10 matches found
phpTrafficA <= 1.4.2 (pageid) Remote SQL Injection Vulnerability
No description provided by source. Application: phpTrafficA = 1.4.2 Web Site: http://soft.zoneo.net/phpTrafficA/ Versions: all Platform: linux, windows Bug: injection sql ------------------------------------------------------- 1 Introduction 2 Bug 3 Proof of concept 4 Credits =========== 1...
Open Web Analytics 'owa_email_address'参数SQL注入漏洞
BUGTRAQ ID: 64774 CVECAN ID: CVE-2014-1206 Open Web Analytics是一个开源的网站流量统计系统。 Open Web Analytics 1.5.4及更早版本没有正确过滤index.php的"owaemailaddress"参数("owado"设置为"base.passwordResetForm","owaaction"设置为"base.passwordResetRequest"),在实现上存在安全漏洞,可导致注入任意SQL代码。 0 Open Web Analytics Open Web Analytics = 1.5.4 Open...
PHPStat 2.0 remote code execution vulnerability-vulnerability warning-the black bar safety net
phpStat is a professional web site traffic statistics software system that provides website Log analysis, web data analysis, user behavior analysis system,to provide customers with in-depth excavation of the site of flow cross-Data Report. In visitor behavior analysis,web marketing analysis, and...
SA-CONTRIB-2010-024 - eTracker - Cross Site Scripting
The eTracker module provides integration of a Drupal site with the eTracker web traffic analysis service and takes the current URL as a parameter to track what pages have been visited. The URL from the browser is forwarded to JavaScript in the current page, and because the URL wasn't sanitised, i...
phpTrafficA <=1.4.3 Admin Login Bypass
-=--------------------ADVISORY-------------------=- phpTrafficA =1.4.3 Author: CorryL [email protected] -=-----------------------------------------------=- -=+ Application: phpTrafficA -=+ Version: =1.4.3 -=+ Vendor's URL: http://soft.zoneo.net/phpTrafficA/index.php -=+ Platform: WindowsLinuxUni...
phptraffica143-bypass.txt
-=--------------------ADVISORY-------------------=- phpTrafficA =1.4.3 Author: CorryL [email protected] -=-----------------------------------------------=- -=+ Application: phpTrafficA -=+ Version: =1.4.3 -=+ Vendor's URL: http://soft.zoneo.net/phpTrafficA/index.php -=+ Platform:...
phpTrafficA < 1.4.2
Application: phpTrafficA 1.4.2 Web Site: http://soft.zoneo.net/phpTrafficA/ Versions: all Platform: linux, windows Bug: injection sql , xss , full path ------------------------------------------------------- 1 Introduction 2 Bug 3 Proof of concept 4 Credits =========== 1 Introduction ===========...
phpTrafficA <= 1.4.2 (pageid) Remote SQL Injection Vulnerability
No description provided by source. Application: phpTrafficA = 1.4.2 Web Site: http://soft.zoneo.net/phpTrafficA/ Versions: all Platform: linux, windows Bug: injection sql ------------------------------------------------------- 1 Introduction 2 Bug 3 Proof of concept 4 Credits =========== 1...
phpTrafficA <= 1.4.2 (pageid) Remote SQL Injection Vulnerability
Exploit for unknown platform in category web applications ================================================================ phpTrafficA load some file as /etc/passwd or /path/www/stats/Php/configsql.php ?lang= is also vulnerable to xss attacks, and as Hamid Ebadi has mention $lang is also vulnerab...
phpTrafficA 1.4.2 - 'pageid' SQL Injection
Application: phpTrafficA load some file as /etc/passwd or /path/www/stats/Php/configsql.php ?lang= is also vulnerable to xss attacks, and as Hamid Ebadi has mention $lang is also vulnerable to directory transversal ===== 4Credits ===== laurent gaffie contact : [email protected] milw0rm.com...