CVE-2008-4185: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in webCMS Portal Edition allows remote attackers to execute arbitrary SQL commands via the id parameter in a documentos action, a different vector than CVE-2008-3213...

CVE-2008-4186: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in webCMS Portal Edition allows remote attackers to execute arbitrary SQL commands via the iddoc parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2008-4184: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in index.php in webCMS Portal Edition allows remote attackers to inject arbitrary web script or HTML via the patron parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

WebCMS Portal Edition (index.php id) Blind SQL Injection Exploit

No description provided by source. !/usr/bin/perl -W webCMS Portal Edition index.php id Blind SQL Injection Exploit url: webcms.es Author: JosS mail: sys-projectathotmaildotcom site: http://spanish-hackers.com team: Spanish Hackers Team - SHT h4x0rz:/home/joss/Desktop perl o.pl -u...

webcmsportal-blindsql.txt

!/usr/bin/perl -W webCMS Portal Edition index.php id Blind SQL Injection Exploit url: webcms.es Author: JosS mail: sys-projectathotmaildotcom site: http://spanish-hackers.com team: Spanish Hackers Team - SHT h4x0rz:/home/joss/Desktop perl o.pl -u...

WebCMS Portal Edition (index.php id) Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ================================================================ WebCMS Portal Edition index.php id Blind SQL Injection Exploit ================================================================ !/usr/bin/perl -W webCMS Portal Edition...

WebCMS Portal Edition - id Blind SQL Injection

WebCMS Portal Edition - id Blind SQL Injection !/usr/bin/perl -W webCMS Portal Edition index.php id Blind SQL Injection Exploit url: webcms.es Author: JosS mail: sys-projectathotmaildotcom site: http://spanish-hackers.com team: Spanish Hackers Team - SHT h4x0rz:/home/joss/Desktop perl o.pl -u...

WebCMS Portal Edition - 'id' Blind SQL Injection

!/usr/bin/perl -W webCMS Portal Edition index.php id Blind SQL Injection Exploit url: webcms.es Author: JosS mail: sys-projectathotmaildotcom site: http://spanish-hackers.com team: Spanish Hackers Team - SHT h4x0rz:/home/joss/Desktop perl o.pl -u...

Sql injection

SQL injection vulnerability in secciones/tablon/tablon.php in WebCMS Portal Edition allows remote attackers to execute arbitrary SQL commands via the id parameter to portal/index.php in a tablon action. NOTE: some of these details are obtained from third party information...

CVE-2008-3213

SQL injection vulnerability in secciones/tablon/tablon.php in WebCMS Portal Edition allows remote attackers to execute arbitrary SQL commands via the id parameter to portal/index.php in a tablon action. NOTE: some of these details are obtained from third party information...

CVE-2008-3213

SQL injection vulnerability in secciones/tablon/tablon.php in WebCMS Portal Edition allows remote attackers to execute arbitrary SQL commands via the id parameter to portal/index.php in a tablon action. NOTE: some of these details are obtained from third party information...

CVE-2008-3213

The provided connected documents confirm a SQL injection vulnerability in WebCMS Portal Edition specifically in secciones/tablon/tablon.php, exploitable via the id parameter passed to portal/index.php in a tablon action. The root cause is unsanitized input leading to arbitrary SQL execution. Repo...

CVE-2008-3213: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in secciones/tablon/tablon.php in WebCMS Portal Edition allows remote attackers to execute arbitrary SQL commands via the id parameter to portal/index.php in a tablon action. NOTE: some of these details are obtained from third party information...

webcms-sql.txt

Viva IslaM Viva IslaM Remote SQL InjEcti0n Vulnerability WebCMS Portal index.php menu AuTh0r : Mr.SQL H0ME : WwW.PaL-HaCkEr.CoM && WwW.AtsDp.CoM/f Email : [email protected] SYRIAN Arab HACkErS Name : WebCMS Portal Site : www.webcms.es -:: L!VE DEMO ::-...

WebCMS Portal Edition 'index.php' SQL注入漏洞

BUGTRAQ ID: 30204 CNCAN ID：CNCAN-2008071502 WebCMS Portal Edition是一款基于PHP的WEB应用程序。 WebCMS Portal Edition不正确处理用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，可能获得敏感信息或操作数据库。 问题由于'index.php'脚本对用户提交给'id'参数缺少过滤，构建恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息或操作数据库。 WebCMS Portal Edition 目前没有解决方案提供： http://www.webcms.es/...

WebCMS Portal Edition (id) Remote SQL Injection Vulnerability

No description provided by source. Viva IslaM Viva IslaM Remote SQL InjEcti0n Vulnerability WebCMS Portal index.php menu AuTh0r : Mr.SQL H0ME : WwW.PaL-HaCkEr.CoM : : WwW.AtsDp.CoM Email : [email protected] SYRIAN Arab HACkErS Name : WebCMS Portal Site : www.webcms.es -:: L!VE DEMO ::-...

WebCMS Portal Edition (id) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================= WebCMS Portal Edition id Remote SQL Injection Vulnerability ============================================================= Viva IslaM Viva IslaM Remote SQL InjEcti0n Vulnerabilit...

WebCMS Portal Edition - 'id' SQL Injection

Viva IslaM Viva IslaM Remote SQL InjEcti0n Vulnerability WebCMS Portal index.php menu AuTh0r : Mr.SQL H0ME : WwW.PaL-HaCkEr.CoM && WwW.AtsDp.CoM/f Email : [email protected] SYRIAN Arab HACkErS Name : WebCMS Portal Site : www.webcms.es -:: L!VE DEMO ::-...

WebCMS Portal Edition - id SQL Injection

WebCMS Portal Edition - id SQL Injection Viva IslaM Viva IslaM Remote SQL InjEcti0n Vulnerability WebCMS Portal index.php menu AuTh0r : Mr.SQL H0ME : WwW.PaL-HaCkEr.CoM && WwW.AtsDp.CoM/f Email : [email protected] SYRIAN Arab HACkErS Name : WebCMS Portal Site : www.webcms.es -:: L!VE DEMO ::-...

CVE-2007-5318

Unspecified vulnerability in preview.php in TYPOlight webCMS 2.4.6 allows remote attackers to download arbitrary files via the src parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...