection source: https://www.securityfocus.com/bid/9275/info It has been reported that one of the scripts included with osCommerce fails to validate user-supplied input, rendering it vulnerable to a SQL injection attack. It has been reported that an attacker may...
AutoRank PHP < 2.0.4 - SQL Injection (PoC)
AutoRank PHP SQL Injection Vendor: JMB Software Product: AutoRank PHP Version: = 2.0.4 Website: http://www.jmbsoft.com/ BID: 9251 Description: The description as taken from the Autorank website "AutoRank PHP is our next generation toplist software, written completely in PHP and backed by a MySQL...
osCommerce 2.2 - SQL Injection
osCommerce 2.2 - SQL Injection !/usr/bin/perl source: https://www.securityfocus.com/bid/9211/info It has been reported that one of the scripts included with osCommerce fails to validate user-supplied input, rendering it vulnerable to a SQL injection attack. The script in question is used to verif...
Oracle PORTAL_DEMO.ORG_CHART SQL Injection
It is possible to access a demo PORTALDEMO.ORGCHART script on the remote host. Access to these pages should be restricted because it may be possible to abuse this demo for SQL Injection attacks. Additional components of the Portal have been reported as vulnerable to SQL injection attacks but Ness...
GLSA: teapop (200309-18)
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - - - --------------------------------------------------------------------- GENTOO LINUX SECURITY ANNOUNCEMENT 200309-18 - - - --------------------------------------------------------------------- PACKAGE : teapop SUMMARY : sql...
myPHPNuke 1.8.8 - auth.inc.php SQL Injection
myPHPNuke 1.8.8 - auth.inc.php SQL Injection source: https://www.securityfocus.com/bid/8663/info It has been reported that myPHPNuke is prone to a SQL injection vulnerability that may allow a remote attacker to inject malicious SQL syntax into database queries. The issue may exist in the...
ProFTPd 1.2.9 RC1 - 'mod_sql' SQL Injection
!/usr/bin/perl ProFTPD 1.2.9 rc1 modsql SQL Injection remote Exploit Spaine - 2003 use IO::Socket; if@ARGC 1=Alternate query\n\n"; exit0; ; $server = $ARGV0; $query = $ARGV1; $remote = IO::Socket::INET-newProto="tcp",PeerAddr=$server,PeerPort="21",Reuse=1 or die "Can't connect. \n"; ifdefined$lin...
IISProtect 2.12.2 - Web Administration Interface SQL Injection
IISProtect 2.12.2 - Web Administration Interface SQL Injection source: https://www.securityfocus.com/bid/7675/info The IISProtect web administration interface does not properly sanitize user input. This could allow for SQL injection attacks on a Microsoft IIS server running IISProtect. Successful...
OpenBB 1.0/1.1 - 'member.php' SQL Injection
source: https://www.securityfocus.com/bid/7405/info It has been reported that OpenBB does not properly check input passed via the 'member.php' script. Because of this, an attacker may be able to inject arbitrary commands to the database in the context of the bulletin board software. The...
CVE-2002-0802
The multibyte support in PostgreSQL 6.5.x with SQLASCII encoding consumes an extra character when processing a character that cannot be converted, which could remove an escape character from the query and make the application subject to SQL injection attacks...