SourceWorkshop Web directory script 'index.php' SQL注入漏洞

BUGTRAQ ID: 30941 CNCAN ID：CNCAN-2008090204 SourceWorkshop Web directory script是一款基于PHP的WEB应用程序。 SourceWorkshop Web directory script不正确处理用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，可能获得敏感信息或操作数据库。 问题由于'index.php'脚本对用户提交给WEB参数缺少过滤，构建恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息或操作数据库。 Sourceworkshop Web directory script 1.5....

FreeBSD Ports: squid

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Web Directory Script 1.5.3 (site) SQL Injection Vulnerability

No description provided by source. || | | Web directory script v1.5.3 site Remote SQL Injection Vulnerability | | |---------------------Hussin X----------------------| | | Author: Hussin X | | Home : WwW.Hussin-X.CoM | www.tryag.cc/cc | | email: darkangelg85atYahooDoTcom | | | | | | | script :...

Web Directory Script 1.5.3 - site SQL Injection

Web Directory Script 1.5.3 - site SQL Injection || | | Web directory script v1.5.3 site Remote SQL Injection Vulnerability | | |---------------------Hussin X----------------------| | | Author: Hussin X | | Home : WwW.Hussin-X.CoM | www.tryag.cc/cc | | email: darkangelg85atYahooDoTcom | | | | | | ...

Web Directory Script 1.5.3 - 'site' SQL Injection

|| | | Web directory script v1.5.3 site Remote SQL Injection Vulnerability | | |---------------------Hussin X----------------------| | | Author: Hussin X | | Home : WwW.Hussin-X.CoM | www.tryag.cc/cc | | email: darkangelg85atYahooDoTcom | | | | | | | script :...

Web Directory Script 1.5.3 (site) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================= Web Directory Script 1.5.3 site SQL Injection Vulnerability ============================================================= || | | Web directory script v1.5.3 site Remote SQL...

webdirscript-sql.txt

|| | | Web directory script v1.5.3 site Remote SQL Injection Vulnerability | | |---------------------Hussin X----------------------| | | Author: Hussin X | | Home : WwW.Hussin-X.CoM | www.tryag.cc/cc | | email: darkangelg85atYahooDoTcom | | | | | | | script :...

Sql injection

SQL injection vulnerability in listingview.php in Web Directory Script 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the name parameter...

CVE-2008-3787

SQL injection vulnerability in listingview.php in Web Directory Script 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the name parameter...

CVE-2008-3787

Summary: CVE-2008-3787 affects Web Directory Script ≤ 2.0. It exposes a vulnerability in listing_view.php where the name parameter can be used for SQL injection, allowing remote attackers to execute arbitrary SQL commands. The CVSS v2 base score is 7.5 (HIGH) with network access, low attack compl...

CVE-2008-3787

SQL injection vulnerability in listingview.php in Web Directory Script 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the name parameter...

wds-sql.txt

Web Directory Script = 2.0 SQL Injection Vulnerability Author: !DoktOR! Contact: coder5attopmail.kz Home Page: www.antichat.ru Date found: 23.08.08 Product: Web Directory Script Version: 2.0 Download script: http://rapidshare.com/files/121448809/W3bDirScr2-nullscript.net.rar Password:...

Web Directory Script <= 2.0 (name) SQL Injection Vulnerability

No description provided by source. Web Directory Script = 2.0 SQL Injection Vulnerability Author: !DoktOR! Contact: coder5attopmail.kz Home Page: www.antichat.ru Date found: 23.08.08 Product: Web Directory Script Version: 2.0 Download script:...

Web Directory Script 2.0 - name SQL Injection

Web Directory Script 2.0 - name SQL Injection Web Directory Script = 2.0 SQL Injection Vulnerability Author: !DoktOR! Contact: coder5attopmail.kz Home Page: www.antichat.ru Date found: 23.08.08 Product: Web Directory Script Version: 2.0 Download script:...

Web Directory Script <= 2.0 (name) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================== Web Directory Script Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 0 -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-1...

Web Directory Script 2.0 - 'name' SQL Injection

Web Directory Script = 2.0 SQL Injection Vulnerability Author: !DoktOR! Contact: coder5attopmail.kz Home Page: www.antichat.ru Date found: 23.08.08 Product: Web Directory Script Version: 2.0 Download script: http://rapidshare.com/files/121448809/W3bDirScr2-nullscript.net.rar Password:...

LiteNews 0.1 - id SQL Injection

LiteNews 0.1 - id SQL Injection litenews-01 = 1.2 Remote sql injection Download : http://webscripts.softpedia.com/scriptDownload/LiteNews-Download-43228.htmldownloadlocations Injection Adress : http://Sitename/litenew//index.php?mode=view&id= code sql you need to crypt the directory of settings.p...

ExtremeZ-IP Multiple Remote Flaws

Binary data 4371.prm...

phpCMS 1.2.2 (parser.php file) Remote File Disclosure Vulnerability

No description provided by source. Digital Security Research Group DSecRG Advisory DSECRG-08-005 Application: phpCMS Versions Affected: 1.2.2 Vendor URL: http://www.phpcms.de Bug: Remote File Disclosure, Get admin password Exploits: YES Reported: 10.01.2008 Vendor response: 12.01.2008 Date of...

hc-multi.txt

Title: Multiple Security Bugs In Hosting Controller Critical: Extremely critical Impact: Full system administrator access Vendor: Hosting Controller Version: 6.1 Hot fix = 3.3 Vendor URL: www.hostingcontroller.com Solution: N/A From company - There is temporary solution in this report Exploit:...