This vulnerability allows an attacker to inject arbitrary SQL commands into the vulnerable application. The attacker can use this vulnerability to gain access to the database, modify data, or execute system commands. The vulnerable parameter is the 'catagorie' parameter in the 'jokes.php' script. By manipulating the parameter, an attacker can inject arbitrary SQL commands into the application.
There is a SQL Injection in '/forums/attach-file.asp' in 'attachmentid' parameter. There is a XSS in '/admin/impersonate.asp'. There is a SQL Injection in '/profile/controlpanel.asp' in 'invisible' and 'timeoffset' parameters. There is a XSS in 'send-private-message.asp' which needs authentication.
An exploit exists in PHPizabi that allows a user using a specially crafted post to disclose user credentials as well as any other information within the database. Using the following format in a post to a users profile will disclose the corresponding field from that users entry in the database. {user.DATABASEFIELD}. The breakdown: template.class.php function AssignUser lines 104-108. Vulnerable code is found in line 106. So the basic process is as this. Register on PHPizabi site, post a 'comment' on the users profile whos credentials you want to obtain ie the admin. Being like so {user.password}. When viewing the profile, click the comments tab and then click 'View all comments'. This will disclose the md5 hashed password from the database.
RunCms MyArticles Module 0.6 Beta-1 is vulnerable to a remote SQL injection vulnerability. An attacker can exploit this vulnerability by sending a specially crafted HTTP request to the vulnerable application. This can allow the attacker to gain access to the database and execute arbitrary SQL commands.
Angelo-Emlak v1.0 is vulnerable to multiple remote SQL injection attacks. An attacker can exploit this vulnerability by sending malicious SQL queries to the vulnerable application. This can allow the attacker to gain access to sensitive information stored in the database, such as user credentials and other confidential data. The attacker can also execute arbitrary code on the server.
Clever Copy 'postview.php' is vulnerable to SQL injection. An attacker can exploit this vulnerability to gain access to the database and extract sensitive information such as usernames and passwords. This vulnerability is due to insufficient sanitization of user-supplied input to the 'ID' parameter of the 'postview.php' script. An attacker can exploit this vulnerability by supplying a specially crafted SQL query to the 'ID' parameter of the 'postview.php' script.
cm4p 0.6.1 is vulnerable to multiple remote file include vulnerability. Attackers can exploit this vulnerability by sending a maliciously crafted HTTP request to the vulnerable server. This can allow attackers to execute arbitrary code on the server.
If magic_quotes_gpc is set to off, an attacker can exploit a vulnerability in Postnuke Mod pnFlashGames to gain access to the database. For versions older than 2, the attacker can use the index.php?module=pnFlashGames&func=display&id=-1+union+select+concat(pn_uname,char(58),pn_pass),1,2,3,4,5,6,7,8+from+nuke_users+where+uid=2/* URL to exploit the vulnerability. For versions 1.5 to 2.5, the attacker can use a code snippet to exploit the vulnerability.
A vulnerability exists in com_joomla-visites version 1.1 RC2, which allows an attacker to include a remote file by sending a specially crafted request to the vulnerable file 'administrator/components/com_joomla-visites/core/include/myMailer.class.php'. The vulnerable code is 'require_once $mosConfig_absolute_path . '/includes/phpmailer/class.phpmailer.php';' which allows an attacker to include a remote file by sending a specially crafted request to the vulnerable file.
An arbitrary file overwrite has been discovered in an ActiveX control installed with the WatchFire Appscan v 7.0. The vulnerability is caused due to the use of insecure methods in the ActiveX control. This can be exploited to overwrite arbitrary files on the affected system by a remote attacker.
Services By CQR